Privacy Policy
Effective: 2026-10-07 · Last updated: 2026-10-17
This policy explains what FitCheck ("FitCheck", "we", "us") collects when you use fitcheck.me, the fitcheck.me app for iPhone, and the emails we send (together, the "Service"), how we use it, who we share it with, and the choices you have. It is written to be read. If anything is unclear, write to support@fitcheck.me.
The short version
- You upload an outfit photo; we analyze it to give you styling feedback. The photo and the analysis are yours to delete at any time.
- We estimate skin and hair tone from your photo (where a face and hair are visible) to recommend colors. We do not use facial recognition, do not create face templates, and cannot identify you from a photo.
- We send your photo to two machine-learning providers (OpenAI and Google) to produce your results. Their business terms do not allow them to train their models on your content.
- We do not sell your personal information, do not show ads, and do not share your information for advertising.
- Checks made without an account are deleted automatically after 90 days. Deleting your account deletes your data.
1. Information we collect
1.1 Information you give us
- Photos. Outfit photos you upload for a fit check, add to a board, or add to your closet, and reference photos you add to a board you host.
- Inputs about the check. The setting, signal, and risk you choose, an optional note, ratings you give results, and comments or reactions you leave.
- Account details. If you create an account: a username, email address, and password (stored only as a one-way hash). Optionally: a display name, a phone number and country code, a shopping department preference, and your email preferences.
- Google sign-in. If you sign in with Google, Google sends us your Google account ID, name, email address, and whether that email is verified. We do not receive your Google password.
- Sign in with Apple. If you sign in with Apple, Apple sends us a stable Apple user ID, your email address (which may be an Apple private relay address) and whether it is verified, and the name you choose to share the first time you sign in. We keep an encrypted Apple token only so we can revoke the link when you delete your account. We do not receive your Apple ID password.
- Board content. Board titles, prompts, dress codes, locations, reference images and palettes, fits you contribute, votes, swipes, RSVPs, reactions, comments, custom emoji, and the display name you use on a board.
- People you invite. If you invite someone to a board by email, phone number, or username, we store that contact so we can show who is invited and deliver invitations or reminders. Only invite people who would expect to hear from you.
- Messages and reports. Anything you send to support, and reports you file about content.
1.2 Information we derive from your photos
To produce your results we run automated analysis on each photo. The outputs are stored with the check so your results stay available:
- Garment data. A background-removed cutout of the outfit, per-garment crops, and labels describing each garment (category, color, pattern, fit, and similar attributes).
- Color data. Measured colors of your garments and, where a face and hair are visible, an estimate of your skin tone and hair tone expressed as color values, plus the seasonal color palette we derive from them. These are color measurements, not identity data. See section 3.
- Feedback. Scores, written feedback, suggested upgrades, and a style archetype produced by our scoring models.
- Generated images. If you use Visualize, an edited version of your photo that applies the suggested changes. If you use the closet, flat-lay renders of individual garments.
- Style profile. Aggregates across your checks (your most common archetype, color season, strengths, and recurring gaps) if you have an account.
1.3 Information collected automatically
- Usage data. Which pages you visit, which actions you take, and whether they succeed. We collect this with Google Analytics and our own first-party event log. Events carry a random visitor ID, the route pattern (never the share token or your note), device type, referrer, and campaign tags. If you are signed in, events are tied to your account. We keep usage data for up to 14 months and never include your photos, notes, email address, or private links in it.
- Device and connection data. IP address, browser and operating system. We use IP addresses for rate limiting, abuse prevention, and security logs.
- App and device identifiers (app only). When you open the fitcheck.me app we create a random app session ID and record the platform (iOS), the app build number, and your phone's model name (for example "iPhone 16 Pro"), so you can see and sign out of your signed-in phones in the app. We do not collect your phone's name, the advertising identifier (IDFA), or your contacts, and we do not track you across other companies' apps or websites.
- Crash and diagnostics data (app only). If the app crashes or hits an error, it sends a crash report (stack trace, app version and build, phone model, and iOS version) and app-health session data to Sentry. These reports are not linked to your account, and we strip sign-in tokens and private links from them before they are sent.
- Camera and photos (app only). The app uses the camera only when you take an outfit photo, opens your photo library only when you choose a photo, and adds to Photos only when you save an image. The app never uses the microphone.
- Cookies and similar technologies. See section 6.
1.4 Information from other people
If someone adds a photo that includes you to a board, or shares a results link with you, we hold that photo on their behalf. If you believe a photo of you was uploaded without your consent, report it from the page or write to us and we will remove it.
2. How we use information
- To run the Service. Analyze your photos, produce and store your results, build your closet and style profile, suggest outfits, run boards, and deliver share links and share images.
- To keep the Service safe. Every uploaded photo and every comment is screened automatically for prohibited content, and may be reviewed by our team if it is flagged, reported, or sampled for quality. We also use usage and device data to detect abuse, enforce rate limits, and protect accounts.
- To communicate with you. Account emails (confirmation, password reset), board reminders, replies to your messages, and notices about changes to the Service or these terms. Product updates only if you opt in; every non-essential email has an unsubscribe link.
- To improve the Service. We study usage data, ratings, and feedback in aggregate to understand which features help and to tune our prompts and scoring. We may review a sample of results internally for quality. We do not use your photos to train machine-learning models, our own or anyone else's.
- To comply with law and to establish, exercise, or defend legal claims.
We do not show advertising, do not build advertising profiles, and do not use any of this information to target you with ads.
3. Sensitive information: skin tone, appearance, and the limits of our analysis
Outfit photos show your appearance. Our color analysis measures the color of exposed skin and hair in the photo to estimate an undertone and a seasonal palette. We want to be precise about what this is and is not:
- It is a color measurement used only for color recommendations. It is stored with the check and deleted with it.
- We never use it, or anything else in a photo, to infer or record your race, ethnicity, health, age, gender, or any other characteristic, and never for advertising or segmentation.
- We do not use facial recognition, do not measure face geometry, and do not create any biometric template or identifier. Nothing we store can identify you from a photo or match you across photos.
- Our feedback is automated opinion about clothing. It produces no legal effect and no decision that significantly affects you, and you can always ask a person at support@fitcheck.me to review a result.
4. How we share information
We share personal information only in the ways described here.
4.1 Service providers
These companies process data on our behalf, under contracts that limit them to providing their service to us:
| Provider | What they do for us | What they receive |
|---|---|---|
| Amazon Web Services | Hosting, photo and image storage, transactional email | Everything we store; email addresses we send to |
| Supabase | Database hosting and account email delivery (confirmation and password reset) | Account records and your data; your email address |
| OpenAI | Outfit scoring and written feedback, backup garment labelling, image edits for Visualize, automated content screening | Your photo, your check inputs, and text you post |
| Google (Gemini) | Garment detection and labelling, and flat-lay rendering | Your photo and garment crops |
| Google Analytics | Usage measurement | Usage and device data (section 1.3) |
| Google Sign-In | Authentication, if you choose it | Your sign-in request |
| Apple | Sign in with Apple, if you choose it, and app distribution (App Store and TestFlight) | Your sign-in request |
| Expo (EAS Update) | Delivers updates to the app | Your IP address, the app version and platform, and a random install ID the app sends each time it checks for an update; never your photos or account details |
| Sentry | Crash and error reporting for the app | Crash reports and app-health data (section 1.3) and the connection's IP address; not linked to your account |
| Cloudflare (Turnstile) | Bot protection on sign-up | Browser signals and IP address during the challenge |
| SerpApi | Shopping results for gaps in your closet | Search terms built from garment descriptions and your department preference, never your photos |
| Pexels and Giphy | Board wallpaper and GIF search | The search terms you type |
| Twilio | Text-message verification codes, where phone verification is offered | Your phone number |
OpenAI and Google process your photos through their business and developer platforms, whose terms prohibit using customer content to train their models. We will update this table whenever a provider changes.
4.2 Other people, by your choice
- Boards. Fits you add to a board are visible to that board's members and to anyone the host shares the board link with. Your scores and written feedback stay private to you unless you choose to show them. Comments, reactions, and your display name are visible to the board.
- Share links and images. Results pages, boards, and recap images are reachable by anyone who has their link. A share image for a results page shows your photo. Links are long and random and are not listed anywhere, but anyone you send one to can forward it.
- Image addresses. Photos and generated images are stored at long, random, unguessable web addresses so that pages and share images can load them. Anyone holding the exact address of an image can view it. Deleting a check or your account removes the files.
4.3 Legal, safety, and corporate
- When required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect someone's safety, prevent fraud or abuse, or protect our rights.
- If FitCheck is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- With your direction or consent.
We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising. We never have.
5. How long we keep information
| Data | Kept |
|---|---|
| Checks made without an account | 90 days from upload, then deleted automatically, unless you save the check to an account or add it to a board |
| Checks, closet, boards, and profile in an account | Until you delete the item or the account |
| Accounts that never confirm their email | 7 days, then deleted |
| Usage data (first-party log and Google Analytics) | Up to 14 months; deleted sooner when you delete your account |
| Security and server logs, including IP addresses | A short period for security and debugging |
| Reports, moderation records, and admin audit logs | As long as needed for safety and to show we handled reports properly |
| Email unsubscribe list | Indefinitely, so we keep honoring it |
| Backups | Deleted data may persist in backups for up to 30 days |
| App sessions (app only) | Signed-in sessions until you sign out or delete your account, or after 180 days without use; signed-out sessions after 7 days without use, or 365 days if you made a check with them; a signed-out phone's record is kept 7 days after sign-out |
| App crash reports | Kept by Sentry for a limited period |
6. Cookies and similar technologies
| Name | Purpose | Lasts |
|---|---|---|
session (FitCheck) | Keeps you signed in, protects forms against forgery, holds a random visitor ID for checks made without an account, and remembers whether you agreed to the notice shown before your first check | 30 days when signed in, 30 days after you agree to that notice; otherwise until you close the browser |
_ga, _ga_* (Google Analytics) | Distinguishes visitors for usage measurement | Up to 2 years |
| Cloudflare Turnstile | Bot protection on the sign-up page | Set by Cloudflare for the challenge |
fc_shell (FitCheck) | Tells the site it is running inside an earlier version of our iPhone app | While you use the app |
__Host-fc_app_sid (FitCheck) | Keeps you signed in on the web screens inside the fitcheck.me app | 30 days |
| Browser storage | Remembers interface preferences such as your default view | Until you clear it |
We use no advertising cookies. You can block cookies in your browser; the Service will still work for checks without an account, but you will not stay signed in. We do not respond to "Do Not Track" signals because there is no agreed standard for them. We treat a Global Privacy Control signal as an opt-out of any sale or sharing of personal information, which we do not do in any case.
7. Your choices and rights
7.1 Controls built into the Service
- Delete a check. "Delete this check" on any results page permanently removes the photo, its analysis, generated images, the share link, and any copy of that look on a board, within seconds.
- Delete your account. In the app (You tab) or in Settings on the web. This deletes your checks, closet, boards you host, your fits and comments on other people's boards, your style profile, your usage data, and your account record. It cannot be undone. How account deletion works.
- Edit your details. Username, display name, email, phone, and department preference are editable in Settings.
- Emails. Turn product emails off in Settings, or use the unsubscribe link in any non-essential email. We will still send emails required to run your account, such as password resets.
- Boards. Remove a fit you added, leave a board, or (as host) remove members and content.
7.2 Rights you can exercise by contacting us
Wherever you live, you can ask us to tell you what personal information we hold about you, give you a copy of it in a portable format, correct it, delete it, or stop using it for a particular purpose. Email support@fitcheck.me from the address on your account, or include enough information for us to find your data (for checks without an account, the results link). We respond within 30 days, or within 45 days where the law allows and we tell you we need more time. We will not treat you differently for exercising a right. If we refuse a request, we will say why, and you can ask us to reconsider.
7.3 United States state privacy laws
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have the rights in section 7.2 to the extent those laws apply to FitCheck. For California residents: in the preceding 12 months we have collected the categories of personal information described in section 1 (identifiers, account details, uploaded photos, derived appearance data that may be considered sensitive personal information, internet activity, and inferences such as style profile), from the sources described there, for the purposes in section 2, and disclosed them to the service providers in section 4.1 for business purposes. We have not sold or shared personal information. We use sensitive personal information only to provide the features you request, and never to infer characteristics about you, so there is no "limit the use of my sensitive personal information" option to exercise. You may use an authorized agent to make a request; we will ask the agent for proof of your authorization and may ask you to confirm it directly.
7.4 European Economic Area, United Kingdom, and Switzerland
FitCheck is operated from the United States, and that is where your information is stored and processed. If you use the Service from the EEA, the UK, or Switzerland, we process your personal data on these legal bases: performance of our contract with you (providing the Service you asked for, including the color analysis that is part of a fit check), our legitimate interests (keeping the Service safe, measuring and improving it, and communicating with you), your consent where we ask for it (for example, product emails), and compliance with legal obligations. Where we rely on consent you can withdraw it at any time. You have the rights in section 7.2 plus the right to object to processing based on legitimate interests and the right to lodge a complaint with your data protection authority. Transfers to the United States rely on standard contractual clauses with our providers and on your request for the Service.
8. Children
FitCheck is not directed to children, and you must be at least 18 to use it. We do not knowingly collect personal information from anyone under 18. Do not upload photos of anyone under 18, even your own children. If we learn that we have collected information from a child under 18, or a photo of anyone under 18, we delete it. If you believe this has happened, email support@fitcheck.me.
9. Security
Data moves over encrypted connections (HTTPS) and is encrypted at rest in storage. Passwords are hashed and never stored in plain text. Access to production data is limited to the people who run FitCheck, and admin actions are logged. We rate-limit uploads and sign-ins and screen sign-ups for automation. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur; if a breach affects your information we will notify you and the authorities as the law requires. To report a security issue, email support@fitcheck.me.
10. Where your information is stored
Our servers, database, and photo storage are in the United States (Amazon Web Services and Supabase, US West region). Our model providers process requests in the United States. If you use FitCheck from elsewhere, your information is transferred to and processed in the United States.
11. Links to other sites
Shopping results, reference images, GIFs, and share targets link to other companies' sites. Their privacy practices are their own, and this policy does not cover them.
12. Changes to this policy
When we change this policy we update the date at the top. If a change materially reduces your rights or changes how we use information already collected, we will tell account holders by email or with a notice in the Service before it takes effect, and the change will not apply retroactively without your consent.
13. Contact
Privacy questions, requests, and complaints: support@fitcheck.me or see Contact and support.