Effective date: 2026-10-02
TryOnFusion ("we", "us") lets you see what clothes look like on you. This policy explains exactly what we collect, why, who else sees it, how long we keep it, and how you get rid of it. It applies to the TryOnFusion app and to tryonfusion.com.
We do not sell your personal information. We do not show you third-party advertising. We do not track you across other companies' apps and websites. There is no advertising identifier in this app.
| Data | Where it comes from | What it is used for | Who else receives it | How long we keep it | How you remove it |
|---|---|---|---|---|---|
| Email address | You, or Google / Apple sign-in | Signing you in, account recovery, support replies | Our email provider, for messages we send you | Until you delete your account | Delete Account |
| Name | You (optional) | Greeting you in the app | No one | Until you delete your account | Edit or clear it in the app |
| Gender (optional) | You | Guiding the AI so the result looks like you | The AI provider, as part of the generation request | Until you delete the profile | Edit the profile |
| Height, chest, waist, hips (optional) | You | Guiding the AI on fit | The AI provider, as part of the generation request | Until you delete the profile | Edit the profile |
| Size band, e.g. M or XL (optional) | You | Guiding the AI on fit | The AI provider, as part of the generation request | Until you delete the profile | Edit the profile |
| Your photos | Your camera or photo library | Generating the try-on you asked for | The AI provider; our storage provider | Until you delete the photo, the profile, or your account | Delete the profile or the account |
| Generated images | Our AI provider | Showing you the result, and your gallery | Our storage provider | Until you delete the image or your account | Delete from the gallery |
| Imported product images | The web page you chose, downloaded by your phone | Generating the try-on | The AI provider; our storage provider | 90 days | Delete the wardrobe item |
| Product page address and title | The page you imported from | Labelling the item and letting you return to the shop | No one | Until you delete the item or your account | Delete the wardrobe item |
| Website domain and number of images imported | Link Import | Measuring whether importing works on that site | Our logging | 30 days | Not linked to you after that |
| Store purchase identifier | Apple or Google | Adding stars, handling refunds | Apple / Google | While the law requires us to keep purchase records | Contact us |
| Safety check result | Automated screening (see §3) | Enforcing our content rules | No one | 24 hours | Automatic |
| Crash and diagnostic data | Your device | Fixing crashes | Our logging | 30 days | Automatic |
| One-way hash of your email | Derived at signup | Stopping the signup bonus being claimed over and over | No one | Kept after deletion — see §8 | Cannot be reversed into an address |
| Consent records | Created when you agree to, or withdraw, something in the app | Showing what you agreed to and when: the wording you saw, the date, the app version, and your IP address | No one | While your account exists, then 6 years | Kept after deletion — see §8 |
(including GPS coordinates) is stripped from every image before it is stored. The one exception is the US state a request comes from, which our network provider (Cloudflare) estimates from the request's IP address. We use it only to refuse sign-ups and photo processing from Illinois (see §10), and we do not store it.
iOS tracking prompt because there is nothing to ask you about.
To generate an image we send the photos you chose, the profile details listed above, and any styling note you typed, to an AI image-generation provider that produces the result on our behalf. One of:
They receive only what is needed to make the image you asked for. They do not receive your email address, your name or your account details.
Your photos are not used to train AI models — not ours, and not theirs. We use these providers under their business API terms, which exclude API content from model training.
The app asks your permission before the first photo is ever sent, and you can say no. If you say no, generation is not available, and nothing is sent. You can withdraw that permission at any time in Settings, and you can delete your photos at any time.
Only upload photos of other people who have agreed to it.
Before an image is generated, and again on the result, we run an automated safety check. It looks for sexual content, violent content, and whether anyone in the picture appears to be a child — TryOnFusion is for adults only (§7).
What this means in practice:
returns an assessment and keeps nothing.
broad estimated age band when a block was based on one. We keep this for 24 hours, against a fingerprint of the image, so that re-using the same photo does not mean re-checking it.
scan, or any other biometric identifier, and we never have.** We do not use face recognition, face matching or face search of any kind. Nothing we keep could be used to identify you in another photograph.
TryOnFusion, and is not used for anything except enforcing these rules.
Your consent. Before any photo is processed, the app asks you to agree to this, including a separate consent to the processing of face data in your photos by us and by the providers named in §2 and above. Generating an image of you, and estimating an age range, both involve analysing the face in a photo; some US states, including Illinois, Texas and Washington, treat measurements of facial geometry as biometric data. We use face data only to create the image you ask for and to keep the service adults-only. We never sell, lease, trade or otherwise profit from it, and we never disclose it except to those providers for that purpose. You can withdraw this consent at any time in Settings; generation stops until you agree again. We keep a record of your consent (see §8).
Retention and destruction schedule for images and screening data: original photographs you upload are deleted when you delete the profile, the image, or your account, and in any case within 30 days of account deletion. Imported product images are deleted after 90 days. Screening results are destroyed after 24 hours. We do not retain biometric identifiers, because we do not create any.
When you open a shop's page with Link Import, the page loads on your phone, in a private window that shares no cookies or logins with your normal browser and is cleared when you close it. Our servers do not visit the site.
We do not receive your browsing on that site, the page content, its cookies, or anything you type into it.
When you tap Import, we receive only: the images you selected, the page address, and the page title. For service quality we also record the site's domain name and how many images you imported.
We are not affiliated with, and do not endorse, any shop or brand you import from.
Stars are bought through Apple's App Store or Google Play. The store takes the payment. We never receive your card, bank or payment-wallet details. We receive the store's transaction identifier, which product was bought, and its status, so we can add your stars and handle refunds.
Everything is sent over TLS. Images live in a private storage bucket with no public access, encrypted at rest, and are served to your app through links that expire. Secrets are held in a secret manager, never in the app. The app holds no AI provider keys — every generation goes through our servers, which is also what lets the safety rules in §3 be enforced rather than requested.
TryOnFusion is for people aged 18 and over. We ask you to confirm this, and we ask you to confirm that everyone in the photos you upload is 18 or over. Our automated screening rejects images where someone appears to be a child.
We do not knowingly collect personal data from anyone under 18. If you believe a child has used the service, write to support@tryonfusion.com and we will delete the account.
When you delete your account we remove your profile, your photos, your generated images, your imported products and your wardrobe from our systems, and we delete the underlying files from storage. If you used Sign in with Apple we also revoke our access with Apple. This happens immediately, and in any case within 30 days.
Three things survive, and we would rather say so plainly than bury it:
cannot be recovered from. It exists so the signup bonus cannot be farmed by deleting and re-registering.
device and IP address, for 6 years. They exist so that we can show what you agreed to if a question about it is ever raised, and are deleted after that.
In the app: Profile → Settings → Request my data, or ask us by email (see §10). We email a machine-readable copy of your account, profiles, generated images, wardrobe, imported products, star history and consent records, with links to download your images, to the email address on your account within 7 business days of your request. We send it only to that address, so that your data reaches you and no one else.
Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it, using the app or support@tryonfusion.com. We will not treat you differently for asking.
We process your data under UK GDPR. Our lawful bases are: contract (running your account and generating the images you ask for), consent (sending photos to an AI provider, which you can withdraw at any time), and legitimate interests (keeping the service secure, preventing abuse, and meeting our safety obligations).
You have the right to access, rectify, erase, restrict and object to processing, and the right to data portability. You can complain to the Information Commissioner's Office at ico.org.uk.
Your body measurements are optional, and are used only to guide the AI. If you would rather not give them, leave them blank — the service works without them.
We collect the categories listed in §1. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not in the preceding twelve months. We therefore have no "Do Not Sell or Share My Personal Information" link, because there is nothing for it to do.
Your photographs and your body measurements are sensitive personal information. We use them only to provide the service you asked for, and for no other purpose — we do not use or disclose them to infer characteristics about you, and you are not required to limit their use because we have not extended it.
You may request access, correction, deletion, and to know what we collect. We answer within 45 days, and will not discriminate against you for asking. How to make a request, verify it, use an authorized agent or appeal a decision is set out under "If you are in the United States" below.
We do not disclose personal information to third parties for their own direct marketing purposes (California Civil Code § 1798.83, "Shine the Light").
TryOnFusion is not offered to residents of Illinois, or to anyone while they are in Illinois. When you create an account or first use AI try-on, we ask you to confirm that you are not a resident of Illinois, and we refuse new accounts, guest sessions and photo processing for requests that come from Illinois. If you are an Illinois resident with an account, please delete it in Profile → Settings → Delete Account; everything is removed as described in §8.
Please read §3. We do not collect, capture, store, convert, transmit, sell, lease, trade or otherwise profit from biometric identifiers or biometric information, because we do not create any. Our automated screening is image classification, not face recognition, and it produces no template that could identify you.
California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and a growing number of other states give their residents privacy rights. We give the same rights to every user in the United States, whichever state you live in:
(Settings → Request my data; we email it to you within 7 business days).
profiling that produces legal or similarly significant effects. We do none of these, so there is nothing to switch off, but we will confirm that in writing if you ask.
We process your photographs and body measurements only to generate the images you ask for, and only after you agree to it in the app. We never use them to identify you.
Making a request. Use the app, or email support@tryonfusion.com from the address on your account. To protect your account, we verify a request through that email address or your signed-in app before acting on it. You may use an authorized agent; we will ask the agent for your signed permission, and may ask you to confirm your identity with us directly. We respond within 45 days, and will tell you if we need up to 45 more.
Appeals. If we decline a request, reply to our decision with "Privacy appeal" in the subject line. We will answer in writing within 45 days and explain what we decided and why. If you disagree with the outcome, you can contact your state Attorney General.
We do not track you across other companies' websites or apps, and we do not let third parties do so through our website or app. There is therefore nothing for a browser's Do Not Track signal to turn off. We treat a Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information. We do neither, so honoring it needs no further action.
We process your personal data under the Digital Personal Data Protection Act, 2023 and the rules made under it. You may access, correct, update and erase your data, nominate someone to exercise your rights if you cannot, and withdraw consent as easily as you gave it — in Settings, in the app.
Grievances are handled by:
We acknowledge complaints within 24 hours and resolve them within 15 days.
We are based in India and our storage is in AWS. Our AI providers (Google and OpenAI) and our safety screening provider (Amazon Web Services) process data in their own regions. Requests to our servers pass through our network provider, Cloudflare, which handles your IP address to deliver them. Where data from the UK is transferred out of the UK, we rely on the UK's International Data Transfer Addendum and equivalent safeguards offered by those providers.
If we change this policy in a way that affects what we do with your data, we will say so in the app before the change takes effect, and where consent is required we will ask you again. The current AI-processing disclosure is version 4.
Safety policy version: 2026-09-22