Privacy Policy

This policy explains what personal data Outfitto processes, for what purpose, and what rights you have, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law (LOPDGDD).

1. Data controller

• Owner: Daniel Santana Marrero (natural person / sole trader)
• Tax ID (NIF): 78502740Z
• Country: Spain
• Privacy contact email: privacidad@outfitto.app
• Data Protection Officer: not appointed (not legally required for the scale and type of processing of this Service).

2. What data we process

• Account data: name, email address, and password (encrypted).
• Garment photos: images you upload of your clothes for AI analysis.
• Garment photos you send in the chat: if you attach in the chat a photo of an item you do not own yet, we store it with that conversation so we can show you how it would look with your clothes and so you can add it to your wardrobe if you buy it. Any other photo you send in the chat is analysed to answer you and is not stored.
• Face photos (optional): only if you choose to upload them, to generate outfit previews that represent you.
• Body measurements (optional): height, weight, and other measurements you voluntarily enter to refine fit analysis.
• Pinterest screenshots (optional): if uploaded, to detect your preferred styles.
• Style preferences: the styles you mark as favorites.
• Approximate location: city or coordinates you share or enter, used to fetch weather data and tailor outfit recommendations.
• Usage data: chat interactions, generated outfits, garments marked as worn, and statistics derived from this data.
• Feedback you send us: if you use the feedback button in the app, the type of feedback (opinion, bug or idea), the text you write and the app screen you send it from, linked to your account. No screenshot is sent.
• Technical data: IP address, device type, and cookies, as described in the Cookie Policy.

Specifically about your face photos and body measurements: they are never used for anything other than what is described in this policy (generating outfit previews and analyzing how your garments fit). We do not sell them, we do not share them with third parties for commercial, advertising, or third-party AI training purposes, and they are not shared with anyone beyond Google Gemini (see section 4), strictly to process the specific request you make at that moment.

3. Purpose and legal basis

• Providing the Service (cataloging garments, generating outfits, chatting with Fitto): performance of the usage contract.
• Uploading face photos and Pinterest screenshots: your explicit consent, which you can withdraw at any time by deleting the photos from your profile.
• Fetching weather for recommendations: performance of the contract, using minimal location data.
• Website usage analytics (non-essential cookies): your consent, managed through the cookie banner.
• Handling your feedback and improving the Service (reading the opinions, bug reports and ideas you send, fixing problems and, where needed, replying to you): legitimate interest in maintaining and improving the Service. Sending feedback is voluntary.
• Security and abuse prevention: legitimate interest.

4. Who we share your data with

We do not sell your data. We share it only with providers that help us operate the Service, acting as data processors:

• Hosting and infrastructure: our own server (VPS) contracted with OVHcloud, located in France (European Union). The application server, database, and storage for your photos and images are hosted there; we do not use any external cloud storage service (such as AWS S3 or similar) for your content.
• Google Gemini (Google LLC, USA): for garment analysis, outfit generation, the Fitto chat, and outfit visualization. The photos and text necessary for each operation are sent to this provider to process your request. We use the paid Gemini API (with active billing), which means Google does not use your data to train its models and there is no human review of your content except in automatically detected abuse cases. The transfer to the US is covered by Google Cloud's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses.
• Meteosource (Czech Republic, European Union): receives your approximate location to fetch the weather forecast used in outfit recommendations.
• Resend (USA): sends transactional emails (account verification, password recovery). It receives your email address and name solely for that purpose.
• Telegram: when you create an account, your name is sent to an internal Telegram channel as a notification for the team (not a public channel). It is also used for internal technical alerts that do not include personal data.
• Google Analytics (via Google Tag Manager): only if you accept analytics cookies in the cookie banner.

The providers above located outside the European Economic Area (Google, Resend, Telegram) process your data under the safeguards provided by GDPR for international transfers, such as the European Commission's Standard Contractual Clauses.

5. Retention period

We keep your personal data for as long as your account remains active. Specific periods by data type:

• Account data and content (garments, photos, outfits, measurements, chat history, the garment photos you have sent in it and the outfit images generated in it, and the feedback you have sent us): for as long as the account is active. Feedback is stored in our own database, is not shared with third parties and is deleted when you delete your account. You can delete your chat history, including its images, from the chat itself at any time.
• Chat images (the garment photos you send and the outfit images generated in it): 6 months from the message they belong to. After that they are deleted automatically; the text of the conversation is kept.
• Inactive accounts: if 6 months go by without you signing in, we delete the account and all its content. We email you 30 days beforehand; signing in within that period is enough to keep it.
• Technical and security logs (access, abuse prevention): up to 12 months from creation.
• Billing data (once a paid plan exists): for the period required by Spanish tax law, currently 6 years.
• Support and inquiry emails: up to 24 months from the last contact, unless a claim requires keeping them longer.

If you delete your account via "Delete my account" in your profile, your account data and content are permanently and immediately deleted, from both the database and file storage — we do not keep backups of your account after deletion, unless the law requires us to retain certain information longer (for example, billing data).

6. Your rights

You can exercise the following rights over your data at any time:

• Access: know what data we process about you.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your data (also available directly via "Delete my account" in your profile).
• Objection and restriction: object to a specific processing activity or ask us to restrict it.
• Portability: receive your data in a structured, commonly used format.

To exercise these rights, write to privacidad@outfitto.app. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with your local supervisory authority, if you believe the processing does not comply with applicable regulation.

7. Minors

The Service is not directed at users under 16. If we detect an account belonging to a minor without guardian consent, we will delete it.

8. Security

We apply reasonable technical and organizational measures (password encryption, access control via authentication, and an ownership check on every operation) to protect your data against unauthorized access, loss, or alteration.

9. Changes to this policy

We may update this policy to reflect legal or Service changes. The date of the last update is shown at the top of this page. If the change is substantial — for example, a new provider processing your data beyond those described in section 4, or a new processing purpose — we'll notify you at least 30 days in advance by email before it takes effect.