Privacy Policy

At a glance

• Your color analysis stays on your iPhone. Selfies and measurements never leave your device. We only keep the result, such as “Soft Autumn”.
• We pixelate faces before uploading. This happens on your iPhone before a photo reaches our server. The only exception is the glow-up preview, and only with separate consent.
• AI only with your consent. Product photos, outfit check, glow-up, and the AI stylist use Google Gemini. Google does not train models on this data.
• No tracking, no ads. We don’t sell data and don’t embed advertising or analytics services.
• You stay in control. Export your data, delete everything, delete your account, and withdraw consent right in the app.
• Payments go through Apple only. We never see payment details, just the status of your subscription.

Controller

The controller responsible for processing personal data in the Mainfit app and on these web pages is:

For any privacy question, reach us at [email protected]. We have not appointed a data protection officer because we are not required to (Section 38 BDSG). Confirm whether an appointment is required (O3).

This policy covers the Mainfit iPhone app and its web pages (legal texts, password reset).

What is stored where

Mainfit does as much as possible right on your iPhone. Our server only receives what your closet needs across devices, what the AI features need, and what your subscription needs.

Guest and account

To delete your account, go to Profile → Delete account in the app. We immediately delete your account, items, outfits, uploads, AI results, and device tokens; a background job removes the image files right after. An active Apple subscription does not end this way. Cancel it in your iPhone Settings.

Photos and closet

Pixelation uses Apple’s on-device face detection. If a face isn’t detected, for example because it is partly covered, it may stay unpixelated. Only photograph other people with their permission.

Items without AI never send a photo to Google: you keep the photo and the cutout made on your iPhone.

AI features with Google Gemini

Product photos, outfit check, glow-up, and the AI stylist (chat) use Google’s Gemini API. Before anything is sent to Google for the first time, the app asks for your explicit consent. Without it, only the on-device features work.

We label generated images as AI-generated: in the image metadata (IPTC “Digital Source Type”) and in the app as “AI product photo” or “AI preview”. The AI stylist identifies itself as an AI and can make mistakes.

You can withdraw your consent at any time in the app under Profile → AI features. Withdrawal applies to all new requests immediately; jobs already running may finish. Processing before withdrawal remains lawful.

Color analysis on your iPhone

To find your color season, the app records a short series with the front camera and measures skin, hair, and eye color. This happens entirely on your iPhone using Apple’s Vision framework:

• The images are processed in memory only, never written to storage, and never transmitted.
• The measured color values exist only during the analysis. Afterwards, only the result remains: color season, contrast level, and how confident the estimate is.
• Only the color season and contrast level are sent to our server, so suggestions match on all your devices.
• We don’t create face profiles and we don’t identify anyone.

The legal basis for the stored result is Art. 6(1)(b) GDPR. You can skip the analysis or choose your color season manually.

Subscription through Apple

You buy and manage Mainfit Pro exclusively through Apple. Apple handles purchase, payment, invoicing, refunds, and cancellation as an independent controller. We never receive payment details, your Apple Account, or your address.

If someone presents a subscription that previously belonged to another Mainfit account (same Apple Account, different account), the entitlement moves to the presenting account, together with this month’s allowance usage. This can happen at most once in 24 hours and three times in 30 days. We log the move with the account IDs; for the limits we keep only the time and usage per subscription, without account IDs, for 40 days at most. If an account is deleted, we likewise keep its subscription’s usage for the month until another account takes the subscription over.

Free photos and DeviceCheck

Without a subscription you can try 3 free product photos, once per iPhone. So this can’t be repeated endlessly by reinstalling or creating new accounts, we use Apple’s DeviceCheck: the app creates a device token that our server uses to read or set two flags Apple stores per device for Mainfit. We use one of them for “free photos used up”. Apple receives no photos and no account data in the process.

Weather and location

For outfits that match the weather, the app queries Apple Weather (WeatherKit) with your location, but only if you allow location access. The request goes directly from your iPhone to Apple; your location never reaches our server. Without access, the app estimates the weather based on the season.

The legal basis is your consent through iOS location permission (Art. 6(1)(a) GDPR), which you can withdraw in your iPhone Settings at any time. According to Apple, it processes the location for weather requests without linking it to your Apple Account. Confirm Apple’s role (independent controller or processor).

Notifications

The app schedules your daily outfit and the reminder before your trial ends as local notifications on your iPhone; nothing is sent to us for this. For “Product photos ready”, we may send a push notification through the Apple Push Notification service. For this we store your device’s push token.

The legal basis is your notification permission in iOS (Art. 6(1)(a) GDPR). You can turn it off in your iPhone Settings. The push token belongs to your account until you sign out on the device or delete your account.

Servers, security, support

Everything is transmitted encrypted (TLS). We store images privately, serve them only through expiring signed links, and store passwords only as hashes. So paid requests don’t count twice after a dropped connection, we keep their response for 24 hours.

These web pages

The legal pages (privacy policy, terms, legal notice) set no cookies, load no fonts, scripts, or images from third parties, and use no analytics. Only the server logs described above are processed.

Recipients and transfers

Google and Apple may process data in the United States or other countries outside the EU. Google LLC and Apple Inc. are certified under the EU-U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision of July 10, 2023. The European Commission’s standard contractual clauses apply in addition. Confirm the transfer mechanism for each recipient.

We don’t sell data or share it for advertising. We only disclose data to authorities where the law requires it.

Retention periods

“Delete everything” in the app removes items, outfits, uploads, checks, glow-ups, and their images, but keeps your account, profile, consents, and subscription. “Delete account” removes everything.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). You can do much of this right in the app:

• Export data: Profile → Export data creates a ZIP on your iPhone with your items, outfits, profile, and images.
• Correct: You can edit items, style preferences, and your color season anytime.
• Delete: single items, “Delete everything”, or “Delete account”, even before subscribing via the account menu on the subscription screen.
• Withdraw consent: AI features and glow-up preview under Profile, location and notifications in your iPhone Settings. Withdrawal applies going forward.

Objection (Art. 21 GDPR): Where we process data based on legitimate interest (abuse prevention, security), you can object on grounds relating to your particular situation. Email us at [email protected].

Complaints: You can lodge a complaint with a data protection authority, for example the one responsible for us: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

You are not obliged to provide data. Without consent there are no AI features, without location the app estimates the weather, and without an account your closet stays on this iPhone. Mainfit makes no automated decisions with legal effect (Art. 22 GDPR); suggestions and AI results are recommendations.

Age, tracking, changes

18+: Mainfit is for adults. If you indicate that you are under 18, the app blocks use on this iPhone. As a guest, it also deletes the guest session and its data on our server. If you are signed in with an account, it signs you out and deletes the data on your iPhone; your account on our server remains until you ask us to delete it ([email protected]). The app remembers the block on this iPhone; we don’t store the “under 18” answer on our server.

No tracking: We use no advertising, analytics, or tracking services, don’t track you across other companies’ apps and websites, and therefore don’t ask for permission to track.

Changes: When the app changes, we update this policy. The version dated at the top of this page applies. We’ll inform you about material changes in the app.

This English version is provided for convenience. Decide which language version prevails.