Privacy Policy
How TryItOn collects, uses, and protects your data — and the choices you have. Manage your data anytime from your account.
1. Overview
This Privacy Notice explains how TryItOn (“we”, “us”, “our”) accesses, collects, stores, uses, and shares (“processes”) your personal information when you visit our website, use our mobile applications or browser extension, register an account, or use our virtual try-on services (the “Services”).
By using the Services, you accept the practices described below. If you don’t agree, please don’t use the Services. If you have questions or concerns, contact us at [email protected].
Summary of key points
- What we collect. Information you give us (name, email, password, photos and garments you upload) plus information collected automatically (IP address, device, browser, usage logs).
- Sensitive data. We do not process special categories such as health data, race, sexual orientation, or religious beliefs.
- Why we process it. To deliver the Services, communicate with you, prevent abuse, and comply with the law.
- Sharing. Only with vendors who help us run the Services, under contract. We do not sell your personal information.
- Your rights. Depending on where you live, you can access, correct, delete, restrict, port, or object to processing of your data. The easiest way is from your account or by emailing us.
2. Information We Collect
Information you provide
We collect personal information you voluntarily provide when you register, contact us, or use the Services. This may include:
- name;
- email address;
- password;
- photos and garment images you upload to try on.
Sensitive information. We do not process sensitive categories of personal information.
Payment data. If you make a purchase on our website, our payment processor Stripe collects and stores card and billing details. We don’t see or store full card numbers. If you make a purchase or subscribe inside our mobile apps, the transaction is processed by the Apple App Store or Google Play (using payment methods such as Apple Pay or Google Pay) and managed for us by RevenueCat. We receive confirmation of your purchase and subscription status, but not your full payment-card details.
Social-media login data. If you choose to register using a social account (e.g. Google or Apple), we receive certain profile information from that provider — see Social Logins below.
Information collected automatically
When you visit or use the Services, we automatically collect technical information that doesn’t identify you directly but helps us operate, secure, and improve the product:
- Log and usage data — IP address, device and browser type, operating system, language, referring URLs, pages viewed, features used, search queries, error reports.
- Device data — hardware model, application identifiers, ISP/carrier, system configuration, and, on our mobile apps, a push-notification token if you enable notifications.
- Location data — approximate location (city level) derived from your IP address. If you use the weather forecast in the outfit planner and grant location permission, we also collect your device’s precise location once, at the moment you tap to use it, and store the resulting coordinates and place name on your account so we can forecast the right place. You can withdraw that permission in your device settings at any time, and you can remove the saved location from within the planner — we then fall back to approximate location from your IP address. We never collect location in the background.
We collect some of this information through cookies and similar tracking technologies — see Cookies and Tracking.
Google API data
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Information from other sources
To enhance our Services and marketing, we may also receive information from public databases, marketing partners, affiliate programs, social media platforms, and other third parties. This may include mailing addresses, email addresses, IP addresses, and social profile data.
3. How We Use Your Information
We process your information to:
- Run your account. Create, authenticate, and maintain your account.
- Deliver the Services. Generate virtual try-on results and provide other features you request.
- Show local weather. Forecast the weather for the days you are planning outfits for, using your approximate location or, with your permission, the location you choose. We do not use this information for advertising or profiling.
- Provide support. Respond to inquiries and troubleshoot issues.
- Send administrative messages. Service updates, policy changes, and important notices.
- Protect the Services. Monitor and prevent fraud, abuse, and security incidents.
- Improve the product. Analyze usage patterns to make features better.
- Protect vital interests. Act when necessary to protect someone’s life or safety.
We process information only when we have a valid legal reason to do so — see Legal Bases for Processing.
4. Legal Bases for Processing
We only process your personal information when we believe we have a valid legal reason under applicable law.
If you are in the EU or UK
The General Data Protection Regulation (GDPR) and UK GDPR require us to identify a lawful basis. We rely on one of the following:
- Consent — for things like marketing emails. You can withdraw consent at any time.
- Performance of a contract — to deliver the Services you signed up for.
- Legitimate interests — to improve the product, diagnose problems, prevent fraud, and engage and retain users, where these interests don’t override your rights.
- Legal obligations — to comply with the law, cooperate with regulators or law enforcement, and exercise or defend legal rights.
- Vital interests — in rare cases, to protect the life or physical safety of any person.
If you are in Canada
We may process your information based on your express consent or on implied consent where appropriate. You can withdraw consent at any time. In limited cases permitted by law, we may process information without consent — for example, for fraud detection, investigations, in clear personal interest where consent can’t be obtained in time, in business transactions, or where required by court order or law.
7. AI-Powered Features
Our Services include features powered by artificial intelligence and machine learning (the “AI Products”), used for image generation, video generation, and size and fit recommendations.
We deliver the AI Products through third-party AI service providers, including Black Forest Labs (BFL GmbH), Google, Replicate, and OpenAI. Your inputs (the photos and garments you upload), the outputs generated, and related personal information are shared with and processed by these providers solely to deliver the features. You must not use the AI Products in a way that violates these providers’ terms or applicable law.
All personal information processed through the AI Products is handled in line with this Notice and our agreements with these third parties.
9. International Transfers
Our servers are located in the United States and Germany. If you access the Services from elsewhere, your information may be transferred to and processed in those countries and in any country where our service providers operate.
If you live in the European Economic Area, the United Kingdom, or Switzerland, those countries may not have data-protection laws as comprehensive as your own. We use the European Commission’s Standard Contractual Clauses (SCCs) for transfers between our group companies and our processors, requiring recipients to protect EEA/UK-origin data in accordance with European law. A copy of the SCCs is available on request.
10. Data Retention
We keep your personal information only as long as necessary for the purposes set out in this Notice, unless a longer period is required or permitted by law (for example, tax or accounting). No purpose in this Notice requires us to keep your information longer than 14 days past the termination of your account.
Some information has a shorter, specific lifetime. To avoid repeating the same lookups, we cache the approximate location derived from your IP address for 24 hours, and weather forecasts for one hour. A location you save in the outfit planner is kept on your account until you change or remove it, or your account is deleted.
When we no longer have a legitimate business need to process your personal information, we will delete or anonymize it. If that’s not possible (for example, because it’s in backup archives), we will securely store it and isolate it from further processing until deletion is possible.
11. Security
We use technical and organizational measures designed to protect your personal information — including encryption in transit, access controls, and ongoing security review. However, no method of transmission over the Internet or electronic storage is 100% secure. We can’t guarantee absolute security, and transmission of personal information to and from the Services is at your own risk. You should only access the Services in a secure environment.
12. Children’s Privacy
TryItOn is not intended for users under 18, and we do not knowingly collect data from children under 18. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn we have collected information from a user under 18, we will deactivate the account and delete the data. If you believe a child has given us personal information, contact us at [email protected].
13. Your Privacy Rights
Depending on where you live (for example, the EEA, UK, Switzerland, or Canada), you may have rights including:
- access and obtain a copy of your personal information;
- request correction of inaccurate information or deletion;
- restrict our processing of your personal information;
- data portability, where applicable;
- object to certain processing;
- not be subject to automated decision-making;
- withdraw consent at any time where we rely on consent to process your information.
To exercise any of these rights, contact us at [email protected] or through your account. We will consider and act on your request in accordance with applicable law.
EEA, UK, and Switzerland
If you believe we are unlawfully processing your personal information, you have the right to complain to your EU member-state data-protection authority, the UK Information Commissioner’s Office, or the Swiss Federal Data Protection and Information Commissioner.
Account information
You can review or update your account information at any time. To terminate your account, sign in and delete it from settings, or contact us. After termination, we deactivate or delete your account and active data; we may retain limited information to prevent fraud, troubleshoot problems, assist with investigations, or comply with legal requirements.
14. Do-Not-Track Signals
Most browsers and some mobile systems include a “Do-Not-Track” (DNT) feature you can activate to signal a preference not to be tracked. There is currently no uniform technology standard for recognizing DNT signals, so we don’t respond to them. If a standard is adopted that we’re required to follow, we’ll update this Notice.
California law also requires us to disclose how we respond to DNT signals. Because there’s no industry or legal standard yet, we do not respond to them at this time.
15. US State Privacy Rights
If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have additional rights regarding your personal information.
Categories of personal information we collect
In the past 12 months, we have collected the following:
- A. Identifiers — name, contact details, account name, IP address, online identifier. (Yes)
- B. Customer Records (California) — name, contact, financial information. (Yes)
- C. Protected classifications — gender, age, race, demographic data. (No)
- D. Commercial information — purchase history, transaction records. (No)
- E. Biometric information. (No)
- F. Internet/network activity — browsing, search history, interactions with our Services. (Yes)
- G. Geolocation data — precise device location, collected only with your permission and only when you ask the outfit planner to use your current location. (Yes)
- H. Audio/video/sensory data. (No)
- I. Professional or employment information. (No)
- J. Education information. (No)
- K. Inferences drawn from other personal information. (No)
- L. Sensitive personal information. (No)
We retain Category A and B information while you have an account, and delete it within 14 days after termination. Category F (internet activity) is retained for up to 24 months.
Sharing and selling
We have not sold or shared personal information for a business or commercial purpose in the preceding 12 months. We may use your personal information for our own internal research and product development — this isn’t considered “selling.” The categories of third parties we disclose data to are listed in When We Share Your Information.
Your rights
Subject to applicable law, you may have the right to:
- Know whether we are processing your personal data;
- Access your personal data and obtain a copy;
- Correct inaccuracies in your personal data;
- Delete your personal data;
- Non-discrimination for exercising your rights;
- Opt out of targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.
Some states (including California, Delaware, Minnesota, and Oregon) give additional rights, such as the right to obtain a list of the categories or specific third parties we disclosed data to, the right to limit use of sensitive personal data, and the right to question how data has been profiled.
How to exercise your rights
Email [email protected] or use the contact details at the end of this Notice. Under certain state laws you may designate an authorized agent to make a request on your behalf; we may require proof of valid authorization.
Verification. We will need to verify your identity before responding. We’ll only use the information you provide for verification, security, or fraud prevention. If we can’t verify you from existing records, we may ask for additional information.
Appeals. If we decline a request, you may appeal by emailing [email protected]. We’ll respond in writing with the action taken or not taken and our reasons. If your appeal is denied, you may complain to your state attorney general.
California “Shine The Light”
California Civil Code Section 1798.83 lets California residents request, once a year and free of charge, the categories of personal information (if any) we disclosed to third parties for direct marketing in the previous calendar year, and the names and addresses of those third parties. Email us to make such a request.
16. Privacy Rights in Other Regions
Australia and New Zealand
We process your personal information in line with Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020. You have the right to request access to or correction of your personal information — contact us using the details below.
If you believe we are unlawfully processing your information, you can complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.
Republic of South Africa
You have the right to request access to or correction of your personal information. If you’re unsatisfied with how we handle a complaint, contact The Information Regulator (South Africa) at [email protected] or, for POPIA/PAIA complaints, [email protected].
17. Storefront Try-On and Merchant Integrations
We make the virtual try-on available to businesses (“Merchants”) who add it to their own online stores, including through the Shopify App Store. This section explains how we handle personal information when you use the try-on on a Merchant’s store, rather than through our own website or apps.
Our role
When you use the try-on on a Merchant’s store, that Merchant chooses to offer the feature and decides the purposes of the processing. The Merchant is the controller of the personal information you provide there; TryItOn acts as a service provider/processor on the Merchant’s behalf, processing it under our agreement with the Merchant and this Notice. The Merchant’s own privacy policy also applies to your use of their store — we encourage you to review it.
What we process on the storefront
- The photo you upload and the product image — used only to generate your try-on result. As with our other AI features (see AI-Powered Features), the image is processed by our AI providers solely to produce the result. We use your photo only to create your try-on; we do not use it to identify you, and we do not create facial-recognition templates or other biometric identifiers from it. Your uploaded photo is deleted automatically after the try-on is produced.
- A store-assigned visitor identifier — a value from the store’s cookie, used to operate the feature (for example, to apply any try-on limits the Merchant sets) and to give the Merchant aggregate analytics about how the try-on is used on their store.
- Newsletter sign-up (optional) — if the Merchant turns on a newsletter prompt and you choose to subscribe, we collect the email address and consent you provide and pass them to the email provider the Merchant has connected (Shopify, Mailchimp, or Klaviyo) so you can be added to the Merchant’s list. We do not keep your email after forwarding it; from that point the Merchant is responsible for it under the Merchant’s own privacy policy. You can unsubscribe at any time using the link in the Merchant’s emails.
Consent and notices
Before you upload a photo, the try-on asks you to accept its use. The Merchant is responsible for obtaining any additional consent and providing any additional notices required where you live — including for image uploads and for email-marketing consent.
Your choices and rights
Because storefront try-on doesn’t require a TryItOn account, you exercise your privacy rights primarily through the Merchant, who controls the data. You can also contact us at [email protected] and we will help the Merchant respond to your request. The try-on is intended for shoppers who are at least 18 (see Children’s Privacy).
18. Updates to This Notice
We may update this Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by a new “Last Updated” date at the top. For material changes, we will post a prominent notice or email you. Please review this Notice periodically.
19. Contact Us
If you have questions or comments about this Privacy Notice, email us at [email protected].
To request access to, correction of, or deletion of your personal information, please email [email protected] or visit your account. These rights may be limited in some circumstances by applicable law.
Start trying on
A photoreal fitting room in every shop you visit. Free to start — no credit card, no returns.
Available on Chrome, Edge, Windows, iPhone, and Android.
Try it for free. No card required.