Privacy Policy for Vinchy

Effective Date: September 6, 2025

At Vinchy (referred to as “Vinchy,” “we,” “our,” or “us”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our website, applications, and services (collectively, the “Services”).

1. Personal Information We Collect

We collect personal information from and about you as follows:

Personal Information You Provide:

• Account Information: When you create an account with us, we collect information associated with your account, including your name, contact details, account credentials, payment information, and transaction history.
• Body Measurements: As part of our Services, we collect body measurements such as bust, waist, hips, thighs, and other similar data that you provide to us.
• Face Images and Derived Face Data: When you choose to use features like face scan, AI avatars/try-ons, or lookbooks, we collect face images you upload and we generate derived face data from those images (for example: non-identifying numeric vectors “embeddings,” facial landmarks, segmentation masks, and color characteristics such as hair/eye/skin tones). We do not collect Apple Face ID/TrueDepth face maps. We do not create or store faceprints for identity authentication.
• User Content: We collect personal information included in the input, file uploads, or feedback that you provide through our Services.
• Communication Information: We collect your name, contact details, and the contents of any messages you send to us.
• Social Media Information: We collect personal information from our social media pages if you choose to interact with them.
• Other Information You Provide: We may collect additional information such as when you participate in surveys or provide information to verify your identity.

Personal Information We Receive Automatically:

• Log Data: Includes your IP address, browser type and settings, date and time of your request, and interactions with our Services.
• Usage Data: Information about your use of the Services, including the content you view, features you use, actions you take, and your time zone, device, and connection information.
• Device Information: Details about your device, including device name, operating system, device identifiers, and browser type.
• Cookies: We use cookies to operate and administer our Services and enhance your experience. More details can be found at All About Cookies.
• Analytics: We may use analytics tools to understand how users engage with our Services and improve them.

2. How We Use Personal Information

We use personal information for the following purposes:

• To Provide and Enhance Services: To administer, maintain, and improve our Services.
• To Communicate: To send information about our Services, including updates and promotions.
• To Analyze and Research: To conduct research and develop new features or services.
• To Protect and Prevent Misuse: To prevent fraud, abuse, and unauthorized use of our Services.
• To Comply with Legal Obligations: To comply with legal requirements and protect our rights.
• Aggregated or De-Identified Information: We may aggregate or de-identify personal information for analysis and research.
• To provide face-based features: We use face images and derived face data to generate AI avatars and lookbooks, perform color analysis (e.g., finding flattering palettes), power virtual try-on previews, and improve personalization quality (e.g., ranking and deduping your feed).
• To ensure safety and quality: We may use automated checks (e.g., nudity or content safety) on uploaded images to protect users and our Services.
• No biometric identification: We do not use face images or derived face data to identify you or verify your identity.

3. Disclosure of Personal Information

We may disclose personal information as follows:

• Vendors and Service Providers: To help us operate our business and provide our Services. Vendors and Service Providers (face processing): We use service providers to host and process images and to generate AI outputs strictly on our behalf. They are bound by contract to use the data only to provide services to Vinchy and not to sell or use it for advertising.
• Business Transfers: During transactions such as mergers, acquisitions, or asset sales.
• Legal Requirements: To comply with legal obligations or protect our rights and safety.
• Affiliates: To our affiliates who may use the information consistently with this policy.
• Business Account Administrators: When you use a business account, administrators may access and control your account.
• Other Users and Third Parties: When you choose to share information with others.

4. Your Rights

Depending on your location, you may have rights such as:

• Accessing Your Information: To know what personal information we hold about you.
• Deleting Your Information: To request the deletion of your personal information.
• Correcting Your Information: To rectify or update your information.
• Data Portability: To transfer your data to another party.
• Restricting Processing: To restrict how we process your data.
• Withdrawing Consent: To withdraw consent where it is the basis for processing.
• Objecting to Processing: To object to how we process your data.
• Filing Complaints: To lodge complaints with data protection authorities.

You can exercise these rights by contacting us at support@vinchy.app or through your Vinchy account.

5. Children

Our Services are not directed to children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us with personal information, please contact us at legal@vinchy.app.

6. Links to Other Websites

Our Services may contain links to third-party sites. We are not responsible for their privacy practices. Please review their privacy policies directly.

7. Security and Retention

We use reasonable measures to protect personal information. However, no method of transmission or storage is completely secure. We retain personal information only as long as necessary for our purposes or as required by law.

Security (face data): Face images and derived face data are encrypted in transit and at rest.

Retention (face data): Face images are retained until you delete them (e.g., by removing photos) or delete your account. Derived face data (e.g., embeddings, landmarks, color features) is retained to support your personalized experience and is deleted when you delete your account. Backups may persist for up to 30 days after deletion for disaster recovery, after which they are purged.

8. Face Data Choices

You can use the app without uploading face images. If you opt in and later change your mind, you can delete your face images in the app or request deletion of all face data (including derived data) by contacting us.

9. International Users

By using our Services, you consent to the transfer of your personal information to our facilities in the United States and to those of third parties with whom we share it as described in this policy.

Legal Basis for Processing: Our legal bases include contract performance, legitimate interests, consent, and legal obligations.

Data Transfers: We use appropriate safeguards for data transfers outside your jurisdiction.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on our website and notify you as required by law.

11. How to Contact Us

For any questions or concerns about this Privacy Policy, please contact us at support@vinchy.app.