1. Introduction

DailyWear AI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the DailyWear AI mobile application (the "App"). We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the App you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is DailyWear AI Ltd. For any data protection queries, contact us at: privacy@dailywear.ai.

3. Data We Collect

We collect and process the following categories of personal data:

Account data — email address and hashed password.
Body measurements — height, weight, chest, waist, and hip measurements you provide.
Photographs — body photos (front and optional side) and clothing images you upload.
AI-generated outputs — virtual try-on images and fit analysis results.
Device & usage data — device model, operating system version, app version, anonymous usage analytics, and crash logs.
Subscription data — purchase receipts processed via Apple App Store or Google Play (we do not store payment card details).

4. How We Use Your Data

We process your data for the following purposes and lawful bases:

To provide AI styling services (contract performance) — your body photos and measurements are sent to our AI processing pipeline to generate virtual try-on images and fit recommendations.
To manage your account and subscription (contract performance).
To improve the App and fix bugs (legitimate interest).
To comply with legal obligations (legal obligation).

We do not use your data for profiling, automated decision-making with legal effects, or direct marketing without your explicit consent.

5. AI Processing Disclosure

DailyWear AI uses third-party artificial intelligence services (currently OpenAI) to analyse body photos, clothing images, and generate virtual try-on results.

Your photos are transmitted to OpenAI's API servers over encrypted connections (TLS 1.2+).
OpenAI processes data per their data processing agreement and does not use API inputs to train their models.
AI outputs are estimates for personal styling guidance only — they are not professional tailoring, medical, or body-composition advice.
AI-generated images may contain inaccuracies in colour, fit, proportion, or texture. DailyWear AI does not guarantee the accuracy of any AI output.

6. Data Storage & Security

We store your data on Supabase (hosted on AWS EU-West) with encryption at rest (AES-256) and in transit (TLS 1.2+).
Photographs are stored in private storage buckets accessible only via time-limited signed URLs.
Passwords are hashed using bcrypt; we never store plaintext passwords.
We implement row-level security (RLS) policies so users can only access their own data.
We conduct regular security reviews and follow the principle of least privilege for all data access.

7. Data Retention

Your data is retained for as long as your account is active.
AI-generated images are retained until you delete them or delete your account.
Upon account deletion, all personal data — including photos, measurements, AI outputs, and profile information — is permanently erased within 30 days.
Anonymised, aggregated analytics data (which cannot identify you) may be retained indefinitely for product improvement.

8. Data Deletion & Your Rights

Under UK GDPR you have the following rights:

Right of access — request a copy of your personal data.
Right to rectification — correct inaccurate personal data.
Right to erasure — delete your account and all associated data via Profile → Delete Account, or by emailing privacy@dailywear.ai.
Right to data portability — receive your data in a structured, machine-readable format.
Right to restrict processing — request limitation of data processing.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, withdraw at any time.

To exercise any of these rights, use the in-app controls or contact privacy@dailywear.ai. We will respond within 30 days.

9. Third-Party Services

We share data with the following third-party processors, each operating under data processing agreements:

Supabase (database, authentication, file storage) — EU-West (Ireland).
OpenAI (AI image analysis and generation) — US, with Standard Contractual Clauses.
RevenueCat (subscription management) — US, SCCs in place.
Apple / Google (app distribution, payments) — per their respective privacy policies.

We do not sell your personal data to any third party.

10. Children's Privacy

DailyWear AI is not intended for children under 16 years of age. We do not knowingly collect personal data from anyone under 16.

Given that this App processes body photographs, we take additional precautions:

We do not permit users under 16 to create accounts.
If we become aware that a user is under 16, we will immediately delete their account and all associated data.
Parents or guardians who believe their child has provided personal data should contact privacy@dailywear.ai immediately.

This policy aligns with the UK Age Appropriate Design Code (Children's Code) and the UN Convention on the Rights of the Child.

11. International Transfers

Some of our processors (OpenAI, RevenueCat) are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).

12. Cookies & Tracking

The App does not use browser cookies. We may collect anonymous analytics data (e.g. session events) using privacy-respecting tools. No advertising identifiers are used.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notice or email. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact & Complaints

If you have questions or complaints about this policy:

Email: privacy@dailywear.ai

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.