Privacy

Who we are

Fitted is a digital wardrobe and outfit planner operated by the Fitted team. For privacy questions or DPDP requests, email harshkeshari100@gmail.com.

What we collect

• Account identity — email, name, and avatar from Google Sign-In (we do not store passwords).
• Clothing photos — originals you upload, plus a processed version when background removal or ghost-mannequin processing succeeds.
• Fitted data — items, tags, outfits, and calendar plans you create.
• Product metrics — onboarding and capture timing events so we can measure whether the product is fast enough (no advertising profiles).

We do not collect location, contacts, body measurements, or payment card data in the MVP.

Why we collect it

Purpose is limited to running Fitted for you: digitizing clothes you already own, building and planning outfits, and improving capture speed. We do not sell personal data. We do not use your photos to train public AI models.

Consent

Signing in with Google creates your account. Camera and photo-library access are requested only when you add clothes, with a plain-language explanation first. You can refuse permissions and still use the app with existing items; capture features need the permission you grant.

Your photos

Clothing photos may incidentally show faces, rooms, or other people. We treat every user photo as sensitive personal data. Photos are stored under user-scoped keys, encrypted in transit, and served only through short-lived authenticated URLs. There are no public photo links and no sharing features in the MVP — everything is private by default.

Third-party processing

When you upload a photo you choose a process mode:

• Cutout — background removal runs on our servers (self-hosted rembg). Your image stays inside our processing boundary for this path.
• Gemini— optional ghost-mannequin processing via Google Vertex AI. We only enable this path for real users after Zero Data Retention (ZDR) is confirmed in writing. Until then the feature stays off. If it is ever enabled without ZDR, we will update this policy with the vendor's abuse-log retention window before turning it on.

Processors we use must not retain your images for their own training. Sign-in uses Google Identity to verify your account.

How long we keep data

We keep your account and wardrobe data while your account is active. Soft-deleted items remain inaccessible in the product and are purged with account erasure. Server logs used for security and reliability are retained only as long as needed for those purposes.

Your rights (DPDP)

You can:

• Access the profile and wardrobe data in the app
• Correct item details you entered
• Delete individual items, outfits, calendar entries, or your entire account from inside the app
• Withdraw consent by deleting your account and uninstalling the app

For requests we cannot complete in-app, email the contact above. We will respond within a reasonable period consistent with DPDP.

Account deletion

Deleting your account from the app soft-deletes your profile, items, outfits, calendar entries, and related records, and starts wiping photo objects under your storage prefix. Photos and derived wardrobe data are removed from our systems within 24 hours of a confirmed account deletion request (our published erasure SLA). You will see confirmation in the app when deletion is accepted.

Security

Access to the API requires our session token after Google Sign-In. Storage buckets are private. We do not put clothing photos on public CDNs. No security practice is perfect — if we become aware of a personal-data breach, we will notify affected users and, where required, the authorities as DPDP expects.

Children

Fitted is not directed at children under 18. If you believe a minor has created an account, contact us and we will delete it.

Changes

If we change how we process personal data in a material way, we will update this page and the "Last updated" date. For significant changes affecting the beta, we will also note it in the app.

Contact

Privacy and erasure: harshkeshari100@gmail.com