Privacy notice

Operator: Vivagroup. Contact: contact@fitm3.com.

We store your account details, measurements, styling preferences, generated looks, previews, feedback, basket and referral attribution to provide your personal styling service. Passwords are stored as salted hashes. The account uses an essential session cookie. Referral links contain a random invitation code, not your email. We store who invited a newly registered account to award the verified-registration bonus. Inviters see aggregate referral status, not their friends’ names, emails or private content.

With your consent, your photo and selected garments are sent to OpenAI for AI previews. Temporary generation reference photos are removed when work finishes or is canceled. If you choose to save an adult family profile photo, it stays private until you remove the photo, delete that profile or delete the account. Generated previews remain in the selected profile’s history. A group photo is cropped in your browser to the selected person before upload. Provider-side retention is governed by OpenAI’s policies. A selfie cannot establish exact body proportions.

Authorized administrators see account and operational records, not a gallery of private user photos. Infrastructure operators may need controlled access for support, security and maintenance. Retailer image requests and shopping links connect your browser to retailers or their service providers; affiliate links may earn commission.

You can export account records or request account deletion in Account settings. Deletion disables access immediately; a background process erases private files and records after in-flight requests settle. We retain the latest two automatic daily backups and the latest pre-deployment backup. Older recognized snapshots are removed after retained copies pass verification; off-server backups are not yet configured. Contact us for access, correction, deletion or other privacy requests and complaints. Legal bases, processor agreements and international-transfer safeguards must be reviewed by the operator before public launch.

Fitm3 mobile app

The native app stores its private session credential in device secure storage and saves your language preference on the device. Photos chosen from your library are cropped on the device. Camera access is optional; you can use the system photo picker instead. Choosing a photo does not itself submit an AI request. The Generate action sends your selected photo and styling request to our service and OpenAI as disclosed above. The app does not use precise location, contacts or microphone access. Shopping links open external retailers.

AI content reports

You can report an unsafe or inappropriate AI result from its details in the app. We store the reason, optional note, result identifiers and account association so authorized administrators can review concerns and improve safeguards. Reports are private and do not create additional copies of your photos. Do not include sensitive personal information in report notes. Reports are included in your account export and removed when the account is erased.

How to delete your Fitm3 account and data without the app.

Saved profiles, wardrobe and outfit matching

Each account supports up to three profiles including its main profile. Saving a profile, continuing with a selected photo, or generating while signed in stores the selected photo and photo type privately for reuse with that profile’s measurements. You can replace or remove the photo. Wardrobe clothing photos and their names, categories, seasons and notes remain private until removed or the profile or account is deleted. When you approve wardrobe styling, selected clothing photos and notes are sent to OpenAI for outfit analysis. Find this outfit sends the inspiration photo you select to OpenAI to describe visible clothing and suggest similar catalog pieces; that inspiration photo is not retained in our private object storage. We do not identify people in inspiration photos. Generated looks and previews remain in the selected profile’s history. Retailer matches are approximate, not authentication of a product, a fit guarantee or proof of current stock. Account export includes wardrobe records and authenticated download links.

Guest trials

Adult visitors can request up to three guest previews using a private 24-hour session cookie. Unclaimed trial photos and results are queued for deletion after 24 hours; deletion waits for active requests and remote cleanup. Registering with a new email from that trial session preserves the results in your account, which still requires email verification. We retain keyed hashes of network addresses and generation reservations for abuse and spending controls. Network limits may affect people sharing a connection. Guest requests, including failures, count toward trial capacity. Your chosen interface language is stored in a preference cookie; automatic suggestions use browser language, not precise location. No photos are sent to a translation service.

Optional product analytics

With your separate permission, first-party analytics record page categories, broad traffic sources, saved-look actions, share-sheet actions, downloads and retailer-link clicks. A random browser identifier rotates monthly; we store its hash, not a fingerprint. When signed in, these events are associated with your account for authorized administrators. Analytics contain no photos, measurements, captions, raw IP addresses or full browsing URLs. Events are retained for up to 13 months and account-linked events are erased with account deletion. Account exports include these events. Service records separately provide signup and generation counts. Sharing callbacks are not proof of publication. Change or withdraw optional analytics permission using Analytics preferences on the home, account or studio page; this stops future collection, without affecting the service. We respect browser Do Not Track and Global Privacy Control signals.