DresStar Privacy Policy

DresStar ("DresStar," "we," "us," or "our") is an AI-powered personal styling app for iOS that helps you digitize your wardrobe, get outfit recommendations, and preview looks with virtual try-on. This Privacy Policy explains what information we collect when you use the DresStar app (the "App"), how we use and protect it, who we share it with, and the choices and rights you have.

We designed DresStar to keep as much of your data as possible on your own device and in your personal iCloud account, rather than on our servers. Please read this policy carefully. By using the App, you acknowledge the practices described here. If you do not agree with this policy, please do not use the App.

Contact: support@dresstar.com

2. Information We Collect

2.1 Information you provide

Account information. When you sign in with Apple or Google, we receive a unique account identifier from the sign-in provider, along with your name and email address where you choose to share them and where your account provides them. With Sign in with Apple, you can choose to hide your email — in that case we receive a private relay address generated by Apple instead of your personal one. If your Apple ID is registered with a phone number rather than an email address, the email we receive (if any) may likewise be an Apple-generated relay address.

Profile and body information (optional). You may choose to provide your gender, height, weight, body shape, and skin tone, or have the App estimate some of these from a body photo you upload. This information is stored as part of your profile and displayed in the App; it is not currently used to generate styling results. You may also upload a face photo and/or a full-body photo to create a personal try-on model used by virtual try-on and hairstyle features. Providing any of this is optional — you can instead use a standard model.

Photos and images. The core of DresStar is visual. Depending on which features you use, you may provide:

• Photos of clothing and accessories you add to your digital wardrobe
• Outfit photos you submit for feedback (e.g., "Rate My Fit")
• Face and body photos used for virtual try-on and hairstyle preview
• Reference images you attach in the styling chat

You can capture these with your camera or select them from your photo library. The App only accesses photos you explicitly choose.

Chat messages. When you talk to the AI stylist, we process the text messages (and any images) you send in order to generate responses.

2.2 Information collected automatically

Approximate location. The App uses your approximate location to fetch local weather through Apple's WeatherKit and suggest weather-appropriate outfits:

• If you grant location permission, the App reads a coarse device location (accurate to roughly a few kilometers).
• If you decline location permission, the App will let you know that it will instead estimate your city-level location from your IP address, using ipapi.co, a third-party geolocation service. This involves sending your IP address to ipapi.co; no other personal data is shared with it. The App may also use this IP-based estimate as a temporary fallback if your device location cannot be determined at the moment (for example, when there is no GPS signal).

In either case, we do not track your precise movements or collect GPS coordinates on our servers. When certain features (such as Daily Inspiration) generate a recommendation, the city name and weather conditions used at that time are saved as part of the result's context — this record is stored on your device and in your personal iCloud, like the rest of your wardrobe data, and you can delete it at any time. In the AI styling chat, you can also enter a city name manually to get weather-based suggestions.

Device identifier. The App generates a random identifier and stores it securely on your device. This identifier is sent to our servers together with billing-related requests and is kept in our backend records, where we use it to deliver one-time free credits fairly and to prevent abuse of promotional offers (for example, repeatedly redeeming free credits by reinstalling the App or switching accounts). It is not an advertising identifier, is not derived from your hardware, and is not used for tracking or shared with third parties.

Purchase and usage records. When you subscribe or buy credit packs, we record the App Store transaction identifiers, your subscription status, and your credit balance. Payment itself is handled entirely by Apple — we never see your payment card details. Separately, each time you use an AI feature that consumes credits, we record the deduction in a usage ledger (which feature was used, how many credits, and when) so we can maintain an accurate balance and show you your usage history.

Diagnostic and technical data. Our backend infrastructure (Google Firebase) may automatically log technical information such as IP address, request timestamps, and error information for security, debugging, and service operation.

2.3 Information we do not collect

We do not collect your contacts, browsing history, precise location history, or advertising identifiers. We do not use cookies or cross-site trackers in the App, and we do not request App Tracking Transparency permission because we do not track you.

3. How We Use Your Information

We use the information described above to:

• Provide the App's features — build your digital wardrobe, generate outfit recommendations, perform virtual try-on and hairstyle previews, analyze clothing items, and power the AI styling chat
• Personalize results — tailor recommendations and try-on images to the photos you provide, your wardrobe contents, and local weather
• Operate your account — authenticate you, sync your wardrobe data across your devices via your personal iCloud account, and maintain your subscription status and credit balance on our secure cloud backend (see Section 5)
• Process purchases — verify App Store transactions, grant credits, manage subscriptions, and prevent fraudulent or duplicate redemptions
• Maintain safety and reliability — secure our services, debug problems, prevent abuse, and comply with legal obligations
• Communicate with you — respond to support requests you send us

We do not use your photos, body information, or chat content for advertising, and we do not sell or rent your personal information to anyone.

4. AI Processing of Your Content

DresStar's intelligent features are powered by third-party AI models. This section explains exactly what happens.

When you use an AI feature — such as adding an item to your wardrobe (image recognition), requesting an outfit suggestion, running a virtual try-on, previewing a hairstyle, getting your outfit rated, or chatting with the AI stylist — the App sends the relevant content to an AI provider to generate the result:

• Google Gemini (via Firebase AI Logic, operated by Google LLC): processes chat messages, clothing photos, face/body photos for try-on and profile analysis, outfit images, and contextual information such as weather and wardrobe metadata.
• OpenAI (operated by OpenAI, L.L.C.): processes certain images and prompts for image generation features.

Important points:

• Content is sent only when you actively use the corresponding feature. Nothing is sent in the background.
• We use these providers' API services, which are governed by business terms that restrict how they may use the data. Per their published policies, API inputs are not used to train their publicly available models. You can review their practices at Google's Privacy Policy and OpenAI's Privacy Policy.
• AI providers may retain API data temporarily (typically for abuse monitoring) in accordance with their own retention policies.
• AI-generated results (such as try-on images) are delivered back to your device and stored locally / in your iCloud, not on our servers.

Please avoid including sensitive personal information about yourself or others in chat messages or photos beyond what the feature requires.

5. Where Your Data Is Stored

On your device and in your iCloud. Your wardrobe items, outfits, generated images, profile photos, and body information are stored locally on your device. If you have iCloud enabled, this data syncs through your personal iCloud account (Apple's CloudKit) so it is available across your devices. This data lives in your Apple account — we cannot access your iCloud data.

On our cloud backend. We use Google Firebase (Google LLC, servers primarily located in the United States) to store:

• Your authentication record (email, account identifier, sign-in provider)
• Subscription status, purchase transaction records, credit balance, and a credit usage ledger
• Anti-abuse records tied to your device identifier

Our backend is configured so that this server-side data can only be modified by our secured server functions — not directly by client devices.

In transit. All communication between the App and our backend or AI providers is encrypted using industry-standard TLS.

6. Third-Party Service Providers

We share personal information only with service providers that help us operate the App, and only to the extent needed for the purposes described in this policy:

These providers process your information under their respective data processing terms and privacy commitments, and may use it only to provide their services to us — not for their own advertising or other unrelated purposes.

We may also disclose information if required by law, legal process, or to protect the rights, safety, and security of our users, the public, or DresStar.

We do not share your personal information with data brokers, advertisers, or analytics companies for their own purposes.

7. Data Retention

• On-device and iCloud data remains under your control. It is retained until you delete individual items, delete your account in the App, or remove the App and its iCloud data.
• Account and billing records on our backend are retained while your account is active and are deleted when you delete your account. Records of completed purchase transactions are anonymized upon account deletion and retained for up to 180 days solely to handle App Store refunds, resolve payment disputes, and prevent fraud, after which they are permanently removed unless a longer retention period is required by law.
• AI provider data is retained by Google and OpenAI according to their published API retention policies and applicable service terms.
• Technical logs are retained for a limited period for security, fraud prevention, and troubleshooting, then deleted or anonymized.

8. Deleting Your Account and Data

You can delete your account directly in the App: tap your user avatar > open the sidebar > Delete Account. When you delete your account:

• Your authentication account is permanently deleted
• Your wardrobe items, outfits, generated images, profile data, and photos are deleted from your device, and the App attempts to remove synced copies from your iCloud
• Your account records on our servers — including subscription status, credit balance, credit usage history, and associated identifiers — are deleted

Please note:

• If wardrobe data was synced to iCloud and remains on another of your devices, you may need to delete the App's data on that device or from your iCloud settings as well.
• Records of completed purchase transactions are anonymized upon deletion (no longer linked to you) and retained for up to 180 days before being permanently removed, as described in Section 7.
• A device-level marker — a random identifier that is not linked to your deleted account and cannot identify you — is retained to prevent repeated redemption of one-time free credits.
• If you have any questions about remaining data, contact us at support@dresstar.com.
• Deleting your account does not automatically cancel App Store subscriptions. If your subscription still has auto-renewal enabled, the App warns you before deletion and offers to open the subscription management screen; you can also cancel at any time in your Apple ID settings.

9. Your Rights and Choices

Depending on where you live (for example, under the EU/UK GDPR or the California Consumer Privacy Act), you may have the right to:

• Access the personal information we hold about you and receive a copy
• Correct inaccurate information
• Delete your personal information
• Restrict or object to certain processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent (for example, by revoking location, camera, or photo permissions in iOS Settings, or by removing your face/body photos in the App)
• Non-discrimination — we will not treat you differently for exercising your rights
• Lodge a complaint with your local data protection authority

To exercise any of these rights, use the in-App controls or email us at support@dresstar.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling a request.

Permission controls. You can grant or revoke camera, photo library, location, and notification permissions at any time in iOS Settings → DresStar. The App will continue to work, though features that depend on a revoked permission will be unavailable.

10. Security

We take reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest on our cloud backend
• Backend access rules that block direct client access to server-side records
• Sign-in through Apple and Google rather than storing passwords ourselves
• Sensitive identifiers stored in the iOS Keychain on your device

No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, alteration, disclosure, and destruction. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.

11. Children's Privacy

DresStar is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction, such as 16 in parts of the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@dresstar.com and we will delete it promptly.

12. International Data Transfers

We operate globally, and our service providers (including Google, OpenAI, and Apple) process data primarily on servers located in the United States. If you access the App from outside the United States, your information may be transferred to, stored, and processed in a country other than your own.

Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or adequacy frameworks (for example, the EU-U.S. Data Privacy Framework, for providers certified under it).

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App, our practices, or legal requirements. When we make material changes, we will update the "Last updated" date above and provide any additional notice required by applicable law. Your continued use of the App after an update means you accept the revised policy. We encourage you to review this page periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: support@dresstar.com

We aim to respond to all privacy inquiries within 30 days.