Privacy at a Glance: At Wabisabi (wabisabi.fashion), we treat your body image, wardrobe items, and personal style data with reverence. We never sell your personal information, never share your body reference photos with public AI training corpuses, and store all user media in encrypted cloud vaults. You remain in absolute control of your data.
1. Overview & Commitment
This Privacy Policy describes how Wabisabi Fashion Inc. ("Wabisabi", "we", "our", or "us") collects, uses, encrypts, and discloses personal information when you use our mobile applications (iOS and Android), web applications, and website at https://wabisabi.fashion (collectively, the "Platform").
We are committed to full compliance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), and applicable global data protection standards.
2. Information We Collect
We collect information in three ways: directly from you, automatically through device sensors with your permission, and through authorized third-party social providers.
A. Information You Provide Directly
- Account & Profile: Full name, email address, mobile phone number (OTP-verified), display name, and avatar picture.
- Style Attributes: Aesthetic preference tags (e.g., Minimalist, Vintage, Streetwear, Sustainable), sizing preferences, and color palette affinities.
- Wardrobe & Vanity Items: Photographs of clothing, cosmetics, skincare finishes, hairstyles, and fragrances, along with descriptive metadata, materials, brands, seasonality, and your custom "Character Notes" (vintage history, tailored repairs, wear marks).
B. Full-Body Reference Photographs & Physical Dimensions
To power the Photorealistic AI Virtual Try-On feature, you may voluntarily upload a high-resolution, full-body reference photograph. You may also optionally supply basic physical attributes (such as height and body shape category) to optimize garment drape modeling.
C. Contextual & Environmental Data (Device Permissions)
- Approximate Geolocation & Weather: With your permission, we fetch local temperature, humidity, UV index, and rain likelihood to deliver weather-accurate outfit recommendations. We do not track continuous background GPS movement; location is sampled only upon triggering daily styling workflows.
- Camera & Photo Library: Accessed exclusively when you choose to photograph new closet items or upload your full-body reference image.
D. Social Sign-In Data
When utilizing One-Tap Social Connect (Google, Instagram OAuth, TikTok Login Kit), we collect basic verified profile identity tokens (display name, public handle, profile photo, verified email) in accordance with permissions you explicitly authorize.
3. Body Reference & Biometric Data Protection
Because virtual try-on involves personal body imagery, we implement stringent protective guardrails:
- Explicit In-App Consent: Uploading a body reference photo requires an affirmative, unbundled consent toggle explaining how the image is utilized.
- End-to-End Encryption: User reference images are stored with AES-256 encryption at rest inside private Google Cloud Storage (GCS) buckets, protected by IAM role access policies.
- Zero Public Model Training: Your body reference photo is never used to train public open-source or commercial AI foundation models.
- Instant One-Click Deletion: You can replace or permanently wipe your reference photo from our servers at any time in App Settings > Profile > Update Reference Photo > Delete.
4. How We Use Your Information
We process your data for specific, lawful purposes:
- Contextual Outfit Recommendations: Analyzing the triad of your calendar agenda, live weather conditions, and venue environment against your digitized closet.
- Virtual Layer Mapping: Rendering virtual garments realistically mapped onto your silhouette.
- Cost-Per-Wear (CPW) & Sustainability Insights: Computing cost-per-wear in real-time to help reduce fast-fashion overconsumption.
- Authentication & Security: Preventing fraudulent sign-ups, enforcing freemium quotas, and managing active token balances.
- Product Improvements: Conducting anonymized system debugging and latency optimization.
5. AI Models & Cloud Processing Architecture
Wabisabi operates on an enterprise Google Cloud Platform (GCP) infrastructure:
- Reasoning & Metadata Tagging: Wardrobe metadata extraction, color palette classification, and recommendation bundling are performed using Google Vertex AI (Gemini Flash) with structured JSON outputs.
- Virtual Try-On Diffusion: Visual outfit rendering is conducted via secure, isolated cloud GPU workers running the Nanobanana / IDM-VTON diffusion pipelines.
- Data Isolation: All AI inference calls are transmitted over encrypted TLS 1.3 tunnels and executed on private virtual instances without data retention by foundation model providers.
7. Data Retention & Erasure
We keep your personal information only as long as necessary to provide the Services. If you delete an individual item from your digital closet, its image and segmentation metadata are deleted from our primary databases immediately.
If you delete your entire Wabisabi account, all associated user records, full-body reference images, and wardrobe catalogs are permanently purged from active storage within 30 days, and from encrypted rolling backups within 60 days.
8. Your Legal Rights (GDPR & CCPA)
Regardless of your country of residence, Wabisabi extends comprehensive privacy rights to all registered users:
- Right of Access & Portability: Request an export of all your wardrobe inventory data, style tags, and wear history in machine-readable JSON format.
- Right to Rectification: Edit or correct any inaccurate account details or garment attributes directly within the app.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and reference photos.
- Right to Withdraw Consent: Revoke consent for body image processing, camera access, or location services at any time via device settings.
- CCPA "Do Not Sell or Share My Personal Information": Wabisabi does not sell personal information or share it for cross-context behavioral advertising.
- Non-Discrimination: We will never discriminate against you, alter service quality, or withhold features for exercising your privacy rights.
To exercise any of these rights, email privacy@wabisabi.fashion with the subject line "Privacy Rights Request". We verify identity and respond within thirty (30) days.
9. Security Measures
We employ modern administrative, physical, and technical safeguards, including:
- End-to-end encryption in transit (HTTPS / TLS 1.3) and AES-256 encryption at rest.
- Google Cloud Armor DDoS protection and Web Application Firewall (WAF) filtering.
- Principle of least privilege IAM access controls for internal systems.
- Regular automated vulnerability scanning and security audits.
11. Children's Privacy
Wabisabi is not directed toward children under 13 years of age. We do not knowingly collect personal information or photos from children under 13. If you believe a child has provided us with personal information, please alert us immediately at privacy@wabisabi.fashion, and we will purge the data immediately.
12. Contact Our Data Protection Officer
For any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer (DPO):
Data Protection Officer
Wabisabi Fashion Inc.
Website: https://wabisabi.fashion
Privacy Office: privacy@wabisabi.fashion
General Support: support@wabisabi.fashion