# Privacy Policy for Dorfy

**Effective Date:** January 28, 2025
**Last Updated:** November 4, 2025

## Introduction

Dorfy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered super app and related services (collectively, the "Service").

## Information We Collect

### Personal Information
- **Account Information:** Name, email address, encrypted password, age, gender
- **Profile Data:** Name, User Name, pet information
- **Health Data:** Height, weight, health goals, daily caloric intake targets
- **Authentication Data:** Google OAuth credentials when using Google Sign-In
- **Subscription Information:** Plan type (Free/Pro/Premium), billing cycle, payment information (processed by third-party payment processors)

### Usage Information
- **Chat Data:** Messages and conversations with our AI agent, selected AI models, conversation tones
- **Voice Data:** Audio recordings (processed via speech recognition APIs)
- **Image Data:** Photos uploaded for calorie scanning, barcode scanning, image generation requests & Items
- **Video Data:** Video URLs shared for analysis, video content temporarily downloaded and processed, video metadata (title, duration, platform)
- **Video Analysis Results:** AI-generated summaries, extracted instructions, categorization data, cooking/exercise analysis

### Virtual Closet & Fashion Data
- **Clothing Items:** Uploaded images of clothing, accessories, footwear, bags, perfumes, and other fashion items
- **Item Details:** Brand names, sizes, styles, materials, colors, conditions, categories, and layer types
- **Pricing Information:** Dorfy AI-estimated market values and original purchase prices for closet items
- **Outfit Combinations (Fits):** User-created outfit combinations with multiple clothing pieces
- **Collections:** Organized groupings of outfit combinations
- **Try-On Photos:** Personal photos (you/models) uploaded for virtual try-on purposes
- **AI Try-On Results:** AI-generated images showing virtual outfit try-ons with selected clothing pieces
- **Fashion Preferences:** Style choices, clothing categories, and outfit creation patterns

### Shopping & Product Discovery Data
- **Product Searches:** Search queries for products, text and image-based searches
- **Uploaded Product Images:** Photos uploaded for finding similar products or shopping recommendations
- **Search History:** Product search queries and browsing patterns
- **AI Research Requests:** Products selected for detailed AI analysis and research
- **Product Interactions:** Products viewed, clicked, or researched through the app
- **Shopping Preferences:** Product categories, price ranges, and style preferences
- **Affiliate Clicks:** Records of product links clicked (for commission tracking and analytics)
- **Country/Region Data:** Location information for localized product availability and pricing

### Multi-Language Preferences
- **Language Settings:** Selected app language and interface preferences
- **Localization Data:** Regional content preferences and localized feature usage

### Device Information
- **Device Details:** Device type, operating system, app version, unique device identifiers
- **Technical Data:** IP address, crash logs, performance metrics, API response times
- **Permissions:** Camera, microphone, notification, and calendar permissions as granted
- **Location:** General location data for localized content (not precise location tracking)

### Automatically Collected Data
- **Usage Analytics:** Session duration, feature interaction frequency, error rates
- **Performance Data:** App loading times, API latency metrics, crash reports
- **Notification Data:** Quote delivery times, notification preferences, interaction rates

## How We Use Your Information

We use your information to:

### Core Functionality
- Provide AI-powered chat, search capabilities
- Analyze food images for nutritional information and calorie tracking
- **Process and analyze video content from social media platforms for cooking, DIY, exercise, and general summaries**
- **Temporarily download and convert video content for AI analysis purposes**
- **Extract actionable insights from video content (recipes, instructions, workout routines)**
- Create AI-generated images based on your requests
- **Analyze uploaded clothing and fashion items using AI to estimate market values and identify details**
- **Generate virtual try-on images showing how clothing items would look on uploaded photos**
- **Create and manage digital wardrobe with outfit combinations and collections**
- **Search for similar products across multiple e-commerce platforms based on text descriptions or uploaded images**
- **Generate AI-optimized product search keywords for better shopping results**
- **Provide detailed AI-powered product research including specifications, reviews, pricing analysis, and sentiment scores**
- **Display product listings from third-party e-commerce platforms with affiliate links**

### Personalization
- Provide culturally appropriate translations and content for your selected language

### Account Management
- Manage user authentication and account security
- Process subscription payments and manage plan features
- Track usage limits and billing cycles
- Maintain conversation history and user preferences

### Service Improvement
- Analyze usage patterns to improve AI model selection and response quality
- Monitor API performance and implement failover systems
- Identify and fix bugs, crashes, and performance issues
- Develop new features based on user behavior insights

## Third-Party Services and APIs

We integrate with the following third-party services:

### AI Services
- **Google Gemini API:** Chat responses, image analysis, content generation, **video content analysis**, **clothing/fashion item analysis**, **virtual try-on processing**, **Web search**
- **Pollinations gemini-fast API:** Alternative AI responses and creative content, **Vision Mode and Text-to-text**
- **Llama Sonar API:** Web search and fact-checking capabilities
- **Speech Recognition APIs:** Voice-to-text conversion

### Video Processing Services
- **Rapid API Service:** Video extraction from Instagram, TikTok, YouTube, and other platforms
- **Base64 Conversion Services:** Video encoding for AI processing

### Backend Infrastructure
- **Appwrite Cloud:** Database storage, user authentication, file storage, real-time updates
- **Expo Services:** App distribution, over-the-air updates, push notifications
- **AsyncStorage:** Local device storage for preferences and cache

### Image & Video Hosting Services
- **Appwrite Storage:** Permanent storage of AI-generated try-on results and user-uploaded fashion images
- **tmpfiles.org:** Temporary file hosting for AI processing including video scanner analysis and virtual try-on (automatically deleted within 24 hours - NOT permanent storage)

### External Content
- **Web Search APIs:** Real-time information retrieval and fact verification
- **Image Search APIs:** Relevant image discovery for chat responses

### E-Commerce & Shopping Services
- **Third-Party E-Commerce Platforms:** Product data, pricing, images, and availability from multiple online marketplaces
- **Affiliate Networks:** Tracking and commission processing for product referrals
- **Product APIs:** Real-time product search, image search, and data retrieval from e-commerce providers
- **Geolocation Services:** Country detection for localized product availability and pricing

### Payment Processing
- Third-party payment processors for subscription management (we do not store payment card information)

## Data Storage and Security

### Storage Locations
- **Appwrite Cloud:** Secure cloud storage for user profiles, chat history, usage data, **video analysis results**, **virtual closet items, outfit combinations, collections, and try-on results**
- **Local Device Storage:** User preferences, language settings, diamonds, offline data, **video analysis consent settings**
- **Temporary Processing:** Voice data, images, and **videos processed temporarily for AI analysis and automatically deleted**
- **Third-Party APIs:** Video content temporarily transmitted to AI services (Google Gemini) for analysis
- **Temporary File Hosting:** Videos and images temporarily uploaded to tmpfiles.org for AI scanner processing (auto-deleted within 24 hours - NOT permanent storage)

### Security Measures
- **Encryption:** All data transmission encrypted using industry-standard TLS protocols
- **Authentication:** Secure user authentication with encrypted password storage
- **API Security:** Multiple API keys with rotation and rate limiting for redundancy
- **Access Controls:** Role-based access to user data with strict permission controls
- **Data Validation:** Input sanitization and validation to prevent malicious data injection

### Health Information Disclaimer

**Important Health Reminder:** Our food scanning and nutrition tracking features are designed to provide general information only. We strongly recommend that users consult a healthcare professional for medical advice, diagnosis, or treatment. Do not rely solely on the app's analysis for health decisions.

- Health and nutrition information is for general guidance only and not medical advice
- Consult healthcare professionals for medical decisions and dietary recommendations

### Data Retention
- **Active Account Data:** Retained while your account is active
- **Chat History:** Stored according to your settings, with automatic cleanup options
- **Voice Data:** Processed immediately and not permanently stored
- **Video Content:** Downloaded videos are processed immediately and deleted within 24 hours
- **Video Analysis Results:** Processed immediately and not permanently stored
- **Video URLs:** Processed URLs are not permanently stored beyond analysis session
- **Workout Data:** Stored with your account for progress tracking and can be deleted upon request
- **Gym Statistics:** Historical fitness data retained for analytics and progress visualization
- **Exercise Records:** Personal bests and workout history maintained for performance tracking
- **Virtual Closet Items:** Clothing images and details stored with your account until manually deleted
- **Try-On Photos:** Personal photos for virtual try-on retained until manually deleted
- **AI Try-On Results:** Generated try-on images stored permanently until user deletion
- **Outfit Combinations & Collections:** Saved fits and collections retained with your account
- **Cached Data:** Automatically expires and refreshes based on usage patterns
- **Usage Analytics:** Aggregated and anonymized data retained for service improvement

## Your Privacy Rights

Depending on your location, you may have the following rights:

### Access and Control
- **Data Access:** Request a copy of all personal data we have about you
- **Data Correction:** Update or correct inaccurate personal information
- **Data Deletion:** Request deletion of your account and associated data
- **Data Portability:** Export your data in a machine-readable format

### Communication Preferences
- **Notification Control:** Customize or disable daily quote notifications
- **Marketing Opt-out:** Unsubscribe from promotional communications
- **Language Preferences:** Change app language and content localization

### Usage Controls
- **Chat History:** Delete individual conversations or entire chat history
- **Search History:** Clear entertainment and user search queries across all features
- **Language Preferences:** Reset localization settings and regional content preferences
- **Virtual Closet:** Delete individual clothing items, entire closet, outfit combinations, and collections
- **Try-On Photos:** Remove personal photos uploaded for virtual try-on purposes
- **AI Try-On Results:** Delete all AI-generated try-on images and results
- **Fashion Data:** Clear all clothing analysis data, market values, and item details
- **Shopping Data:** Delete product search history, uploaded shopping images, and AI research results
- **Product Interactions:** Clear history of viewed products, clicked affiliate links, and shopping preferences

To exercise these rights, contact us using the information provided below.

## Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take immediate steps to delete such information.

## International Data Transfers

Your information may be transferred to and processed in countries other than your own, including but not limited to:
- United States (Appwrite Cloud, Google Services, gemini-fast Services)
- European Union (GDPR-compliant data centers)

We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

## Data Breach Notification

In the event of a data breach that may affect your personal information, we will:
- Notify affected users within 72 hours of discovery
- Provide details about the nature and scope of the breach
- Explain steps we're taking to address the breach
- Offer guidance on how you can protect yourself

## Cookies and Tracking Technologies

While our mobile app does not use traditional web cookies, we use similar technologies:
- **Local Storage:** For user preferences and app settings
- **Session Tokens:** For maintaining authenticated sessions
- **Analytics Identifiers:** For usage analytics and crash reporting
- **Notification Tokens:** For delivering push notifications

## Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:
- Displaying a prominent notice within the app
- Sending push notifications or email notifications
- Updating the "Last Updated" date at the top of this policy
- Requiring acceptance of updated terms for continued service use

## Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

**Developer:** Sharif Zafar  
**App:** Dorfy 
**Bundle ID:** com.sharifzafar.dorfy  
**Support:** [Insert Contact Email]  
**Business Address:** [Insert Business Address]

## Legal Compliance

This Privacy Policy is designed to comply with:
- **GDPR (General Data Protection Regulation)** - European Union
- **CCPA (California Consumer Privacy Act)** - California, USA
- **PIPEDA (Personal Information Protection and Electronic Documents Act)** - Canada
- **APP (Australian Privacy Principles)** - Australia
- Other applicable privacy laws and regulations

## Data Processing Legal Basis

Under GDPR, our legal basis for processing your data includes:
- **Consent:** When you explicitly agree to data processing
- **Contract Performance:** To provide services you've requested
- **Legitimate Interest:** To improve our services and prevent fraud
- **Legal Obligation:** To comply with applicable laws and regulations

---

*This Privacy Policy was last updated on November 4, 2025. Please review it periodically for any changes. By continuing to use Dorfy, you acknowledge that you have read and understood this Privacy Policy.*