This policy explains how Free VPN Services Ltd ("we", "us") handles personal data when you use Outfitify: the iOS app, the website at outfitify.app and related services (together, the "Service").
Controller: Free VPN Services Ltd, a company registered in England and Wales (company number 15905929), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: hello@freevpnservices.uk
1. What the Service does
Outfitify lets you upload a full-body photo of yourself, turns it into a digital model of you, and shows clothes from your closet or from online stores on that model ("try-ons"). You can also share looks in a community feed and try other people's shared outfits on yourself.
2. Data we collect
Photos and generated images
- The full-body photo you upload to create your model, and the model image we generate from it.
- Photos of clothes you add, product images you import from a store link, and the product link itself.
- The try-on images we generate ("looks").
- A profile photo, if you add one.
Account data
- If you sign in with Apple, Google or an email link: your email address and, where the provider shares it, your name.
- The username, display name and profile photo you choose.
- An account identifier we create, and the identifier of your Firebase account.
- You can use parts of the Service without an account. We then create an anonymous account tied to your device or browser.
Community data
- Looks you share publicly, captions, likes, comments, follows, blocks and reports.
Device and technical data
- An installation identifier, the device platform (iOS or web), app version and language.
- A push notification token, if you allow notifications.
- IP address, request logs and error reports (for security, abuse prevention and fixing bugs).
- App integrity signals from Apple App Attest (iOS) and Google reCAPTCHA (web), used to confirm requests come from our genuine apps.
Consent records
- If you try on swimwear or underwear, we record that you confirmed the photo is of you (or that you have the person's consent) and that you are 18 or older, together with the time, your IP address and browser/app information.
Purchases and credits
- Your credit balance and subscription status.
- When paid plans are available: purchase records from Apple (App Store) or Stripe (web). We do not receive or store your full card details.
3. Why we use your data (and our legal bases)
| Purpose | Legal basis (UK GDPR / EU GDPR) |
|---|---|
| Creating your model and try-ons, storing your closet and looks, running your account | Performance of our contract with you |
| Showing looks you choose to share in the feed, comments, follows | Performance of contract; your choice to publish |
| Swimwear and underwear try-ons | Your explicit confirmation and consent |
| Push notifications (for example, "your look is ready") | Your consent (you can turn them off in iOS Settings) |
| Preventing abuse and fraud, securing the Service, enforcing our Terms, handling reports | Our legitimate interests |
| Fixing bugs and improving reliability (error reports, aggregated usage) | Our legitimate interests |
| Payments, tax and accounting records | Contract; legal obligation |
Your photos are not used to train AI models. We use them only to provide the Service to you.
Body and appearance data. Your photos show your face and body. We do not use them to identify you, to infer health, ethnicity or other special categories of data, or for any purpose other than creating your model and looks.
4. Automated processing
Your model and looks are generated automatically by AI image models. Before a model is built, an automated check confirms that the photo shows one person, roughly full body; if not, the model is not built and your credit is returned. These steps do not produce decisions with legal or similarly significant effects on you.
5. Who we share data with
We do not sell your personal data. We share it only with service providers that process it on our behalf, under contracts that require them to protect it:
| Provider | What they do | Location |
|---|---|---|
| Google (Firebase Authentication, Cloud Messaging, App Check) | Sign-in, push notifications, app integrity | USA / EU |
| Google Cloud (Vertex AI, reCAPTCHA) | Generating models and try-on images; web integrity checks | USA |
| Cloudflare (R2 storage and CDN) | Storing photos and images; delivering public images | Global |
| Hetzner Online | Hosting our servers and databases | USA (Oregon) |
| Sentry (Functional Software, Inc.) | Error monitoring | USA |
| Apple | Sign in with Apple, App Store payments | USA |
| Stripe (when web payments launch) | Web payments | USA / EU |
| IAPKit (when paid plans launch) | Credit balances and subscription status | USA (Oregon) |
Public content you share (looks, captions, comments, your username and profile photo) is visible to other users and, for shared looks, on the public web.
We may disclose data if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition (with notice to you).
6. International transfers
Some providers process data outside the UK and the European Economic Area, including in the United States. Where this happens we rely on adequacy regulations (including the UK–US Data Bridge where the provider participates) or on the UK International Data Transfer Addendum / EU Standard Contractual Clauses.
7. How long we keep data
| Data | Retention |
|---|---|
| Model photos and model images | Until you delete the model or your account |
| Closet items and looks | Until you delete them or your account |
| Shared posts, comments | Until you delete them, they are removed by moderation, or you delete your account |
| Anonymous accounts that never sign up or pay | May be deleted after a long period of inactivity |
| Swimwear/underwear consent records | For the life of the account plus up to 3 years, to show the confirmation was given |
| Server logs | Up to 30 days |
| Error reports | Up to 90 days |
| Database backups | Up to 30 days |
| Purchase and tax records | As required by law (generally 6 years in the UK) |
When you request account deletion, we delete your account, photos, models, closet and looks within 30 days, except data we must keep by law. Copies in backups are removed when those backups expire.
8. Your rights
Depending on where you live, you can ask us to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
- In the app: delete looks, closet items and models; request account deletion under Settings → Account.
- By email: hello@freevpnservices.uk. We reply within one month.
You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
9. Children
The Service is only for people aged 18 or older. If you believe someone under 18 has given us personal data, contact us and we will delete it.
10. Security
Photos are stored in private storage and are accessible only through short-lived signed links; only images you choose to share publicly are served openly. Data is encrypted in transit. Access to production systems is restricted. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as required by law.
11. Changes
We will post changes on this page and update the date above. For significant changes we will notify you in the app or by email.
12. Contact
Free VPN Services Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom hello@freevpnservices.uk