The short version
- No account. There is nothing to sign up for. We do not know who you are.
- Your profile is encrypted on your phone with the phone's own secure storage, and is never synced to a cloud or a database of ours.
- Nothing leaves the phone by default. A few features send something to our server or to a service we use, and each one asks you first or has an off switch.
- No advertising, no tracking, no analytics SDKs. The app contains no third-party trackers.
- Delete everything any time with “Delete body profile” in My Profile.
What the app keeps on your phone
Everything the app knows about you is stored on the phone, encrypted with the operating system's keystore (Android Keystore or the iOS Keychain):
- Your body profile: height, chest or bust, waist, hips and any other measurements you enter or estimate, your weight, age and bra size if you give them, which clothes you shop for, and your avatar's skin and hair colours.
- Clothes you say fit you: the brand, item, fit and size.
- Items you check, looks you save and their shop links.
- Your own picture, if you add one for the realistic photo, and the realistic photos the app has drawn for you.
- Your answer to “What would you love to do first?” and your settings.
Body photos taken for the automatic measurement are measured on the phone and deleted as soon as your profile is saved. They are not kept.
What can leave the phone, and when
Each of these happens only in the situation described. Otherwise the app makes no connection on your behalf.
1. Checking an item's fit
When you paste or share a shop link, the app sends the link to our server, which reads the shop's page and returns the item's name, picture, type and size chart. The phone can also read the page itself and send our server only the page's text. Your measurements are not sent: the fit is worked out on the phone. We do not keep the link or the page, except as described under “Send this page”.
2. Automatic measurement on our server (your choice)
The automatic measurement runs on the phone. If you pick “On our server” for a closer result, the two body photos and your height are sent to our server, measured in memory and deleted immediately. The photos are never written to disk, logged or used for anything else, and the measurements come back to the phone and are not kept on the server.
3. Realistic photo (your consent each time you turn it on)
Tapping Realistic photo sends your picture and the item's image to our server, which passes them to an AI try-on service (currently FASHN or Kling, hosted on fal.ai) to draw you wearing the item. The app asks for your agreement before your picture is sent, and you can withdraw it in My Profile. The resulting photo is kept on your phone only. We do not keep your picture; the AI service processes it to produce the image and is bound by its own privacy terms, which you can read at fal.ai/privacy.
4. Counts that help us fix shops (switch in My Profile)
To learn which shops' links fail, the app counts which shop hosts could not be read and sends those counts, with its next request, to our server. This is a shop's host name and a count only, never the link, the item or anything about you. My Profile can turn it off. If you agree to share your answer to “What would you love to do first?”, that one answer is counted on our server, with nothing that identifies you.
5. Send this page (only when you tap Send)
When a shop's page cannot be read, the app offers Send this page. Only if you tap Send does it send us that page and its link, so we can fix the reader for that shop. The page contains the shop's content, not yours.
What we never collect
- Your name, email, phone number, contacts or location.
- Your measurements, your profile or your photos, except in the two cases above that you choose.
- Advertising identifiers, device fingerprints or usage analytics.
- Anything from your photo library beyond the single picture you pick.
Permissions the app asks for
- Camera: to take the two guided body photos for the automatic measurement, and a photo of an item or its size label. Used only while you are taking the picture.
- Photos: to let you pick a picture of yourself for the realistic photo, or a picture of an item. The app reads only the picture you choose.
Our server
Our server receives the requests above and keeps no record that identifies you or your phone. It keeps: daily counts of reads and failures per shop host; a daily count of goal answers; and the shop pages you choose to send, with their links. Server logs record request paths and timings for a short period, without request bodies, measurements or images.
The website
fitsemble.com sets no cookies and has no analytics or trackers. If you join the waitlist, we keep your email address and the time you joined, and use it once, to tell you when Fitsemble is ready. To be removed, write to [email protected].
Children
Fitsemble is not directed at children under 13, and we do not knowingly collect information from them. The app has no account, so it holds nothing about any user on our side.
Deleting your data
Delete body profile in My Profile removes your profile, your clothes that fit, your saved items and looks, your picture and the realistic photos from the phone. Uninstalling the app does the same. Because nothing about you is kept on our server, there is nothing further to delete; to be removed from the waitlist, email us.
Changes
If this policy changes, the new version will appear here with a new date, and the app's privacy card will point to it. We will not start collecting something new without saying so here first.
Contact
Fitsemble is made by an individual developer in India. Questions about privacy: [email protected].