Privacy Policy

Vestia (Chinese name: 享搭衣橱; this "App") is an AI wardrobe management and shopping decision assistant, developed and operated by Qionghai Xiangshi Technology Studio (Sole Proprietorship) ("we", "us"). This Privacy Policy explains how we collect, use, store, share and protect your personal information, and the rights you have. By using the App, you confirm that you have read and understood this Policy. If you do not agree with it, please stop using the App.

2.1 Information you provide

The App currently supports registration by mobile phone number only. SMS codes verify possession of the number, which is linked to a unique account identifier for registration, sign-in management and account security; this is not government-ID verification. You may set a nickname and avatar and provide profile details for your own or a family member’s wardrobe, such as name, gender, date of birth, height, body type and style preferences, only with the appropriate authorization. Passwords are stored only as salted hashes. For feedback or support, we process the descriptions, attachments and contact details you choose to provide.

After sign-in, the server checks credentials and access permissions and isolates outfit photos, garment images, private wardrobes, outfits, wear logs and shopping suggestions by account to prevent unauthorized access, changes or exports. Necessary registration, sign-in and security-management information is retained, with administrative access, changes and exports restricted to authorized personnel.

2.2 Content you upload

To build your private wardrobe, you may upload outfit photos, garment photos and product screenshots, add descriptions such as name, category, color, size and purchase price, and save outfits, shopping decisions, wear logs and preference notes. This content is linked to your account to sync your wardrobe, recognize and split garments, and generate personalized outfit and shopping suggestions.

The App does not provide forums, community, public message boards, public posting, comments, reposting, communication groups, messaging between users or social mobilisation features. Your uploaded outfit photos, garment images, private wardrobe data, outfit plans and wear logs are personal business data and are not displayed to other ordinary users.

2.3 Information we collect automatically

To operate the service, protect accounts and trace incidents, our cloud servers, Web services and business APIs record necessary network-operation and security logs. Depending on actual business needs and technical conditions, these include account or session identifiers, device name, platform and app version, access time, operation type, endpoint, request result, source IP address and system errors. Necessary destination-address and port information is recorded through server or cloud-platform logs; client hardware characteristics are processed only where necessary and permitted by this Policy. When “Help improve Vestia” is enabled, the client also reports launches, page views, taps and purchase-flow outcomes. Events can be linked through account, device and session identifiers; event properties do not include photos, garment descriptions, phone numbers or email addresses.

2.4 App permissions

The App requests only the permissions required for its core features. You can enable or disable each of them in your system settings at any time:

• Camera: to take outfit and garment photos for your wardrobe;
• Photo library: to pick photos from your library for upload;
• Storage: to read photos you explicitly select and to save exported data files;
• Network access and network-status permissions support sign-in, sync and uploads, and vibration permission provides touch feedback;
• Notifications: to send important service notifications such as outfit suggestions and import progress.

We never request permissions unrelated to the core features. Turning off a permission does not affect data you have already saved, but the corresponding feature may become unavailable.

2.5 Purchases and subscriptions

When you buy a Pro subscription or AI credits, we process your account identifier, product and transaction identifiers, purchase and renewal times, subscription status, expiry dates and refund records to confirm purchases, grant entitlements, restore purchases, prevent fraud and perform analytics. The iOS app uses Apple In-App Purchase; the HarmonyOS app uses Huawei In-App Purchases; the web uses Alipay online payment (provided by Alipay (China) Network Technology Co., Ltd.), and we send Alipay the order number, product name and amount and receive the trade number and payment result. Card numbers and payment-account passwords are handled by the relevant payment platform and are not available to us.

We use your personal information only to the extent necessary for the following purposes:

• Creating and managing your account, and protecting account security;
• Recognizing, splitting and analyzing the photos you upload to generate your private wardrobe, outfit plans and shopping suggestions;
• Providing core features such as wardrobe management, semantic search, shopping decisions and wear logging;
• Verifying purchases, managing subscriptions, granting membership and AI credits, restoring purchases and analyzing purchases and renewals;
• Improving and optimizing product features and user experience;
• Sending you service notices, security alerts and version updates;
• Preventing and handling fraud, security risks and illegal activity;
• Complying with legal obligations.

We do not use your photos or personal information to train AI models, we do not serve third-party ads, and we never sell your personal information to any third party. We do not combine App data with data from other companies’ apps or websites for targeted advertising or advertising measurement, or provide this data to data brokers.

To provide AI recognition and outfit capabilities, photos you upload in the App are transmitted over encrypted connections and entrusted to the following third-party AI cloud services for computation. We require the entrusted providers to process your data only to the extent necessary to provide the relevant service to you:

• DeepSeek (developer: DeepSeek AI, Hangzhou): AI language-model Q&A and analysis capabilities. Website: https://www.deepseek.com;
• Zhipu AI (developer: Beijing Zhipu Huazhang Technology Co., Ltd.): image understanding and AI analysis capabilities. Website: https://www.zhipuai.cn.

We do not provide your data to these services for the purpose of training AI models. Third-party processing limits and non-training requirements are governed by the actual service configuration, processing arrangements and data-handling practices. A provider’s privacy policy does not authorize processing beyond this Policy and your authorization. We will notify you of material changes to processing purposes and obtain additional consent where required.

Purchase and subscription services

Apple and Huawei process information necessary for in-app payments under their respective privacy policies.

Usage analytics and service infrastructure

App usage events are received and analyzed by our own backend; we do not use a third-party advertising analytics SDK. Cloud servers and object storage host the service and store your uploaded photos and account data. SMS services process the mobile number and message content needed to deliver service messages such as verification codes. We provide service providers with data only to the extent needed for the relevant service.

Lawful regulatory assistance

For lawful requests from regulators or law-enforcement authorities, our security manager verifies the requesting authority, relevant documents, legal basis and scope, and follows legal procedures to provide necessary account checks, log retrieval, anomaly analysis, data preservation or technical support. Requests involving outfit photos, private wardrobes or other personal information are handled on a strictly necessary basis to prevent unauthorized or excessive disclosure. We record the request source, receipt time, assistance provided and outcome, and retain these records as required.

5.1 Where and how long we store data

Your data is stored on secured cloud servers. We keep your personal information only for the shortest period necessary for the purposes described in this Policy. After you delete your account, we delete or anonymize your data when the cooling-off period expires, unless the law requires otherwise. Usage events are retained on our backend for 180 days by default, and events linked to your account are deleted during account deletion cleanup. Purchase and subscription records may be retained to fulfill transaction, financial-recordkeeping and fraud-prevention obligations.

Network-operation and security logs are retained for at least six months as required by law, separately from usage analytics and wardrobe records, and used only for security, operations and lawful tracing. Access controls restrict unauthorized viewing, changes, deletion or exports, with necessary backups and safeguards. This statutory requirement does not mean all personal information is kept for six months; information retained under legal obligations is handled as required once the applicable retention requirements have been met.

5.2 Security measures

• Encrypted transmission via HTTPS, with passwords stored as salted hashes;
• Server security groups and network-access controls manage open ports and remote-administration permissions and restrict unnecessary public access;
• The server validates credentials, request parameters and data-access permissions, isolates private wardrobes by account and handles abnormal requests to image-upload and AI endpoints;
• Database connections, administrative access and sensitive-data operations follow least-privilege controls, with business-data backup and recovery procedures;
• Operation, security configuration and unusual access are checked according to actual operational capabilities, and identified risks are addressed.

No internet environment is 100% secure. In the event of a personal information security incident, we will notify you and report to the competent authorities as required by law.

5.3 Security incident response

Our security manager coordinates anomaly detection, log checks, risk assessment, response, outcome verification and record archiving. We assess the impact using server logs, API errors, cloud alerts and user reports. Depending on the risk, measures include restricting abnormal access, adjusting access rules, suspending affected endpoints, revoking abnormal credentials, fixing vulnerabilities, restricting affected images or storage links, suspending abnormal third-party calls and preserving logs. Services resume after risk is controlled and checks are complete, with backup-based recovery where necessary. We record causes, response, recovery and improvements and fulfil applicable reporting, notification and investigation-assistance obligations.

5.4 AI services and abnormal-use risks

AI garment recognition, attribute extraction, outfit recommendations and shopping analysis use business rules, access controls and the content-safety capabilities actually integrated to manage risks. Data sent to third-party AI services, including DeepSeek and Zhipu AI, is limited to what the relevant feature needs. Unlawful images, infringing content, malicious uploads, account abuse or inappropriate generated results may lead to request restrictions, suspension of abnormal calls, rule changes and necessary human review, with response records retained. We lawfully cooperate with authorities where criminal or unlawful activity is suspected and reassess relevant risks when important features or AI services change.

Under applicable laws such as the Personal Information Protection Law of the People's Republic of China (and, where applicable, the GDPR in the EU/EEA), you have the following rights over your personal information:

• Access and copy: view and copy your personal information;
• Rectification: correct inaccurate or incomplete personal information;
• Erasure: request deletion of your personal information in statutory circumstances;
• Portability: obtain a copy of your data (the App supports one-click export as a ZIP file; download links are valid for 7 days);
• Withdraw consent: withdraw consent you have previously given, without affecting processing already carried out based on it;
• Account deletion: delete your account and the related data;
• Complaints: raise a complaint via the contact details in Section 10; we will handle it promptly in accordance with the law.

Usage analytics control

You can disable client usage-event reporting in Me → Data & Privacy → Help improve Vestia. Turning it off stops new client events and discards events not yet uploaded. This does not affect core features or stop necessary processing for sign-in security, purchase validation and entitlements, or server-side business-outcome records. Events already uploaded remain subject to the retention period above.

You can request account deletion in Me → Data & Privacy and verify your identity with a code sent to your verified mobile number. After confirmation:

• Your account enters pending-deletion status and all signed-in sessions are revoked; profile data is retained during the cooling-off period so that you can recover the account;
• The default cooling-off period is 15 days; the deletion screen shows the cleanup date. During this period, signing in and confirming recovery cancels deletion;
• When the cooling-off period expires, your photos, garments, outfits, shopping decisions and AI analysis data are permanently deleted and cannot be recovered.

The following information may be kept as required by law: records that laws and regulations require us to retain; anonymized statistical data that can no longer identify you; and basic records necessary for fraud prevention and security.

Deleting your Vestia account does not automatically cancel auto-renewing subscriptions managed by Apple or Huawei. Cancel renewal in the relevant app store’s subscription settings. Transaction-platform records are subject to their own retention and deletion rules. For assistance with data held by third parties, contact us using Section 10.

The App is intended primarily for adults. We do not knowingly provide services to children under 14 and do not knowingly collect personal information from them. If you are under 14, please use the App only with the accompaniment and guidance of a parent or guardian. If you are a guardian and believe your child has provided us with personal information, please contact us using the details in Section 10 and we will delete the relevant information as soon as possible after verification.

We may update this Policy as product features or laws change. For material changes (such as changes to the purposes, methods or categories of processing), we will notify you in the App or by other reasonable means. The date of the latest update is shown at the top of this Policy; continued use of the App after an update takes effect means you accept the updated Policy.

If you have any questions, comments or complaints about this Policy or your personal information, you can reach us at:

Use this email to report account-security, personal-information, AI-generated-content or App-use issues. Our security manager receives, records, investigates and handles reports and provides feedback as appropriate, promptly investigating and addressing data leaks, abnormal access or unlawful content. We keep necessary records of receipt time, the issue, investigation, measures and outcome as required, with access restricted to authorized personnel who need it. We will respond within 15 working days after verifying the necessary identity information.