Privacy Policy

Last updated: December 28, 2024 | Effective: December 28, 2024

🔒 TL;DR: Your photos are analyzed instantly and never stored. We don't sell your data. Period.

Agentic AI Home ("we," "us," or "our") operates FitRate (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application or website.

📋 Table of Contents

1. Information We Collect 2. How We Use Your Information 3. Data Sharing & Third Parties 4. Data Retention 5. Data Security 6. Your Privacy Rights 7. GDPR Rights (European Users) 8. CCPA Rights (California Users) 9. International Data Transfers 10. Children's Privacy 11. Cookies & Tracking 12. Changes to This Policy 13. Contact Us

1. Information We Collect

1.1 Information You Provide

Data Type	Purpose	Retention
Photos you upload	AI outfit analysis	Deleted immediately after processing (<30 seconds)
Email address (if you purchase)	Payment processing, purchase recovery	Until you request deletion
Payment information	Process transactions	Handled by Stripe; we never see card details

1.2 Automatically Collected Information

Data Type	Purpose	Retention
Device identifier	Account persistence, abuse prevention	Until you clear browser data
IP address	Security, rate limiting, fraud prevention	48 hours (anonymized after)
Usage analytics	Improve app experience	26 months (anonymized)
Crash reports	Fix bugs and errors	90 days

1.3 Information We Do NOT Collect

❌ Biometric data or facial recognition
❌ Precise geolocation
❌ Contacts, calendars, or other personal data
❌ Health or fitness data
❌ Your photos for AI training purposes

2. How We Use Your Information

We use collected information for the following purposes:

Service Delivery: Analyze your outfits and provide AI-generated ratings
Purchases: Process payments and enable purchase recovery via email
Security: Prevent fraud, abuse, and unauthorized access
Improvement: Analyze usage patterns to enhance the app
Competitions: Display anonymous leaderboard rankings for events
Communication: Respond to support requests (email only)

⚠️ We do NOT use your photos to train AI models. Images are processed and deleted immediately.

We share data only with the following service providers, solely to operate our Service:

Provider	Purpose	Data Shared	Privacy Policy
Google Gemini AI	Outfit analysis	Photos (deleted after analysis)	Link
OpenAI	Outfit analysis (when available)	Photos (deleted after analysis)	Link
Stripe	Payment processing	Email, payment info	Link
Cloudflare	Hosting, CDN, security	IP address, usage data	Link
Railway	Backend hosting	Server logs	Link
Upstash (Redis)	Data storage	User preferences, scores	Link

We Do NOT:

❌ Sell your personal information to third parties
❌ Share your data with advertisers or data brokers
❌ Use your photos for marketing without explicit consent
❌ Share data with third parties for their own marketing purposes

4. Data Retention

We retain your information only as long as necessary:

Photos: Deleted immediately after AI analysis (<30 seconds)
Purchase records: Retained indefinitely for purchase recovery
Scores/Rankings: Retained for 90 days after event ends
Analytics: Retained for 26 months in anonymized form
Server logs: Retained for 48 hours, then deleted

5. Data Security

We implement industry-standard security measures:

🔐 HTTPS/TLS encryption for all data in transit
🔐 Encrypted data storage (AES-256)
🔐 Rate limiting and abuse prevention
🔐 Regular security audits
🔐 Access controls and authentication for backend systems

While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

Regardless of your location, you have the right to:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data
Portability: Receive your data in a structured, machine-readable format
Opt-out: Opt out of analytics via browser settings
Withdraw consent: Withdraw consent at any time

To exercise these rights, email us at [email protected]. We will respond within 30 days.

If you are in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR:

Legal Basis for Processing

Purpose	Legal Basis
Outfit analysis	Consent (you upload photos voluntarily)
Payment processing	Contractual necessity
Fraud prevention	Legitimate interest
Analytics	Legitimate interest (with opt-out)

Your GDPR Rights

Right to be forgotten: Request complete erasure of your data
Right to restrict processing: Limit how we use your data
Right to object: Object to processing based on legitimate interest
Right to lodge a complaint: File a complaint with your local Data Protection Authority

Data Controller: Agentic AI Home
Contact: [email protected]

8. CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your Rights

Right to Know: Request disclosure of data we collect about you
Right to Delete: Request deletion of your personal information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out of Sale/Sharing: We do NOT sell or share your personal information
Right to Non-Discrimination: We won't discriminate for exercising your rights

🚫 We Do Not Sell Your Personal Information. We do not share personal information for cross-context behavioral advertising.

Categories of Personal Information Collected (Last 12 Months)

Category	Collected	Sold	Disclosed
Identifiers (email, device ID)	Yes	No	Service providers only
Commercial information (purchases)	Yes	No	Stripe only
Internet activity (usage data)	Yes	No	Analytics only
Geolocation (IP-based, approximate)	Yes	No	No
Audio/Visual (photos)	Temporarily	No	AI providers (deleted immediately)

To submit a CCPA request, email [email protected] with subject "CCPA Request." We will verify your identity and respond within 45 days.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place:

Service providers are contractually bound to protect your data
We use Standard Contractual Clauses for EU data transfers
Our US-based providers maintain Privacy Shield certifications where applicable

10. Children's Privacy

FitRate is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.

Users aged 13-17 should have parental consent
If we learn we collected data from a child under 13, we will delete it immediately
Parents may contact us to request deletion: [email protected]

11. Cookies & Tracking Technologies

We use minimal tracking technologies:

Technology	Purpose	Duration	Opt-Out
LocalStorage	Save preferences, user ID	Until cleared	Clear browser data
Cloudflare cookies	Security, performance	Session	N/A (essential)

We do NOT use:

❌ Third-party advertising cookies
❌ Social media tracking pixels
❌ Cross-site tracking

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Material changes will be announced in-app
Continued use after changes constitutes acceptance
We encourage you to review this policy periodically

13. Contact Us

For privacy-related inquiries:

Email: [email protected]
General Support: [email protected]
Response Time: Within 30 days

Agentic AI Home
Operating as FitRate
United States