Privacy Policy

Introduction

PullOff ("we," "our," or "us"), operated by Upmug, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application PullOff and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By downloading, installing, or using PullOff, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

Information We Collect

Personal Information

When you create an account, we collect the following information provided by your sign-in provider:

• Email address: Collected via Google Sign-In or Apple Sign-In for account identification and communication
• Display name: Your name as provided by your sign-in provider
• Profile photo: If provided by your sign-in provider (optional)

Photos and Images

To provide our AI-powered virtual try-on service, we collect and process:

• Body photos: Photos you upload to use as your try-on base image. These photos are stored securely in your private account.
• Outfit photos: Photos of clothing items you want to virtually try on
• Generated images: AI-generated try-on results created by combining your body photo with outfit images
• Face data (from body photos): If your body photos include your face, the image may be analyzed to align and generate realistic try-on results. We do not use face data for identification, authentication, or marketing, and we do not create facial recognition templates.

Camera Access: We request camera permission only when you choose to take a photo within the app. Camera access is entirely optional and can be denied without affecting other app functionality. You can also upload existing photos from your device's gallery.

Photo Library Access: We request access to your photo library only when you choose to upload or save images. This access is used solely for the purposes you initiate.

AI processing permission: Before the app sends your body photo and outfit photo to our third-party AI provider, the app shows an in-app consent prompt that explains what data is sent and who receives it. You can decline and continue using the app without starting AI generation.

Usage Information

We automatically collect certain information when you use our Service:

• Device information: Device type, operating system version, unique device identifiers
• App usage data: Features used, interactions, session duration, and app performance data
• Subscription and purchase history: Information about your subscription tier and in-app purchases
• Credit usage: Records of how you use your try-on credits

How We Use Your Information

We use the information we collect for the following purposes:

• Provide our Service: Process your photos through our AI image generation system to create virtual try-on results
• Account management: Create and manage your user account, authenticate your identity
• Subscription management: Process and manage your subscription, track credit usage
• Payment processing: Facilitate in-app purchases through Google Play or Apple App Store
• Service communications: Send important updates about your account, subscription, or the Service
• Customer support: Respond to your inquiries and resolve issues
• Service improvement: Analyze usage patterns to improve and optimize our Service
• Security: Detect, prevent, and address technical issues, fraud, or abuse

Data Sharing and Third-Party Services

We share your information with the following third-party service providers who help us operate our Service:

• Firebase (Google): We use Firebase for user authentication, database storage, and file storage. Your photos and account data are stored on Firebase servers.
  Privacy Policy: firebase.google.com/support/privacy
• FAL.ai: We use FAL.ai for AI image generation. Your body photos and outfit images are sent to FAL.ai servers for processing.
  Privacy Policy: fal.ai/privacy
• RevenueCat: We use RevenueCat for subscription and payment management. RevenueCat processes your subscription status and purchase history.
  Privacy Policy: revenuecat.com/privacy
• Google Play Store: If you purchase a subscription on Android, Google processes your payment information.
  Privacy Policy: policies.google.com/privacy
• Apple App Store: If you purchase a subscription on iOS, Apple processes your payment information.
  Privacy Policy: apple.com/legal/privacy

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Face data is processed only to generate your try-on images. It is stored with your photos in Firebase and is not shared with any third parties beyond the service providers listed above.

We require our third-party processors to use appropriate technical and organizational safeguards to protect personal data at a level consistent with this policy and applicable law.

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Secure infrastructure: We use Google Cloud Platform (via Firebase) which maintains SOC 2, ISO 27001, and other security certifications
• Access controls: Only authorized personnel have access to user data, and access is logged
• Private storage: Your photos and generated images are stored in your private account and are not accessible to other users

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Service. Specifically:

• Account data: Retained until you delete your account
• Photos and generated images: Retained until you delete them or delete your account
• Face data: Retained only as part of your uploaded photos and generated images, and deleted when those images are deleted or when you delete your account
• Transaction records: Retained for up to 7 years for legal and tax compliance
• Usage logs: Retained for up to 90 days for service improvement and troubleshooting

You can delete individual photos and generated images at any time within the app. When you delete your account in the app, your personal data and images are permanently removed, except where retention is required by law.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Data portability: Request an export of your data in a machine-readable format
• Withdraw consent: Withdraw your consent for data processing where consent is the legal basis
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at support@pulloff.ai. We will respond to your request within 30 days.

Account deletion: You can delete your account directly in the app under Settings > Delete Account. This permanently deletes your account and associated data, except where retention is required by law.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

Children's Privacy

PullOff is not intended for children under 13 years of age (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at support@pulloff.ai. If we discover that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell your personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@pulloff.ai.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on your consent (for photos and account creation) and contract performance (to provide the Service)
• Data protection authority: You have the right to lodge a complaint with your local data protection authority
• All rights listed above in the "Your Rights and Choices" section apply to you

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending you a notification through the app for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.