1. Introduction

FiFi AI LLC ("FiFi", "we", "us" or "our") is a Delaware limited liability company with operations in the United States and the European Economic Area. This Privacy Policy sets out how we collect, process, store and disclose personal information when you use our mobile application and related services (collectively, the "Services"). Please read this policy carefully – by creating an account or otherwise accessing the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

We comply with applicable privacy laws, including the European Union's General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA"), the Children's Online Privacy Protection Act ("COPPA") and other relevant United States and international laws. Apple requires every iOS application to publish a Privacy Policy that discloses what data is collected, how it is collected, used, shared, stored and the mechanisms available for users to exercise their rights. This policy is designed to meet those requirements.

2. Definitions

Personal Data means any information relating to an identified or identifiable natural person, such as names, email addresses, unique device identifiers and payment identifiers.

Usage Data means data collected automatically through the Service, such as session durations, device information, crash logs and analytics data.

Processing means any operation performed on Personal Data, such as collection, recording, organisation, storage, alteration, retrieval, consultation, use, disclosure, dissemination or erasure.

Controller means the natural or legal person who determines the purposes and means of Processing Personal Data. For the purposes of this policy, FiFi acts as the Controller.

3. Scope

This policy applies to Personal Data we collect from users of our Services. It does not apply to third‑party websites or services that may be accessed through our application. We encourage you to review the privacy policies of those third parties before providing any information to them.

FiFi is rated 9+ on the Apple App Store. The Services are intended for individuals who are nine (9) years of age and older; however, we do not knowingly collect personal information from children under thirteen (13) years of age and will take steps to delete such information if it is discovered.

4. Information We Collect

We collect only the data necessary to provide our Services and as disclosed in this policy. The categories of data we collect include:

4.1 User Content

• Wardrobe images and descriptions: When you upload photos of clothing items, outfits or other content, we collect and store those images and accompanying descriptions.

• Styling preferences: Information you provide about your style, favourite colours, Pinterest boards or other preferences.

• Communications: Content of messages you send within the app, such as feedback or customer support requests.

4.2 Contact Information

• Account details: Your name, username, email address and password (stored in hashed form) used to register, log in and manage your account.

• Communications metadata: We may keep a record of communications you send to us via email or in‑app messaging to respond to your queries.

4.3 Identifiers

• Device identifiers: Unique device identifiers, advertising identifiers, IP addresses, operating system version, app version, language and region settings, as well as user IDs we assign to you.

• Analytics identifiers: Anonymous identifiers assigned by our analytics tools to understand how users interact with the app.

4.4 Purchases and Subscription Data

• Transaction identifiers: Details of in‑app purchases, such as subscription plan, purchase date, renewal date, transaction ID and price paid.

• Billing information: We do not collect or store full payment card numbers. Purchases are processed through the Apple App Store or Google Play, which provide us with confirmation that payment has occurred.

4.5 Usage Data

We may automatically collect certain information when you use the Services, including:

• Log and usage information: Date and time of access, features used, pages viewed, and diagnostic information such as crash logs.

• Aggregated data: Aggregated and anonymised information about clothing categories, style choices and usage patterns for statistical analysis and service improvement.

5. How We Collect Information

We collect information in the following ways:

• Directly from you: When you register an account, upload content, make purchases, communicate with us, or otherwise interact with the Services.

• Automatically: Through your use of the app, using cookies, analytics SDKs and similar technologies to collect Usage Data and device information. We use this data strictly for improving the Services and identifying technical issues.

• Through third‑party providers: When you purchase a subscription, the App Store or Play Store sends us transaction details. We also receive analytics reports from service providers.

6. How We Use Personal Data

We use your Personal Data solely for legitimate business purposes, including:

• Provide and operate the Services: To create and maintain your account, organise your wardrobe, generate outfit suggestions and deliver customer support.

• Personalisation: To tailor recommendations, content and features to your tastes and usage patterns.

• Communications: To send account notices, security alerts, subscription reminders and respond to your enquiries. We may also send you non‑marketing communications about changes to our terms or privacy practices.

• Transaction processing: To enable you to purchase and manage subscriptions through the App Store or Play Store, and to keep records for accounting and tax purposes.

• Analytics and product improvement: To analyse usage patterns, fix bugs, develop new features and improve the overall user experience. We use aggregated and anonymised data wherever possible.

• Legal compliance and protection: To enforce our Terms of Service, protect our rights, comply with legal obligations and respond to lawful requests from public authorities.

If you are located in the European Economic Area, we process Personal Data on the following legal bases: performance of a contract (providing the Services), consent (where we rely on your consent, such as for optional marketing), compliance with legal obligations, and our legitimate interests (for example, enhancing and securing our Services).

7. Sharing Your Information

We do not sell or rent your Personal Data. We share your information only as follows and when permitted by law and in accordance with Apple's guidelines:

• Service Providers: We engage trusted third‑party companies and individuals to perform services on our behalf (e.g., cloud hosting, analytics, customer support). These providers process Personal Data only for the purposes specified and are subject to confidentiality obligations.

• Payment Platforms: When you subscribe, your payment information is processed by Apple or Google. We receive confirmation of payment and subscription status but not your full payment details.

• Business Transfers: In connection with a merger, acquisition or asset sale, Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different policy.

• Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., courts or government agencies).

We ensure that any third parties we work with adhere to robust privacy standards and only use your data for the purposes specified.

8. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with our legal obligations, resolve disputes and enforce our agreements. For example:

• Account data: Retained while your account is active. If you delete your account, we will delete or anonymise your Personal Data within a reasonable time, unless retention is required for legal reasons.

• Purchase records: Retained for seven (7) years to satisfy tax and accounting obligations.

• Usage data: Retained for a shorter period, usually six (6) months, unless needed for security or product improvement.

Aggregated or anonymised information may be retained indefinitely as it no longer identifies any individual.

9. Data Security

We take appropriate technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration or destruction. Measures include encryption in transit, secure server infrastructure, access controls and regular security audits. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. We urge you to use strong passwords and protect your login credentials.

10. International Transfers

We may transfer and store Personal Data on servers located outside of your jurisdiction, including in countries that may not have data protection laws equivalent to those in your jurisdiction. When we transfer Personal Data internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses) to ensure adequate protection.

11. Children's Privacy

FiFi is rated 9+ and is not intended for children under nine (9) years of age. We do not knowingly collect or solicit Personal Data from anyone under thirteen (13) years old. If we learn that we have collected Personal Data from a child under 13 without parental consent, we will delete that information. If you believe we have collected such data, please contact us using the details below.

12. Your Rights

Depending on your location, you may have certain rights regarding your Personal Data, including:

• Access: Request confirmation of whether we process your Personal Data and obtain a copy of that data.

• Rectification: Request that we correct inaccurate or incomplete data about you.

• Deletion: Request that we delete your Personal Data, subject to legal or contractual obligations.

• Restriction: Request that we restrict the processing of your Personal Data under certain circumstances.

• Portability: Request a copy of the data you provided to us in a structured, machine‑readable format.

• Objection: Object to our processing of your Personal Data where we rely on our legitimate interests or for direct marketing.

• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.

To exercise these rights, please contact us at the address below. We may ask for proof of your identity before responding to your request. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the relevant data protection authority.

13. Exercising Your Rights

You may exercise your rights by:

• Account Settings: Many account details can be updated or deleted directly within the app.

• Contacting Us: For access, deletion or other requests, email us at privacy@fifiapp.com. We aim to respond to all requests within one month.

Please note that deleting your Personal Data may affect your ability to use the Services and may not result in complete or immediate removal due to backup or archiving systems.

14. Changes to This Policy

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. We will notify you by posting the updated policy on this page and updating the "Last Updated" date. If the changes are material, we may provide additional notice (e.g., via email or in‑app notification). Your continued use of the Services after any changes indicates your acceptance of the revised policy.

15. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy, please contact:

FiFi AI LLC

Email: support@usefifi.com

Address: 1111B S Governors Ave STE 40351

Dover, DE 19904

We will endeavour to resolve any privacy concerns and fully comply with our obligations under applicable privacy laws.