Privacy Policy
Last updated: October 14, 2026. How outfie handles selfies, try-on results, Google sign-in, and limited safety logs.
1. Who this covers
This policy explains how outfie (outfie.io) — a clean AI clothes changer / virtual try-on product — collects and uses information when you use the service. Questions: support@outfie.io.
2. What we collect
- Account basics. When you sign in with Google we receive your name, email address, and profile picture. We never see your Google password.
- Your uploads and results. Selfies or photos you submit for try-on, plus the Preview or HD images we generate, so we can render them and let you download them. Uploaded photos are deleted after 15 days; results are kept until you ask us to delete them (see section 6).
- Usage and abuse-prevention data. Task status, outfit chosen, quality (preview / HD), device and browser basics, IP address, request ids, quota counters (anonymous cookie and Google UID), and safety decision codes needed to run the service and stop abuse.
- Purchase records. When you buy an HD pack, Waffo Pancake (waffo.ai) (Merchant of Record) handles card details, payment routing, and tax invoices. We receive order/fulfillment metadata (pack, amount, status) to credit your HD balance — we never collect or store card numbers.
3. How we use it
We use this information to generate your try-on images, keep you signed in, enforce freemium quotas, prevent fraud and misuse, run automated safety screening, and meet legal obligations. Uploads and results are used to deliver your try-on — not to advertise you to anyone else.
We may keep anonymized technical metadata (render times, failure rates, reject reason codes) to keep the service reliable.
4. What we do not do
- We do not offer Face Swap, clothes remover, undress, or NSFW tools.
- We do not sell, rent, or trade your photos.
- We don't use your uploaded photos or generated results to train AI models or for public marketing. The AI providers that process them state in their published policies that they don't train on this data.
5. Security and sharing
Traffic is encrypted in transit (HTTPS/TLS). Access to production data is limited to running the product. We do not sell or share your photos or personal details with advertising companies.
We share data only with processors needed to operate outfie:
- Google — user sign-in and authentication (OAuth).
- Waffo Pancake — payment processing, invoices, sales tax, and fraud controls for optional HD pack purchases.
- OpenRouter and underlying image models (currently Black Forest Labs Flux.2 Pro for both Preview and HD) — your uploaded photo and outfit instructions, to generate the try-on. Photos are accessed via temporary URLs or short-lived payloads.
- Multi-modal safety processors (Alibaba Qwen3-VL models, reached only through OpenRouter and served by Alibaba Cloud or, for the backup model, Parasail) — your uploaded photo for automated adult-face eligibility, minor / NSFW / no-face screening before generation. We retain the moderation decision, check id, and a photo hash for auditability — never publishing your photo in logs.
- Cloudflare — hosting (Workers), private object storage (R2), database records (D1), KV, edge network protection, and transactional email when an HD pack purchase is credited.
- Product analytics (Google Analytics, Plausible) to monitor conversion and usability. No third-party ad-retargeting trackers in v1.
- Authorities, if strictly required by applicable law.
6. Retention
Uploaded photos. Uploaded photos are automatically deleted after 15 days.
Try-on results. Generated try-on images are stored privately and are not deleted automatically. Email support@outfie.io and we will delete them.
No AI training. We don't use your uploaded photos or generated results to train AI models, and the AI providers that process them state in their published policies that they don't train on this data.
Metadata logs. Quota counters, safety decision codes, request ids, and similar operational metadata may be kept longer to enforce daily limits, investigate abuse, and meet legal obligations.
After you request account deletion we remove or anonymize personal data from active systems within 30 days, except minimal security and compliance records we must keep.
7. Your rights
You can access or correct account details and ask us to delete your account data by emailing support@outfie.io. We respond within 30 days. Uploaded photos are already deleted automatically after 15 days; deletion requests cover try-on results, account, and metadata records.
8. Cookies and analytics
We use a session cookie to keep you signed in after Google OAuth, and an anonymous cookie to track the one freemium Preview. You can block cookies in your browser; sign-in and Preview quota will not work without the session / Preview cookies.
For visit statistics we use Google Analytics and Plausible, which are enabled when the page loads. We use them to improve the product and to measure traffic. You can refuse analytics through your browser settings or with the Google Analytics Opt-out Browser Add-on. Questions: support@outfie.io.
9. Children
outfie is not directed at children under 13, and the product is adult-only: uploads and generation subjects must depict consenting adults (18+). We do not knowingly collect personal information from anyone under 13. Photos of minors (or anyone who appears under 18) are hard-rejected and do not burn freemium quota. If we learn that personal data of a minor has been collected, we will delete it.
10. International transfers
Your data may be processed in countries other than your own. These are all the third parties that receive personal data from outfie:
- Cloudflare — hosting, storage, database, network, and transactional email.
- OpenRouter — routes our AI requests to the model providers below.
- Black Forest Labs — try-on image generation (via OpenRouter).
- Alibaba Cloud — photo safety screening (via OpenRouter).
- Parasail — backup photo safety-screening model (via OpenRouter).
- Google — sign-in, Google Analytics, and Google Fonts.
- Plausible — visit statistics.
- Waffo Pancake — payments for HD packs.
We use those processors to operate the service securely.
11. Changes
If this policy changes in a material way we will update the date above. Continued use after an update means you accept the revised policy.