Fasha is a virtual fashion styling app. This policy explains what personal data we collect, what data is shared with third-party AI services, and how your data is used and protected.
What We Collect
- Face / selfie photos — See the "Face Data" section below for full details.
- Clothing item photos — Photos of garments you upload for your virtual closet and try-on.
- Closet data — Clothing items are stored locally on your device and optionally synced to your Firebase account if you sign in.
- Account info — If you sign in with Google or email, we receive your name and email via Firebase Authentication — used only to sync your closet across devices.
- Chat messages — Conversations with our AI stylist are used to generate fashion recommendations.
Face Data — Collection, Use, Sharing & Retention
Fasha's core feature is virtual try-on, which requires a photo of you. This section explains exactly how face data is handled.
- What we collect: A single full-body or upper-body selfie you voluntarily upload. We do not perform facial recognition, build face templates, or extract biometric identifiers.
- How it's used: Your photo is used exclusively to generate virtual try-on images — the AI composites clothing onto your photo so you can see how an outfit looks on you.
- Third-party sharing: Your selfie is sent to Google Gemini API (Google LLC) for AI processing. If Gemini is unavailable, it may fall back to OpenAI API (OpenAI, Inc.). Neither Google nor OpenAI retains your photo after processing. Transmission goes through our secure API proxy on Vercel — never to any other third party.
- On-device storage: Your selfie is stored locally so you don't need to re-upload each session. If signed in, it may also sync to Firebase Cloud Storage under your account.
- Retention: We do not retain your face photo on any server beyond the real-time AI request. Locally stored copies persist until you delete them in-app, clear app data, or sign out.
- Your control: Delete your selfie any time from within the app. Revoke consent by clearing app data, which removes all locally stored photos and resets the consent prompt.
Third-Party AI Services
We obtain your explicit consent before any data is shared with AI providers.
- Google Gemini API (Google LLC) — Receives uploaded photos and chat messages for virtual try-on, outfit analysis, and styling recommendations. Processed in real time, not stored. Governed by Google's Gemini API Terms.
- OpenAI API (OpenAI, Inc.) — Fallback provider when Gemini is unavailable. Same data scope. Not stored. Governed by OpenAI's API Data Usage Policy.
What Is Never Shared
Your email address, display name, account credentials, and any personal identification information are never sent to Google Gemini or OpenAI. Only the photos you explicitly upload and the chat messages you type are transmitted for AI processing.
Other Third-Party Services
- Firebase (Google) — Authentication and cloud storage for syncing your closet and try-on history.
- Vercel — Hosts our website, API proxy, and serverless functions. All AI requests route through Vercel's secure infrastructure.
- Resend — Used to send transactional order notification emails (Store feature only).
Your Consent
When you first open Fasha, a clear consent prompt describes what data is shared and with whom. You must agree before any AI features are used. Consent is recorded locally and can be revoked by clearing app data or signing out.
Data Storage & Deletion
Most data stays on your device. If you sign in, closet items and try-on results may be synced to Firebase Cloud Storage tied to your account. You can delete all your data at any time by clearing the app or signing out.
Children's Privacy
Fasha is not directed at children under 13. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy. Changes will be posted on this page with an updated effective date.