Privacy Policy

Effective date: July 13, 2026
Last updated: July 14, 2026
Controller: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse," "we," "us," or "our")
Registered address: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Privacy contact: support@echojoy.cn

This Privacy Policy explains how OutfitMuse collects, uses, discloses, retains, and protects personal information when you use our mobile applications, websites, and related services (collectively, the "Services").

This global Policy applies wherever we make the Services available. Country-specific notices may supplement it for Brazil, Japan, Mexico, India, Indonesia, Malaysia, the United Arab Emirates, Nigeria, or another market. It is not directed to people in the European Economic Area, the United Kingdom, or jurisdictions where we have not made the Service available. We will publish an applicable regional notice before offering the Service in those regions.

Please read this Policy with our Terms of Service. If you have questions or wish to exercise a privacy right, contact us at the email address above.

1. Information We Collect

We collect information that you provide, information generated while you use the Services, and limited information that is collected automatically.

You do not have to grant precise-location permission. You may use a manually selected city or approximate IP-based location instead. You may also deny camera or photo-library permission; however, features that require you to take or upload photos will not be available.

We do not knowingly collect payment-card information because the initial Service does not offer subscriptions or in-app purchases.

2. How We Use Information

We use personal information only as needed to:

• provide, maintain, personalize, and secure the Services;
• create and administer accounts; verify sign-ins; prevent fraud, abuse, and unauthorized access;
• receive, store, transform, and return the photos, prompts, and other inputs needed for the AI feature you actively request;
• provide weather-aware outfit recommendations based on your selected or permitted location;
• respond to support requests and communicate about material service or policy changes;
• diagnose crashes, fix defects, measure service reliability, and enforce our Terms; and
• comply with legal obligations and protect the rights, safety, and security of OutfitMuse, our users, and others.

We do not use your photos, prompts, profile or body information, or generated images to train or improve our or a third party's AI models. We do not use personal information for targeted advertising.

3. AI Feature Processing and Your Choices

When you use an AI-powered feature, we process the images, prompts, and relevant preferences that you select for that request. Those inputs may be sent to our contracted AI service providers so they can generate the requested result. At the date of this Policy, those providers are OpenAI and Google; Vercel AI Gateway may route the request to them. This processing occurs only when you choose to use the relevant AI-powered feature and provide the necessary inputs. Further details are in our Subprocessor List.

You may stop using an AI-powered feature at any time. The relevant feature cannot operate without the necessary inputs. You can delete uploaded content, generated content, or your account as described in the Account Deletion Instructions.

4. When We Disclose Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We disclose information only in these limited circumstances:

• Service providers. We use providers that process information on our behalf for cloud hosting, storage, content delivery, authentication, email delivery, AI processing, crash reporting, and customer support. They may use the information only to provide services to us, subject to contractual and technical safeguards.
• AI providers. When you request an AI feature, the necessary images, prompts, and related request parameters are disclosed to the AI providers described in our Subprocessor List.
• Legal and safety reasons. We may disclose information when we reasonably believe it is necessary to comply with law, enforce our agreements, protect rights or safety, investigate fraud or security incidents, or respond to valid legal process.
• Corporate transactions. If we are involved in a merger, financing, reorganization, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or notice where required by law.

We do not make your wardrobe, profile photos, body photos, or generated images public by default.

5. International Processing and Data Location

Our overseas production environment is hosted primarily in the United States using Amazon Web Services. This includes application infrastructure and storage for overseas account and content data.

Our providers may process information in the United States or other locations necessary to provide their services. When information is transferred across borders, we use appropriate contractual, organizational, and technical safeguards required by applicable law. We will update this Policy before changing the primary data region or materially changing the categories of recipients.

6. Retention and Deletion

We retain personal information only for as long as needed for the purposes in this Policy:

• Account information, wardrobe content, profile information, preferences, and saved generated results are retained while your account remains active, unless you delete them earlier.
• Temporary copies used to complete an AI request are deleted from our active systems within 30 days after completion, unless they are saved as content in your account or must be retained for security, legal, or dispute-resolution reasons.
• Security, diagnostic, and operational logs are generally retained for up to 90 days, unless a longer period is necessary to investigate an incident or comply with law.
• When you delete your account, we delete or de-identify account data and associated content from active systems within 30 days. Encrypted backup copies are isolated from normal use and deleted or overwritten within 90 days after account deletion, unless law requires a longer retention period.

For deletion steps and the limited exceptions to deletion, see our Account Deletion Instructions.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit, role-based access, and security logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we identify a security incident that requires notice under applicable law, we will provide notice as required.

8. Your Privacy Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information. You may also withdraw optional permissions, such as precise location, in your device settings. You can update or delete many items directly in the app, including saved photos, preferences, and your account.

To make a request that is not available in the app, email support@echojoy.cn with the subject line "Privacy Request." Please include the email address associated with your account and the request type. We may verify your identity before responding. We will not discriminate against you for exercising a privacy right.

9. California Privacy Notice

This section applies to California residents. In the preceding 12 months, we may have collected the following categories of personal information: identifiers (such as email address, account ID, IP address, and device identifiers); customer-record information you provide; internet or network activity; geolocation data; user content (including photos, prompts, and generated images); and profile information, including body-profile information that you choose to provide.

We collect these categories directly from you, automatically from your device and use of the Services, and from sign-in providers when you choose Apple or Google sign-in. We use and disclose them for the purposes described in Sections 2 and 4.

We do not sell personal information or share personal information for cross-context behavioral advertising, as those terms are defined by California law. We do not use or disclose sensitive personal information for purposes other than providing and securing the Services and the other permitted purposes described in this Policy. California residents may submit access, correction, deletion, or portability requests through the contact method in Section 8. Authorized agents may submit requests where permitted by law, subject to verification of their authority and your identity.

10. Children

OutfitMuse is not directed to children under 13, and you must be at least 13 years old to use the Services. If you are under the age of majority where you live, you may use the Services only with permission from your parent or legal guardian. We do not knowingly collect personal information from children under 13. If we learn that we collected such information without appropriate authorization, we will delete it.

11. Changes to This Policy

We may update this Policy when our practices, Services, or legal requirements change. For material changes, we will provide notice through the Services or by another appropriate method and, where required, obtain your consent before the change takes effect. The "Last updated" date shows when this Policy was most recently revised.

12. Contact Us

Chengdu Xinling Qiyue Network Technology Co., Ltd.
Privacy requests and questions: support@echojoy.cn

If you contact us about a privacy request, please do not send photos, identity documents, or other sensitive information unless we specifically ask for it through a secure channel.