Privacy Policy

Welcome to VastraLens ("we," "our," "us"). We are committed to protecting your privacy and ensuring you have a secure and enjoyable experience when using our mobile application, VastraLens (the "App"), and our associated services (the "Services").

This Privacy Policy explains how we collect, use, process, and safeguard your personal information in connection with the App, particularly to satisfy compliance standards and Apple App Store guidelines.

VastraLens is owned and operated by NUVOIS (referred to as "NUVOIS" or "Company" in this policy). By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Device Permissions We Request

To provide our core AI-powered wardrobe management, virtual try-on, and calendar scheduling features, VastraLens requires access to certain features on your device. We only access these features with your explicit consent, which can be revoked at any time in your device settings.

3. Data We Collect and How We Link It

According to Apple's privacy guidelines and the App Store Privacy Manifest requirements, we declare that we collect the following data categories. All data linked to your identity is kept strictly confidential and used only for core app features.

4. AI Try-On, Virtual Wardrobe & Face Data Policy

One of VastraLens’ core features is the AI-driven Virtual Try-On model which allows you to visualize how garments look on you. Because this feature uses your device's camera or photos, we maintain a strict policy regarding your images and Face Data:

• Face Data Collection: When you use the Virtual Try-On feature, we may collect photos of you that include your face (Face Data). This data is collected solely when you explicitly upload a portrait or take a selfie for the try-on canvas.
• Purpose of Face Data: Your Face Data is used exclusively to generate a personalized try-on image by overlaying garments onto your photo. We do not use this data for any other purpose.
• No Biometric Extraction: We do not perform biometric recognition, facial mapping, or permanent body measurement analysis. It is never used to train public AI models.
• Third-Party AI Service (Google Generative AI): To power our advanced Virtual Try-On generation and Body Shape Analysis, we securely transmit your uploaded photos (including Face Data and full-body images) to Google's Generative AI services (Gemini). This data is transmitted securely via our backend and is processed exclusively to generate your personalized styling images. Google provides the same or equal protection of your data as outlined in this privacy policy, and we ask for your explicit consent within the app before sending any photos to this third-party AI service.
• Face Data Retention: Your uploaded photos and generated try-on looks are stored securely on our Firebase Storage. They are retained only as long as you keep them saved in your account. If you delete a photo within the App, or if you delete your account entirely, all associated Face Data and images are immediately and permanently destroyed from our active servers.

5. Third-Party Services and Infrastructure

We use trusted third-party providers to host the App infrastructure, AI processing, and analytics. These providers are bound by strict contractual clauses to ensure your data is kept secure and confidential:

• Firebase (Google): We use Firebase Authentication, Firestore Database, and Firebase Storage for user management and secure cloud syncing.
• Google Generative AI (Gemini): We use Google's Generative AI API to analyze uploaded photos and generate virtual try-on images. The data sent to Google is processed securely and is not used to train their public models.
• Google Sign-In / Apple Sign-In: To facilitate passwordless, secure user logins.
• Backend API / AI Model Hosting: Hosted on private containerized infrastructure (e.g., Railway/AWS) with secure HTTPS/SSL endpoints.
• Analytics/Crash Reporting: We use standard, anonymous crash telemetry (such as Firebase Crashlytics) to detect app failures and optimize system stability.

6. Data Retention and Security

We store your data for as long as your account remains active. If your account is inactive for more than 24 consecutive months, we reserve the right to delete your data after sending a notification email.

Security Measures: We use industry-standard SSL/TLS encryption for all network traffic between the App and our backend servers. Access to our Firebase database is governed by strict Security Rules that allow only authenticated users to view or modify their own files.

7. Your Rights and Data Deletion

You have complete control over your personal data. You hold the right to access, update, correct, or permanently delete your data at any time.

8. GDPR & CCPA Compliance Notes

For European Union (GDPR) and California (CCPA) residents, we guarantee that you have the right to request a portable copy of your data, object to automated profiling, and opt out of any data sharing. VastraLens is fully aligned with these regulations: we do not trade, lease, or rent your styling portfolios or clothing details to third parties.

9. Contact & Support

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us. We are happy to help you manage your privacy preferences.