Privacy Policy

Last Updated: July 12, 2026 — effective immediately for all users.

1. Who we are

Wivvy is a personal styling app operated by Wivvy Labs ("Wivvy", "we", "us"). When you use our mobile applications or this website (collectively, the "Service"), Wivvy Labs is the data controller for personal information about you. You can reach us at wivvy@stylewithwivvy.app.

2. Information we collect

We collect the following categories of data to provide Wivvy's features. This list matches the data categories declared in App Store Connect's App Privacy nutrition labels.

2.1 Contact information

• Name — provided during account creation or via Sign in with Apple / Google Sign-In.
• Email address — for account authentication and account-related communications.
• Password — stored as a salted hash if you sign up with email; not stored at all if you use Sign in with Apple or Google Sign-In.
• Country — selected during onboarding, used for regional availability.

2.2 User content

• Photos of your wardrobe items (uploaded by you).
• Descriptions and metadata for your wardrobe items — categories, colors, seasons, and tags you edit.
• Body photos — optional; only collected if you use Try-On, body-type detection, or skin-tone detection.
• Chat messages you send to Wivvy AI — text and image prompts.
• Outfits you create, schedule, or save — combinations and events you plan against them.
• Support correspondence — emails or messages when you contact our team.

2.3 Identifiers

• Wivvy user account ID — assigned by our system.
• Device push notification token — for delivering notifications.
• Subscription identifier — via RevenueCat for subscription management.

2.4 Purchases

• Subscription purchase history — via Apple's In-App Purchase system and RevenueCat. We do not store your payment card details; those stay with Apple or Google.

2.5 Usage and diagnostic data

• Device data — device model, OS version, app version, language, and time zone.
• Usage data — interactions with app features (which screens you view, which features you use) for improving Wivvy.
• Diagnostics — crash reports and performance metrics via Firebase Crashlytics and Firebase Performance Monitoring (if enabled).
• Approximate location — derived from your IP (city-level) to surface weather-aware suggestions. We do not collect precise GPS unless you explicitly grant permission.

2.6 Third-party services we use

Wivvy relies on the following third-party services, each with their own privacy practices:

• OpenAI — AI processing (see AI Processing section below).
• Firebase (Google) — authentication, push notifications, crash reporting, analytics.
• RevenueCat — subscription management.
• Cloudinary and Wasabi S3 — storage of wardrobe photos and uploaded images.
• Apple — In-App Purchases and Sign in with Apple.

Each of these providers has committed to data protection standards equivalent to those described in this privacy policy. You can review their individual privacy practices on their respective websites.

2.7 Information we deliberately do not collect

• Your contact list, SMS, or call history.
• Precise GPS by default.
• Audio from your microphone (the camera-photo flow does not record audio).
• Photos from your gallery beyond the ones you explicitly share with Wivvy.
• Face data of any kind (see Photo Handling section below).

3. How we use your data

We process the data above to:

• Provide the core Service — recognizing items in your closet, generating outfit suggestions, and saving your plans.
• Personalize style recommendations to your tone, body type, and preferences.
• Respond to and improve interactions with Wivvy AI.
• Keep the Service safe — detect abuse, fraud, and policy violations.
• Communicate with you about updates, important notices, and (with your consent) product news.
• Comply with legal obligations.

We do not use your wardrobe photos, style profile, or chats with Wivvy AI to train third-party advertising models. We do not sell your personal information.

4. AI processing and third-party AI services

Wivvy uses artificial intelligence to power its core features including outfit recommendations, virtual try-on, chat-based styling advice, and skin tone and body type detection.

4.1 AI provider

To deliver these features, we send parts of your input to our AI provider, OpenAI, routed through our secure servers. OpenAI processes the data solely to generate the requested result (outfit suggestion, chat reply, try-on image, or detection result).

4.2 What data is sent to our AI provider

• The text of your questions and messages to Wivvy AI Chat
• Photos and descriptions of your wardrobe items when generating outfit recommendations
• Your uploaded body photo when you use AI Try-On, body-type detection, or skin-tone detection features (optional)

4.3 What data is NOT sent to our AI provider

• Your email address
• Your name or username
• Your subscription status or payment information
• Any wardrobe items unrelated to your current AI request
• Any other personally identifying information

4.4 How OpenAI handles your data

OpenAI processes the data only to generate the requested response. Per OpenAI's data processing policies for API users, data submitted through the API is not used to train OpenAI's models. You can review OpenAI's data handling practices at openai.com/policies.

4.5 Your consent

Before Wivvy sends any data to OpenAI, you will be asked to explicitly agree to AI data sharing through an in-app consent prompt. You can revoke your consent at any time in Settings > AI Data Sharing. Revoking consent disables AI features but preserves your wardrobe, outfit history, and other non-AI data.

4.6 Data retention by AI provider

Under OpenAI's API data policy, submitted data may be retained for up to 30 days for abuse monitoring purposes, after which it is deleted from OpenAI's systems. Wivvy does not have access to this retained data.

5. Photo handling and face data clarification

5.1 Body photos

Wivvy's AI Try-On, body-type detection, and skin-tone detection features use body photos that you optionally upload. These photos are used for the following purposes:

• Analyzing clothing appearance and fit for virtual try-on
• Detecting body silhouette proportions for body-type classification (e.g., hourglass, rectangle)
• Analyzing visible skin coloration for skin-tone classification (e.g., warm-medium, cool-light)

5.2 No face data collection

Wivvy does NOT collect, process, store, or use face data as defined by facial recognition or biometric identification systems. Specifically, Wivvy does NOT:

• Perform facial recognition of any kind
• Use Apple's ARKit Face Tracking or Vision face detection APIs
• Extract face landmarks or biometric templates
• Use face data for authentication or identity verification
• Build any biometric profile of the user

Although your face may be visible in an uploaded body photo, the face is not the subject of analysis and no face-specific data is extracted, stored, or shared.

5.3 Photo retention

Your uploaded body photos are:

• Sent securely to our servers over HTTPS
• Forwarded to OpenAI for AI processing
• Deleted from our servers immediately after AI response returns (typically within 5 seconds)
• Never used to build biometric templates
• Never used to train AI models

Only the derived attributes from the photo (e.g., body-type label "hourglass", skin-tone label "warm-medium") are stored in your Wivvy profile. These derived attributes can be deleted at any time by deleting your account in Settings.

6. Legal basis for processing (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data under one of the following legal bases:

• Contract — to provide the Service you have signed up for.
• Legitimate interests — to improve product quality, prevent abuse, and ensure security, weighed against your rights.
• Consent — for optional features (e.g. precise location, marketing emails, AI data sharing). You can withdraw consent at any time.
• Legal obligation — when required by law.

7. When we share data

We share personal information only in these limited circumstances:

• OpenAI (our AI provider) — we send AI-feature inputs to OpenAI to generate outfit suggestions, chat replies, try-on images, and detection results. See §4 AI processing for the full breakdown of what is and isn't sent.
• Service providers — cloud hosting (encrypted at rest), email delivery, analytics, crash reporting, and subscription management (Firebase, RevenueCat, Cloudinary, Wasabi S3, Apple), each bound by data-processing agreements that require protection standards equivalent to those in this policy.
• Legal requests — when required by law, court order, or to protect rights, safety, or property.
• Business transfers — if Wivvy is involved in a merger or acquisition, your data may transfer subject to this policy.
• With your direction — for example, when you share an outfit to a social network.

We do not share your data with advertising networks for cross-context behavioral advertising.

8. Storage and retention

Account and wardrobe data is stored on encrypted infrastructure in the European Union and the United States. We retain personal information for as long as your account is active, or as needed to provide the Service. When you delete your account, we delete or anonymize your data within 30 days, except where retention is required by law (e.g. financial records). Body photos processed by AI features are deleted from our servers within seconds of the AI response returning (see §5.3 Photo retention).

9. Security

We protect your data with industry-standard measures: encryption in transit (TLS 1.3), encryption at rest (AES-256), least-privilege access controls, audit logging, and regular third-party security reviews. No system is perfectly secure, and we encourage you to use a strong, unique password and enable two-factor authentication.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct data that's inaccurate.
• Delete your data (the "right to be forgotten").
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent at any time.
• Lodge a complaint with your local data-protection authority.

You can exercise most of these rights by contacting us at wivvy@stylewithwivvy.app. Some rights, including account deletion, can be exercised directly in Settings → Privacy. We respond within 30 days.

11. Children

Wivvy is not directed to children under 13 (or 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy as the Service evolves or as the law changes. When we make material changes, we will notify you in-app and update the "Last Updated" date at the top of this page. Continued use of the Service after a change means you accept the revised policy.

13. Contact us

Questions, requests, or concerns about your privacy? Reach our team at:

Wivvy Labs
wivvy@stylewithwivvy.app
Data Protection Officer: wivvy@stylewithwivvy.app

For EU users, our designated representative under Article 27 GDPR is listed on request.