Privacy Notice — India (English)

Version date: 22 October 2026
Data Fiduciary / Provider: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse", "we")
Address: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Contact: support@echojoy.cn

This notice applies to OutfitMuse users in India and supplements our global Privacy Policy. Where applicable Indian law gives you a mandatory protection, that protection applies.

Data, purpose and AI

We may process account and contact information (email, account ID and third-party or email sign-in information); clothing, profile or body photos you submit, prompts, generated images and feedback; style preferences and profile information you choose to provide; a manually chosen city and approximate city-level location inferred from your IP address; and device, security, crash and support information.

We use this information to create and secure your account, organize your wardrobe, provide the functions and AI results you request, provide weather-aware features when available, answer support requests, prevent fraud, fix faults and comply with law. We do not request device location permission or collect precise device location. For city-based weather features, we use approximate city-level location inferred from your IP address or a city you select manually.

Only when you select an AI feature and submit its necessary inputs do we process those inputs to generate your requested result. Our AI features use contracted AI model and gateway services, as identified in the Third-Party Services List. Before sending necessary inputs, we explain the data, purpose and providers and ask for your explicit consent. You may decline; the inputs are then not sent for that request and the dependent feature cannot generate the requested result. Buying a membership does not authorize this data sharing. Third-party sign-in and app store services may also be used as described in the Third-Party Services List. We do not use your photos, prompts, profile or body information, or generated images to train our or a third party's AI models. We do not sell personal data or use it for targeted advertising.

International processing, retention and choices

To delete your account, open Profile → Settings (or directly in Profile in versions without a Settings page) in the app and follow the account-deletion instructions.

Our primary overseas environment is in the United States, using contracted cloud hosting services. Contracted providers may process information for hosting, AI, authentication, email, crash diagnostics and support, only as needed to provide services to us and subject to appropriate safeguards. We apply transfer safeguards required by applicable law and will update this notice if our material processing practices change.

We retain account and saved content while your account is active. Temporary AI-request copies are removed from active systems within 30 days unless you save them or a minimum legal, security, fraud or dispute retention applies. Operational logs are generally retained for up to 90 days. When the app confirms successful account deletion, you can no longer sign in with that account. This operation does not automatically erase all associated wardrobe content, history, photos or interaction records. To request deletion of remaining personal data, use the privacy contact in this policy; the retention and deletion rules below apply. If the app reports a failure, it does not confirm completion or clear your local sign-in data.

If specific records must be retained by law or are temporarily needed for security audits or dispute resolution, we retain only the minimum necessary information for the shortest necessary period, restrict processing to the permitted purpose, and delete or irreversibly anonymize it when that requirement ends. Where technical limitations temporarily prevent deletion from backups, we securely isolate those copies and limit processing to storage and necessary security protection until they can be deleted or irreversibly anonymized as soon as technically possible. These exceptions do not permit continued use of retained personal data for other purposes. Anonymization means the data can no longer identify or be linked to you and cannot be restored to an identifiable form.

You can withdraw optional device permissions and delete content or your account in the app. To withdraw consent where applicable, ask about your data, correct or delete information, or make another privacy request, email support@echojoy.cn with “India Privacy Request” and your account email. We may verify identity. We will provide any rights and complaint channels required by applicable Indian law when they apply to our processing.

Purchases, subscriptions and retained transaction records

We process purchase and subscription records, including store, product, order or transaction identifier, verification token, purchase and renewal status, paid period, available price and currency, refunds, membership benefits and credit balances. We use them to verify purchases, grant and restore access, manage credits, reconcile transactions, handle support and refunds, prevent fraud and meet legal or accounting duties. The app store used for your purchase processes payment methods under their own policies; we do not receive full card numbers, payment passwords or security codes.

Minimum transaction and entitlement records may be retained after account deletion when necessary for legal, accounting, refund, fraud-prevention or dispute purposes. We restrict them to those purposes and delete or irreversibly anonymize them when no longer needed. For store-held records and retention, see the Third-Party Services List. Deleting an OutfitMuse account does not cancel store renewal; after reviewing the warning, you may still proceed with deletion without first canceling or waiting for the paid period to end.

Related documents

Global Privacy Policy · Global Terms of Service · India Terms · Membership Terms · Account Deletion Instructions · Subprocessor List · Hindi notice.

Usage analytics and provider retention

We use an analytics service to process configured app interactions and usage events, app and device details, app-instance identifiers and account identifiers where enabled, to understand feature usage and improve the service. This does not mean that we use this information for cross-app behavioral advertising.

The retention rules above describe our own systems. For provider-specific processing and retention, see the Third-Party Services List.

Push notifications and device registration

This section applies only to app versions that include the push notification feature. For versions without this feature, the push-specific device registration and processing described in this section do not apply. Feature availability is separate from whether you grant system notification permission.

We provide push notifications through a service compatible with your device and app version. The providers and information they process are described under “Push service providers” below. To register an app installation and manage notification delivery, our servers process the installation UUID, push token, notification permission and preference status, language, and time zone. When you are signed in, these records are linked to your account through your authenticated session. The installation UUID identifies an app installation; it is not a hardware serial number.

We use this information to deliver task-result notifications and applicable service notices to the appropriate installation, select the notification language and delivery time, and respect notification settings. Where outfit reminders are enabled, we also use it for those reminders, subject to your preferences and any required consent. Notification permission and acceptance of this policy do not by themselves constitute explicit consent to marketing messages.

You can turn off system notifications in your device settings and manage available reminder preferences in the app. Turning off notifications does not prevent you from using Task Center or viewing results, and does not itself delete existing registration or account records. We retain notification registration and preference records only for as long as necessary for their stated purposes. Account-linked records are covered by the account-deletion rules and limited retention exceptions in this policy. Provider-held records and applicable retention rules are described in the Third-Party Services List.

Push service providers

The applicable push service processes the push token, notification payload, and technical information needed to deliver messages. The service used depends on your device operating system and app version. Provider identities, any service-specific identifiers, processing locations and retention rules are described in our Third-Party Services List.

Community content and interactions

Where community features are available, publishing makes your selected outfit and associated clothing images, nickname and avatar visible to other users. Items and related information you choose to make public with your post are also displayed. Where a public sharing page is provided, anyone with its link can access it. You may also choose to make wardrobe items and related information public and may turn automatic publication of new items on or off. Wardrobe content you have not chosen to make public remains private.

We process account-linked publication, interaction, browsing and report records to provide community features, improve the service and maintain safety. Community try-on uses your photo as described in the AI section of this Policy; results remain private unless you choose to share them.

You can remove your posts and manage interactions and blocked authors. Removing a post ends its community display but may not recall external copies or other users' already-generated try-on results. Account deletion and retention follow this Policy.

We use service providers to handle community reports. They process necessary account and post information and the report you submit, including in the United States and other service locations. See the Third-Party Services List for details.