Privacy Policy

Last updated August 25, 2026

This policy explains what data Fitlyn (operated by S3F Technologies, "we", "us") collects, why, and how you can control it.

Information we collect

• Account information — your email address and a securely hashed password. If you sign in with Google, we receive your name, email, and profile picture from Google (scope: openid email profile) — we never receive your Google password.
• Wardrobe content — photos you upload of clothing items, plus attributes our AI extracts from them (category, color, type).
• Virtual try-on images — photos you choose to use for try-on are sent to our image-processing provider (OpenAI) to generate a preview render, and to our garment-extraction model (Hugging Face) to identify clothing attributes.
• Gmail data (optional) — only if you explicitly connect Gmail, we request read-only access (gmail.readonly) to scan for order-confirmation emails from recognized retailers, so we can automatically add your purchases to your wardrobe. We parse relevant emails to extract order details; we do not read, store, or use emails unrelated to purchase confirmations, and we never send email on your behalf.
• Push notification token — a device identifier used to deliver notifications you've enabled.
• Diagnostic data — crash and error reports used to fix bugs. These do not include your wardrobe photos or email content.

How we use it

Solely to operate and improve Fitlyn's features: building your wardrobe, generating outfit suggestions, rendering try-on previews, and detecting new purchases when you've connected Gmail. We do not sell your data, and we do not use it for third-party advertising.

Who we share it with

• OpenAI — processes images you submit for virtual try-on.
• Hugging Face — runs the model that identifies garment attributes from your photos.
• Google — provides sign-in, and Gmail access if you choose to connect it.
• Amazon Web Services — hosts our infrastructure and stores your data securely.

We do not share your data with data brokers or advertisers.

Data retention and deletion

Your data is retained as long as your account is active. You can permanently delete your account and all associated data (wardrobe items, outfits, connections, subscription records) at any time from within the app. You can also revoke Fitlyn's access to your Google account at any time from myaccount.google.com/permissions.

Security

Passwords are hashed and never stored in plain text. All data in transit is encrypted (HTTPS/TLS). Gmail access is read-only — Fitlyn cannot send, delete, or modify anything in your inbox.

Children's privacy

Fitlyn is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

We'll update the date at the top of this page if this policy changes materially.

Contact

Questions or data requests: hello@s3ftechnologies.com