Privacy Policy

1. Introduction

Horizon (“Cloth Savvy,” “we,” “us,” or “our”) is committed to protecting the privacy of individuals who use our mobile application and website (collectively, the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Cloth Savvy.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

Last updated: August 5, 2026

2. Information We Collect

We collect several categories of information to provide, improve, and personalise our styling services:

2.1 Information You Provide Directly

• Account Information:When you register, we collect your email address and a password (securely hashed via Supabase Auth). If you sign in using Google Sign-In, we receive your Google account email address and basic profile information as authorised by Google's consent screen.
• Profile Information: Your profile photo, username, gender, height, weight, age, and skin tone. This information is used to generate personalised outfit recommendations and virtual try-on results.
• Clothing Images:Photos of clothing items you upload for the “Complete My Look” feature, profile pictures for virtual try-on, and any other images you choose to upload. These images are stored and processed only on our own servers and are used solely for features like virtual try-on.
• Outfit Data: Outfits you generate, save, share, or otherwise interact with on the Platform, including AI-generated mannequin renders and descriptions.
• Communications: Information you provide when you contact us for support, send feedback, or otherwise correspond with us.

2.2 Payment Information

When you purchase credits or subscriptions through the Platform, your payment is processed by Razorpay, our third-party payment gateway. We do not collect, store, or have access to your full payment card numbers, bank account details, UPI IDs, or other sensitive financial information. Razorpay may collect your billing name, email, phone number, and transaction amount solely for payment processing. Their use of your information is governed by their privacy policy.

2.3 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, and mobile network information.
• Usage Data: Features you use, outfits you generate, pages you visit within the app, time spent, and interactions with AI-generated content.
• Crash Reports: When the app crashes, we receive crash logs (via Firebase Crashlytics) that include device state, stack traces, and app version information.
• Push Notification Tokens: Firebase Cloud Messaging tokens to send you notifications about outfit suggestions and reminders (if you opt in).

2.4 Information from Third-Party Services

We use third-party services that may collect information as described in their respective privacy policies:

• Supabase: Authentication, database storage, file storage
• Firebase (Google): Analytics, crash reporting, cloud messaging
• Razorpay: Payment processing
• Groq: AI outfit generation (text-based styling)
• Cloudflare Workers (our own edge servers): Virtual try-on and AI mannequin rendering — your uploaded photos are processed on our own infrastructure, solely to produce your try-on results
• Google ML Kit: On-device pose detection, image labelling, and selfie segmentation (data stays on your device)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide the Service: Generate personalised outfit recommendations, process virtual try-on requests, and enable sharing of outfits.
• To Improve the Service: Analyse usage patterns to enhance AI models, improve user experience, and develop new features.
• To Personalise Your Experience: Tailor outfit recommendations, style suggestions, and content based on your preferences, body measurements, and past interactions.
• To Process Payments: Facilitate credit purchases and subscription payments through Razorpay.
• To Communicate With You: Send service-related communications (password resets, account updates) and, with your consent, push notifications for outfit suggestions.
• To Ensure Security: Detect and prevent fraudulent activity, abuse, and violations of our Terms of Service.
• To Comply with Legal Obligations: Respond to legal requests, enforce our terms, and comply with applicable Indian laws and regulations.

4. Data Storage & Security

4.1 Where We Store Data

• Cloud Storage (Supabase): Your account data, profile information, saved outfits, and uploaded images are stored on Supabase servers. Supabase is SOC 2 compliant and encrypts data in transit and at rest.
• Local Storage (Your Device): Some data — including cached outfits, AI mannequin renders, and preferences — is stored locally on your device using Hive CE and SharedPreferences. This data enables offline access and faster load times.
• Firebase: Analytics data and crash reports are processed by Google Firebase and may be stored on Google Cloud infrastructure.

4.2 Security Measures

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest on Supabase and Firebase
• Secure authentication via Supabase Auth with hashed passwords
• Row-Level Security (RLS) policies on all database tables
• Obfuscated environment variables for API keys (EnVied)
• Regular security audits of our edge functions

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.

5. Data Sharing & Disclosure

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who help us operate the Platform. These providers are contractually bound to use your information only as necessary to provide services to us and are prohibited from using it for any other purpose:

• Supabase (hosting, database, authentication, storage)
• Google Firebase (analytics, crash reporting, push notifications)
• Razorpay (payment processing)
• Groq (AI outfit generation)
• Cloudflare Workers — virtual try-on and mannequin rendering on our own edge infrastructure (your photos are never handed to external AI vendors)

5.2 AI Processing

When you use our AI outfit generation or Complete My Look features, the relevant prompts and clothing descriptions are processed by our AI service provider (Groq) solely to generate your requested output. Groq does not retain your data beyond what is necessary for processing.

Your uploaded photos — including profile photos used for virtual try-on — are processed only on our own servers. They are used solely to render your virtual try-on results via our edge functions and are never shared with, sold to, or used by any third party for any other purpose.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities, including to meet national security or law enforcement requirements.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the applicable privacy terms.

6. Your Rights & Choices

In accordance with Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Correction: You can update or correct your profile information at any time through the app settings.
• Right to Deletion:You can delete your account and associated data through the app settings (“Delete Account”). This will permanently remove your profile, outfits, AI generations, and personalisation data from our servers. Note that a 30-day cooldown period applies before you can re-register with the same email.
• Right to Withdraw Consent: You may withdraw your consent to our data processing at any time by deleting your account.
• Right to Grievance Redressal: You have the right to raise concerns about our data handling practices (see Section 13 for contact details).

6.1 Managing Your Data In-App

• Update Profile: Go to Settings → Profile Photo or Settings → Style Personalisation to update your information.
• Clear Local Data: Signing out of the app will clear locally stored mannequin renders. Outfit data can be re-synced upon signing back in.
• Delete Account: Go to Settings → Danger Zone → Delete Account. This triggers a Supabase edge function that removes your data from all database tables.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Upon account deletion:

• Your user profile, outfits, and personalisation data are permanently deleted from Supabase.
• Your uploaded images are removed from Supabase Storage.
• Your email is added to a recently-deleted accounts table for 30 days to prevent immediate re-registration (a security measure).
• Aggregated, anonymised analytics data may be retained for reporting purposes.
• Crash reports retained by Firebase Crashlytics are governed by Firebase's retention policies.

Locally stored data on your device (Hive CE, SharedPreferences) is cleared when you sign out or delete the app, but we cannot guarantee its removal from device backups or system-level caches.

8. Children's Privacy

Our Platform does not have any age restriction and is accessible to users of all ages. If you are under the age of 13, we require that you obtain consent from a parent or legal guardian before using the Platform. We do not knowingly collect personal information from children under 13 without such consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that a child under 13 has provided us with personal information without parental consent, we will delete such information from our servers promptly.

9. Cookies & Tracking Technologies

Our website and app may use cookies and similar tracking technologies to enhance your experience. These include:

• Essential Cookies: Required for basic navigation and functionality.
• Analytics Cookies: Used by Firebase Analytics to understand how users interact with the Platform.

You can control cookie settings through your browser or device settings. Blocking certain cookies may affect the functionality of the Platform.

10. Third-Party Links & Services

The Platform may contain links to third-party websites or services, including payment processing (Razorpay), social login (Google), and content sharing platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your information.

11. On-Device Machine Learning

Cloth Savvy uses Google ML Kit for certain on-device machine learning features, including:

• Pose Detection: Used during profile photo capture to detect body alignment. All processing happens on your device — no images or pose data are sent to our servers.
• Image Labelling: Used to identify clothing types from uploaded photos. Processing happens on your device.
• Selfie Segmentation: Used for background removal in profile photos. Processing happens on your device.

These ML Kit checks happen entirely on your device during the photo capture process — the pose detection, image labelling, and background segmentation analysis never leave your phone. However, once you complete and confirm your profile photo, that photo IS uploaded to our servers and is used for virtual try-on generation as described in Sections 2 and 5 of this policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes by posting the updated policy on the Platform and updating the “Last updated” date at the top of this page. Your continued use of the Platform after such changes constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically for any updates.

13. Contact & Grievance Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, or if you wish to exercise any of your rights under Indian data protection law, you may contact us at:

In accordance with Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the above contact details serve as the contact point for any grievances or concerns regarding the Platform.