Notis Privasi OutfitMuse — Malaysia

Tarikh versi: 2026-10-22
Pengawal Data: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse", "kami")
Alamat berdaftar: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Hubungan privasi: support@echojoy.cn

Notis ini terpakai kepada pengguna OutfitMuse di Malaysia. Notis tempatan dalam bahasa Melayu ini diikuti oleh Dasar Privasi global OutfitMuse dalam bahasa Inggeris dalam Bahagian 2 pada halaman yang sama. Jika terdapat perlindungan mandatori di bawah undang-undang Malaysia, perlindungan tersebut tetap terpakai.

1. Data yang kami proses

Kami memproses data yang anda berikan atau yang dijana apabila anda menggunakan Perkhidmatan: alamat e-mel dan maklumat log masuk; foto pakaian, foto profil atau badan, foto pakaian dan imej yang dijana; arahan (prompt) dan pilihan gaya; bandar yang dipilih secara manual atau anggaran bandar berdasarkan alamat IP; serta butiran peranti, alamat IP, log, laporan ranap dan permintaan sokongan. Kami menerima data terus daripada anda, daripada penyedia log masuk apabila anda memilih kaedah log masuk tersebut, dan secara automatik daripada peranti serta penggunaan Perkhidmatan anda.

Kami memproses data ini untuk menyediakan, melindungi dan menyokong akaun serta ciri OutfitMuse; menjana hasil AI yang anda minta secara aktif; menyediakan cadangan pakaian berasaskan cuaca; mencegah penyalahgunaan; dan membaiki kebolehpercayaan Perkhidmatan. Alamat e-mel dan maklumat log masuk diperlukan untuk mencipta serta melindungi akaun. Foto, arahan dan pilihan gaya adalah pilihan anda; namun, ciri yang memerlukan input tersebut tidak akan berfungsi tanpa input berkenaan. Versi antarabangsa tidak meminta kebenaran lokasi peranti dan tidak mengumpul lokasi tepat peranti. Ciri cuaca menggunakan bandar yang dipilih secara manual atau anggaran bandar berdasarkan alamat IP. Anda juga boleh menolak kebenaran kamera atau pustaka foto, tetapi ciri yang memerlukan pengambilan atau muat naik foto tidak akan berfungsi.

Bagi pembelian, kami memproses kedai asal, pengecam produk dan pelan, pengecam pesanan atau transaksi, resit atau token pembelian, masa pembelian dan tamat tempoh, status pembaharuan dan bayaran balik, serta rekod pemberian, penggunaan dan pelarasan kredit. Data ini diperlukan untuk mengesahkan transaksi, menyediakan dan memulihkan manfaat, menyegerakkan hak akses, mengurus pembatalan, bayaran balik, pencegahan penipuan dan pertikaian, serta memenuhi kewajipan perakaunan dan undang-undang. Kedai aplikasi memproses pembayaran di kedai masing-masing. Kami tidak menerima atau menyimpan nombor kad pembayaran penuh, kata laluan pembayaran atau kod pengesahan anda. Lihat Terma Keahlian.

Kami tidak menjual data peribadi, tidak menggunakannya untuk iklan tingkah laku merentas aplikasi atau laman web, dan tidak menggunakan foto, arahan, maklumat profil atau badan, atau imej yang dijana untuk melatih model AI kami atau model pihak ketiga.

Komuniti, penerbitan dan percubaan pakaian maya

Dalam versi dengan Komuniti, apabila anda menerbitkan kandungan, imej padanan yang dipilih dan pakaian berkaitan, nama paparan serta avatar anda dapat dilihat oleh pengguna lain. Item dan maklumat berkaitan yang anda pilih untuk dikongsikan bersama penerbitan anda turut dipaparkan. Jika halaman perkongsian awam disediakan, sesiapa yang mempunyai pautannya boleh mengakses halaman tersebut. Anda juga boleh memilih untuk mengumumkan item almari pakaian dan maklumat berkaitan, serta menghidupkan atau mematikan penerbitan automatik item baharu. Kandungan yang tidak anda pilih untuk diumumkan kekal peribadi.

Kami memproses rekod penerbitan, interaksi, pelayaran dan laporan yang dikaitkan dengan akaun anda untuk menyediakan ciri Komuniti, menambah baik perkhidmatan dan menjaga keselamatan. Percubaan pakaian maya menggunakan foto anda seperti yang diterangkan dalam bahagian AI; hasil kekal peribadi melainkan anda memilih untuk berkongsinya.

Anda boleh memadam penerbitan serta mengurus interaksi dan tetapan sekatan. Pemadaman menamatkan paparan dalam Komuniti, tetapi mungkin tidak dapat menarik balik salinan luaran atau hasil percubaan yang telah dijana oleh pengguna lain. Pemadaman akaun dan penyimpanan data mengikut Notis ini.

2. Pilihan anda dan pemprosesan AI

Permintaan AI versi antarabangsa dihantar melalui perkhidmatan penghalaan kepada penyedia pemprosesan AI yang diterangkan dalam Senarai Penyedia Perkhidmatan Pihak Ketiga. Sebelum penghantaran, kami menerangkan penerima, jenis data dan tujuan pemprosesan serta meminta anda memilih secara aktif untuk bersetuju atau menolak. Membuka ciri, membeli keahlian atau menerima terma umum bukan persetujuan untuk penghantaran ini. Selepas anda bersetuju, kami hanya menghantar imej atau pautan imej, arahan, pilihan dan parameter yang diperlukan bagi permintaan itu; imej mungkin termasuk foto peribadi, wajah, badan atau pakaian yang anda pilih. Jika anda menolak, permintaan itu tidak dihantar dan ciri AI yang memerlukannya tidak dapat diselesaikan, tanpa menjejaskan ciri tersedia yang tidak memerlukan pemprosesan tersebut. Anda boleh berhenti menggunakan ciri AI pada bila-bila masa.

Kami tidak memilih untuk berkongsi data ini bagi latihan model. Tidak menggunakan data bagi latihan tidak bermakna tiada penyimpanan. Pemprosesan dan penyimpanan oleh penyedia untuk keselamatan, pencegahan penyalahgunaan dan kewajipan undang-undang diterangkan dalam Senarai Penyedia Perkhidmatan Pihak Ketiga.

3. Penerima data dan pemindahan antarabangsa

Kami menggunakan penyedia perkhidmatan bagi pengehosan awan, storan, pengesahan, penghantaran e-mel, pemprosesan AI, pelaporan ranap dan sokongan. Mereka boleh memproses data hanya untuk menyediakan perkhidmatan kepada kami dan tertakluk kepada perlindungan kontrak serta teknikal.

Penyedia log masuk dan kedai aplikasi menyediakan kaedah log masuk yang anda pilih serta kedai, pembayaran, pengurusan langganan dan proses bayaran balik masing-masing. Bagi akaun, transaksi kedai, keselamatan dan kewajipan undang-undang mereka sendiri, mereka boleh memproses data secara bebas di bawah terma dan dasar privasi mereka, bukan semata-mata mengikut arahan kami. Kami bertukar maklumat hanya setakat yang perlu untuk pengesahan dan penyediaan manfaat.

Persekitaran pengeluaran luar negara kami dihoskan terutamanya di Amerika Syarikat menggunakan penyedia infrastruktur awan. Penyedia kami boleh memproses data di Amerika Syarikat atau lokasi lain yang diperlukan untuk perkhidmatan mereka. Untuk maklumat lanjut tentang penerima dan lokasi pemprosesan utama, lihat Senarai Penyedia Perkhidmatan Pihak Ketiga OutfitMuse.

4. Tempoh simpanan dan penghapusan

Untuk memadam akaun, buka Profil → Tetapan (atau terus dalam Profil bagi versi tanpa halaman Tetapan) dalam aplikasi dan ikuti arahan pemadaman akaun.

Kami menyimpan data hanya selama yang diperlukan untuk tujuan di atas. Data akaun dan kandungan yang disimpan kekal semasa akaun anda aktif melainkan anda memadamkannya lebih awal. Salinan sementara bagi permintaan AI dipadam daripada sistem aktif dalam 30 hari, melainkan kandungan itu disimpan dalam akaun anda atau perlu disimpan atas sebab keselamatan, undang-undang atau pertikaian. Log keselamatan dan diagnostik biasanya disimpan sehingga 90 hari.

Selepas aplikasi mengesahkan pemadaman akaun berjaya, anda tidak lagi boleh log masuk dengan akaun itu. Operasi ini tidak memadam semua kandungan almari, sejarah, foto atau rekod interaksi secara automatik. Untuk meminta pemadaman data peribadi yang masih disimpan, hubungi kami melalui maklumat hubungan privasi dalam dasar ini; peraturan pemadaman dan penyimpanan di bawah terpakai. Jika aplikasi melaporkan kegagalan, pemadaman belum disahkan selesai dan data log masuk setempat tidak dipadam. Lihat juga Arahan Penghapusan Akaun.

Hanya data yang wajib disimpan menurut undang-undang serta rekod audit keselamatan, pencegahan penipuan, bayaran balik atau pertikaian yang diperlukan disimpan dalam skop minimum dan bagi tempoh paling singkat yang diperlukan, dengan akses serta pemprosesan terhad. Rekod transaksi dan hak akses yang diperlukan bagi kewajipan undang-undang atau perakaunan juga tertakluk kepada had yang sama. Apabila keperluan penyimpanan tamat, rekod dipadam atau dianonimkan secara kekal dan tidak boleh dipulihkan, supaya rekod itu tidak lagi dapat mengenal pasti anda atau dikaitkan dengan anda. Ini bukan alasan untuk menyimpan semua foto atau kandungan akaun selama-lamanya.

Memadam akaun tidak dengan sendirinya membatalkan langganan kedai aplikasi. Jika pembaharuan automatik masih aktif, kedai boleh terus mengenakan caj selepas penghapusan. Kami mengesyorkan anda membatalkan pembaharuan di kedai asal terlebih dahulu, tetapi selepas membaca amaran anda masih boleh meneruskan penghapusan tanpa menunggu tempoh berbayar tamat. Lihat Terma Keahlian.

5. Akses, pembetulan dan pilihan

Anda boleh mengemas kini atau memadam banyak kandungan, pilihan dan akaun anda dalam aplikasi. Anda juga boleh menarik balik kebenaran peranti pilihan, seperti kamera atau pustaka foto, dalam tetapan peranti. Untuk meminta akses kepada atau pembetulan data peribadi, untuk membuat permintaan penghapusan, menarik balik persetujuan jika berkenaan, mengehadkan pemprosesan, atau mengemukakan pertanyaan atau aduan privasi, e-mel support@echojoy.cn dengan subjek "Malaysia Privacy Request" dan alamat e-mel akaun anda. Kami mungkin mengesahkan identiti anda sebelum membalas.

6. Keselamatan dan perubahan

Kami menggunakan langkah perlindungan pentadbiran, teknikal dan organisasi yang munasabah, termasuk kawalan akses, penyulitan semasa penghantaran, akses berasaskan peranan dan pengelogan keselamatan. Tiada penghantaran atau storan yang benar-benar selamat. Jika kami mengesan insiden keselamatan yang memerlukan pemberitahuan, kami akan memberikan notis sebagaimana dikehendaki oleh undang-undang.

Kami boleh mengemas kini notis ini apabila amalan, Perkhidmatan atau keperluan undang-undang berubah. Bagi perubahan penting, kami akan memberikan notis yang sesuai dan, jika diperlukan, mendapatkan persetujuan anda sebelum perubahan berkuat kuasa.

7. Hubungi kami

Chengdu Xinling Qiyue Network Technology Co., Ltd.
Soalan dan permintaan privasi: support@echojoy.cn

Jika anda menghubungi kami tentang permintaan privasi, jangan hantarkan foto, dokumen pengenalan atau maklumat sensitif lain melainkan kami meminta perkara itu melalui saluran yang selamat.

8. Analitik penggunaan dan penyimpanan oleh penyedia

Kami menggunakan perkhidmatan analitik penggunaan untuk memproses interaksi aplikasi dan peristiwa penggunaan yang dikonfigurasi, butiran aplikasi dan peranti, pengecam instans aplikasi serta pengecam akaun apabila diaktifkan, untuk memahami penggunaan ciri dan menambah baik perkhidmatan. Ini tidak bermaksud data tersebut digunakan untuk pengiklanan tingkah laku merentas aplikasi.

Peraturan penyimpanan dan pemadaman semasa penutupan akaun bagi sistem kami sendiri tidak terpakai secara seragam kepada semua salinan yang disimpan oleh penyedia. Penyedia AI mungkin menyimpan data terhad untuk keselamatan, pencegahan penyalahgunaan atau kewajipan undang-undang. Tidak menggunakan data untuk latihan model tidak bermaksud tiada penyimpanan. Sila lihat butiran penyimpanan penyedia dalam Senarai Perkhidmatan Pihak Ketiga.

---

Pemberitahuan push dan Pusat Tugas

Bahagian ini terpakai apabila anda menggunakan versi aplikasi yang menyediakan ciri pemberitahuan push. Bagi versi tanpa ciri ini, pendaftaran dan pemprosesan khusus pemberitahuan push yang diterangkan di sini tidak terpakai. Perbezaan ini bergantung pada ketersediaan ciri dalam versi aplikasi, bukan pada sama ada anda memberikan kebenaran pemberitahuan pada peranti.

Kami menyediakan pemberitahuan push melalui perkhidmatan yang serasi dengan peranti dan versi aplikasi anda. Butiran penyedia dan data yang mereka proses dinyatakan di bawah.

Pelayan kami menerima UUID bagi setiap pemasangan aplikasi, token push, status kebenaran dan pilihan pemberitahuan, bahasa serta zon waktu. Selepas anda log masuk, data ini dipautkan kepada akaun anda. UUID pemasangan bukan pengecam perkakasan. Kami menggunakan data ini untuk mendaftarkan peranti penerima, menghantar pemberitahuan tugas yang selesai dan mesej perkhidmatan yang berkenaan, serta mengurus penghantaran mengikut bahasa, zon waktu dan tetapan pemberitahuan. Jika peringatan padanan pakaian diaktifkan, penghantarannya tertakluk kepada pilihan dan kebenaran yang berkenaan. Kebenaran pemberitahuan dalam sistem peranti atau penerimaan notis ini sahaja tidak merupakan persetujuan nyata untuk menerima mesej pemasaran.

Anda boleh mematikan pemberitahuan dalam tetapan sistem peranti dan terus menggunakan Pusat Tugas. Mematikan pemberitahuan tidak dengan sendirinya memadam data pendaftaran atau rekod penghantaran yang sedia ada. Kami menyimpan data ini hanya selama yang diperlukan untuk tujuan yang dinyatakan. Rekod yang dipautkan kepada akaun tertakluk kepada peraturan penghapusan akaun dan pengecualian penyimpanan terhad dalam notis ini. Penyimpanan dan penghapusan oleh penyedia pemberitahuan tertakluk kepada dasar masing-masing.

Penyedia perkhidmatan pemberitahuan push

Dalam versi dengan pemberitahuan push, kami menggunakan perkhidmatan yang sesuai dengan sistem pengendalian peranti dan versi aplikasi. Untuk menghantar mesej, penyedia memproses token, kandungan pemberitahuan dan maklumat teknikal yang diperlukan, termasuk pengecam pemasangan yang berkenaan, yang berbeza daripada UUID pemasangan aplikasi kami. Butiran penyedia serta peraturan pemprosesan dan penyimpanan tersedia dalam Senarai Penyedia Perkhidmatan Pihak Ketiga.

Part 2 — Global Privacy Policy (English)

Document version: 2026-10-22
Controller: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse," "we," "us," or "our")
Registered address: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Privacy contact: support@echojoy.cn

This Privacy Policy explains how OutfitMuse collects, uses, discloses, retains, and protects personal information when you use our mobile applications, websites, and related services (collectively, the "Services").

This global Policy applies wherever we make the Services available. Country-specific notices may supplement it for Brazil, Japan, Mexico, India, Indonesia, Malaysia, the United Arab Emirates, Nigeria, or another market. It is not directed to people in the European Economic Area, the United Kingdom, or jurisdictions where we have not made the Service available. We will publish an applicable regional notice before offering the Service in those regions.

Regional privacy notices

Please also read the notice for your country or region, where listed below. A regional notice supplements this global Policy; choosing a different display language does not remove any protections that apply where you live.

• Hong Kong and Taiwan — 繁體中文
• Canada — Français
• Brazil — Português
• Japan — 日本語
• Mexico — Español
• India — English
• India — हिन्दी
• Indonesia — Bahasa Indonesia
• Malaysia — Bahasa Melayu / English
• United Arab Emirates — English
• Nigeria — English

Please read this Policy with our Terms of Service. If you have questions or wish to exercise a privacy right, contact us at the email address above.

1. Information We Collect

We collect information that you provide, information generated while you use the Services, and limited information that is collected automatically.

We do not request device location permission or collect precise device location. For city-based weather features, we use approximate city-level location inferred from your IP address or a city you select manually. You may also deny camera or photo-library permission; however, features that require you to take or upload photos will not be available.

Payments for subscriptions and in-app purchases are processed by the app store used for your purchase. OutfitMuse receives the transaction and subscription information necessary to verify purchases and provide benefits. Through these store billing integrations, we do not receive your full payment-card number, card security code, payment-account password or payment authentication code. The relevant store handles payment details under its own terms and privacy policy.

2. How We Use Information

We use personal information only as needed to:

• provide, maintain, personalize, and secure the Services;
• create and administer accounts; verify sign-ins; prevent fraud, abuse, and unauthorized access;
• receive, store, transform, and return the photos, prompts, and other inputs needed for the AI feature you actively request;
• provide weather-aware outfit recommendations based on your manually selected city or approximate city inferred from your IP address;
• verify and reconcile purchases, provide and synchronize membership and AI credits, prevent payment-related fraud, and handle refunds, billing disputes and necessary transaction records;
• understand app usage through the configured analytics described above;
• respond to support requests and communicate about material service or policy changes;
• diagnose crashes, fix defects, measure service reliability, and enforce our Terms; and
• comply with legal obligations and protect the rights, safety, and security of OutfitMuse, our users, and others.

We do not use your photos, prompts, profile or body information, or generated images to train or improve our or a third party's AI models. We do not use personal information for targeted advertising.

Push notifications and device registration

This section applies only to app versions that include the push notification feature. For versions without this feature, the push-specific device registration and processing described in this section do not apply. Feature availability is separate from whether you grant system notification permission.

We provide push notifications through a service compatible with your device and app version. The providers and information they process are described under “Push service providers” below. To register an app installation and manage notification delivery, our servers process the installation UUID, push token, notification permission and preference status, language, and time zone. When you are signed in, these records are linked to your account through your authenticated session. The installation UUID identifies an app installation; it is not a hardware serial number.

We use this information to deliver task-result notifications and applicable service notices to the appropriate installation, select the notification language and delivery time, and respect notification settings. Where outfit reminders are enabled, we also use it for those reminders, subject to your preferences and any required consent. Notification permission and acceptance of this policy do not by themselves constitute explicit consent to marketing messages.

You can turn off system notifications in your device settings and manage available reminder preferences in the app. Turning off notifications does not prevent you from using Task Center or viewing results, and does not itself delete existing registration or account records. We retain notification registration and preference records only for as long as necessary for their stated purposes. Account-linked records are covered by the account-deletion rules and limited retention exceptions in this policy. Provider-held records and applicable retention rules are described in the Third-Party Services List.

Push service providers

The applicable push service processes the push token, notification payload, and technical information needed to deliver messages. The service used depends on your device operating system and app version. Provider identities, any service-specific identifiers, processing locations and retention rules are described in our Third-Party Services List.

Community content and interactions

Where community features are available, publishing makes your selected outfit and associated clothing images, nickname and avatar visible to other users. Items and related information you choose to make public with your post are also displayed. Where a public sharing page is provided, anyone with its link can access it. You may also choose to make wardrobe items and related information public and may turn automatic publication of new items on or off. Wardrobe content you have not chosen to make public remains private.

We process account-linked publication, interaction, browsing and report records to provide community features, improve the service and maintain safety. Community try-on uses your photo as described in the AI section of this Policy; results remain private unless you choose to share them.

You can remove your posts and manage interactions and blocked authors. Removing a post ends its community display but may not recall external copies or other users' already-generated try-on results. Account deletion and retention follow this Policy.

3. AI Feature Processing and Your Choices

When you request an AI-powered feature, OutfitMuse sends the photos or image links you choose, which may include your face, and the instructions and relevant preferences needed for the request, through a contracted AI gateway to AI model providers for analysis, generation or editing as needed. Before this personal information is sent, we explain the processing and ask for your explicit permission in the app. If you decline, we do not send that AI request and the relevant feature cannot proceed. Agreeing to general service terms or buying a membership does not replace this permission. Further details are in our Third-Party Services List.

You may stop using an AI-powered feature at any time. The relevant feature cannot operate without the necessary inputs. You can delete uploaded content, generated content, or your account as described in the Account Deletion Instructions.

4. When We Disclose Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We disclose information only in these limited circumstances:

• Community publication. When you choose to publish content or make wardrobe items public, we display the selected content and author information as described in “Community content and interactions” above.

• Sharing at your direction. When you use the device sharing function, the image you select is sent to the external service you choose, which handles it under its own rules.

• Service providers. We use providers that process information on our behalf for cloud hosting, storage, content delivery, authentication, email delivery, push delivery, AI processing, crash reporting, and customer support. They may use the information only to provide services to us, subject to contractual and technical safeguards.

• App stores and billing. We exchange the identifiers and transaction information needed to verify purchases and administer paid benefits with the store used for your purchase. App store providers also process certain account, payment and fraud-prevention information independently under their own policies; not every store activity is performed solely on our instructions.

• AI providers. When you request an AI feature, the necessary images, prompts, and related request parameters are disclosed to the AI providers described in our Subprocessor List.

• Legal and safety reasons. We may disclose information when we reasonably believe it is necessary to comply with law, enforce our agreements, protect rights or safety, investigate fraud or security incidents, or respond to valid legal process.

• Corporate transactions. If we are involved in a merger, financing, reorganization, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or notice where required by law.

We do not make your wardrobe, profile photos, body photos, or generated images public by default.

5. International Processing and Data Location

Our overseas production environment is hosted primarily in the United States using contracted cloud hosting services. This includes application infrastructure and storage for overseas account and content data.

Our providers may process information in the United States or other locations necessary to provide their services. When information is transferred across borders, we use appropriate contractual, organizational, and technical safeguards required by applicable law. We will update this Policy before changing the primary data region or materially changing the categories of recipients.

6. Retention and Deletion

To delete your account, open Profile → Settings (or directly in Profile in versions without a Settings page) in the app and follow the account-deletion instructions.

We retain personal information only for as long as needed for the purposes in this Policy:

• Account information, wardrobe content, profile information, preferences, and saved generated results are retained while your account remains active, unless you delete them earlier.
• Temporary copies used to complete an AI request are deleted from our active systems within 30 days after completion, unless they are saved as content in your account or must be retained for security, legal, or dispute-resolution reasons.
• Security, diagnostic, and operational logs are generally retained for up to 90 days, unless a longer period is necessary to investigate an incident or comply with law.
• When the app confirms successful account deletion, you can no longer sign in with that account. This operation does not automatically erase all associated wardrobe content, history, photos or interaction records. To request deletion of remaining personal data, use the privacy contact in this policy; the retention and deletion rules below apply. If the app reports a failure, it does not confirm completion or clear your local sign-in data.

If specific records must be retained by law or are temporarily needed for security audits or dispute resolution, we retain only the minimum necessary information for the shortest necessary period, restrict processing to the permitted purpose, and delete or irreversibly anonymize it when that requirement ends. Where technical limitations temporarily prevent deletion from backups, we securely isolate those copies and limit processing to storage and necessary security protection until they can be deleted or irreversibly anonymized as soon as technically possible. These exceptions do not permit continued use of retained personal data for other purposes. Anonymization means the data can no longer identify or be linked to you and cannot be restored to an identifiable form.

Purchase, subscription, entitlement and related support records may be retained after account deletion where and for as long as necessary for legal or accounting obligations, refunds, disputes or fraud prevention. Access is restricted and retention is limited to the relevant purpose. Account deletion does not itself cancel a subscription held with an app store; cancellation is explained in our Membership and Auto-Renewal Terms.

The retention rules above describe our own systems. Provider-specific processing and retention are described in the Third-Party Services List.

For deletion steps and the limited exceptions to deletion, see our Account Deletion Instructions.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit, role-based access, and security logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we identify a security incident that requires notice under applicable law, we will provide notice as required.

8. Your Privacy Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information. You may also withdraw optional camera or photo-library permissions in your device settings. You can update or delete many items directly in the app, including saved photos, preferences, and your account.

To make a request that is not available in the app, email support@echojoy.cn with the subject line "Privacy Request." Please include the email address associated with your account and the request type. We may verify your identity before responding. We will not discriminate against you for exercising a privacy right.

9. California Privacy Notice

This section applies to California residents. In the preceding 12 months, we may have collected the following categories of personal information: identifiers (such as email address, account ID, IP address, and device identifiers); customer-record information you provide; commercial information such as purchase history, subscription status and entitlement records; internet or network activity; approximate city-level location inferred from IP and manually selected city information; user content (including photos, prompts, and generated images); and profile information, including body-profile information that you choose to provide.

We collect these categories directly from you, automatically from your device and use of the Services, and from sign-in providers when you choose a third-party sign-in method, and from the store used for a purchase to verify transactions and administer benefits. We use and disclose them for the purposes described in Sections 2 and 4.

We do not sell personal information or share personal information for cross-context behavioral advertising, as those terms are defined by California law. We do not use or disclose sensitive personal information for purposes other than providing and securing the Services and the other permitted purposes described in this Policy. California residents may submit access, correction, deletion, or portability requests through the contact method in Section 8. Authorized agents may submit requests where permitted by law, subject to verification of their authority and your identity.

10. Children

OutfitMuse is not directed to children under 13, and you must be at least 13 years old to use the Services. If you are under the age of majority where you live, you may use the Services only with permission from your parent or legal guardian. We do not knowingly collect personal information from children under 13. If we learn that we collected such information without appropriate authorization, we will delete it.

11. Changes to This Policy

We may update this Policy when our practices, Services, or legal requirements change. For material changes, we will provide notice through the Services or by another appropriate method and, where required, obtain your consent before the change takes effect. The "Document version" date identifies this revision. Any effective date and required notice will be communicated when an update takes effect.

12. Contact Us

Chengdu Xinling Qiyue Network Technology Co., Ltd.
Privacy requests and questions: support@echojoy.cn

If you contact us about a privacy request, please do not send photos, identity documents, or other sensitive information unless we specifically ask for it through a secure channel.