The short version
You upload a photo of yourself and a garment image; we send them to our AI servers (and AI sub-processors such as OpenAI) to generate your virtual try-on result.
We use Google Firebase for analytics, crash reporting, and push notifications, and Google AdMob (with mediation partners) to show ads.
On iOS we ask for App Tracking Transparency permission before using your advertising identifier for personalized ads. You can decline.
We do not require an account or password, and we do not sell your personal information for money.
Person detection runs on your device — that check does not send your photo anywhere.
You can request deletion of your uploaded images and results by emailing exostudio.feedback@gmail.com.
Contents
About this Policy
Information We Collect
How We Use Your Information
Third-Party Services
Advertising and Tracking
Data Sharing and Disclosure
Data Retention
Data Security
International Data Transfers
Your Privacy Rights
Children's Privacy
Data Deletion
Push Notifications
Local Storage
Changes to This Policy
Contact Us
This Privacy Policy explains how EXO Studio ("we", "us", "our") collects, uses, and shares information when you use the StyleSnap AI — Outfit Try On mobile application for iOS (the "App"). For the purposes of the EU/UK General Data Protection Regulation (GDPR), EXO Studio is the "data controller" of your personal data processed through the App. This Policy is incorporated by reference into our Terms of Service.
Photos and images. The core feature of the App is virtual try-on. When you upload a photo from your library or take one with the camera, and when you select a garment image, those images are processed to create your result. Your photo may contain your face and body. We use these images only to generate the requested result — we do not use them for facial recognition or to identify you.
Report & feedback content. If you use "Report image" or "Send feedback", we receive the message you write, and — for image reports — the generated image you choose to attach, along with basic context (app version, language, the selected outfit category).
Device & app information — device model, iOS version, language/region, app version, and a randomly generated app-instance identifier (via Firebase).
Usage & analytics events — screens viewed and actions taken in the App (via Firebase Analytics).
Crash & performance data — diagnostic information if the App crashes or runs slowly (via Firebase Crashlytics and Performance Monitoring).
Advertising identifier & ad data — your Identifier for Advertisers (IDFA), if you grant permission, plus ad interaction data (via AdMob and its mediation partners).
Approximate technical data — IP address (often truncated by our service providers) used for security, fraud prevention, and coarse location for ad/legal compliance.
We do not require you to create an account, and we do not collect your name, email address, contacts, or precise GPS location through the App (you only share your email if you voluntarily email us). The on-device "person check" uses Apple's Vision framework locally and does not transmit your photo.
Purpose
Data used
GDPR legal basis
Generate your virtual try-on result
Uploaded photo, garment image, options
Performance of a contract / your request
Provide and maintain core app functionality
Device & app info
Performance of a contract
Diagnose crashes and improve performance
Crash & performance data
Legitimate interests
Understand usage and improve the App
Analytics events, device info
Consent (EU) / Legitimate interests
Show ads (personalized only with your permission)
Advertising identifier, ad data
Consent
Send push notifications you opt into
Push token
Consent
Respond to reports and feedback
Your message, attached image
Legitimate interests
Comply with law and prevent abuse/fraud
Technical data
Legal obligation / Legitimate interests
To generate your result, your uploaded photo and garment image are transmitted to our processing backend, which is hosted on Modal Labs, Inc. (cloud infrastructure) and which uses third-party AI model providers — which may include OpenAI — to perform the image generation. These providers process your images on our behalf solely to return your result and do not use them to identify you. See Modal Privacy and OpenAI Privacy.
We use the following Firebase services. Learn more at Firebase Privacy.
Service
What it does
Firebase Analytics
Aggregated usage statistics and events
Firebase Crashlytics
Crash diagnostics (stack traces, device state)
Firebase Performance
App performance metrics
Firebase Remote Config
Server-controlled app configuration
Firebase Cloud Messaging
Delivery of push notifications
We display ads via Google AdMob (Google LLC). Ads may be sourced through mediation partners, which may include Meta Audience Network, AppLovin, Unity Ads, and ironSource. We may also use attribution/measurement SDKs (which may include Adjust, the Meta SDK, and the TikTok SDK) to understand how users discover the App. These partners may process your advertising identifier and ad-interaction data. Relevant policies: Google Ads, Meta, AppLovin, Unity, ironSource, Adjust.
The App is distributed via the Apple App Store. Apple may collect data per its own Privacy Policy. We do not receive payment card details.
If we use your IDFA for personalized advertising, iOS will show a system prompt asking whether you allow tracking. If you decline, you will still see ads, but they will not be personalized using your IDFA. You can change your choice anytime in Settings → Privacy & Security → Tracking.
Where required, we will ask for your consent (via a consent message) before using analytics or advertising that relies on your data, and you can withdraw consent at any time.
We do not sell your personal information for money. Certain ad-related data sharing may be considered "sharing" or a "sale" under California law; you can opt out as described in Section 10.
We share information only with: (a) the service providers listed above, acting on our behalf; (b) authorities or third parties where required by law, to enforce our Terms, or to protect rights and safety; and (c) a successor entity in connection with a merger, acquisition, or asset sale (subject to this Policy). We do not sell your personal information for money.
Uploaded photos and generated results are retained only as long as needed to deliver and operate the service, and are deleted thereafter on a rolling basis. Analytics and crash data are retained per the providers' defaults (Firebase Analytics up to 14 months; Crashlytics up to 90 days). Report/feedback emails are retained while we handle your request and for our records. You may request earlier deletion (Section 11).
We use industry-standard safeguards, including encryption in transit (HTTPS/TLS). No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
Our service providers may process data in the United States and other countries. Where applicable, transfers from the EEA/UK rely on appropriate safeguards such as the EU Standard Contractual Clauses.
You have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your local supervisory authority.
You have the right to know, delete, correct, opt out of "sale"/"sharing", limit use of sensitive personal information, and not be discriminated against for exercising these rights.
Residents of states such as Virginia, Colorado, Connecticut, and Utah have similar rights to access, delete, correct, and opt out of targeted advertising.
Email exostudio.feedback@gmail.com. We will respond within the timeframe required by applicable law (generally 30–45 days). Because we do not maintain accounts, please send your request from a consistent email and include enough detail to locate the relevant data.
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it within 30 days.
The App does not require an account. To request deletion of any images you uploaded or results generated for you, email exostudio.feedback@gmail.com from the relevant email address. You can also reset advertising/analytics by adjusting your device settings (Section 5).
If you allow notifications, we may send messages about your results and new features via Firebase Cloud Messaging / Apple Push Notification service. You can disable them anytime in Settings → Notifications → StyleSnap AI.
The App stores small preferences on your device (such as your chosen language and whether you completed onboarding). It does not use web cookies.
We may update this Policy from time to time. For material changes we will provide notice in the App and update the "Last updated" date. Continued use after the effective date constitutes acceptance.
EXO Studio (independent developer)
Privacy & data requests: exostudio.feedback@gmail.com