Privacy Policy

This Privacy Policy applies to the FanFit AI application (hereinafter referred to as "Application") for mobile devices, offered as a Freemium service by an independent developer based in Germany (hereinafter referred to as "Service Provider," "we," "us," or "our"). This service is intended for use "AS IS".

Effective Date: September 6, 2026

Last Updated: September 6, 2026

0. Independence and No Affiliation

FanFit AI is an independent application. It is not affiliated with, endorsed by, sponsored by, or associated with any football association, federation, team, club, league, event organizer, sportswear manufacturer, or player. All outfit styles are original designs inspired by general fan and cheer aesthetics.

1. Information Collection and Use

We value your privacy and are committed to protecting your personal data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA).

1.1 Photos and Facial Images Collection and Use

The Application processes the photos you voluntarily upload in order to generate your AI outfit result. Because these photos are typically selfies or portraits, they may contain your facial image and other visual information about you. We treat any facial image contained in your uploaded photos with the same care as the rest of the photo, as described below.

• We collect only the photos you voluntarily choose to upload for the AI outfit generation feature. We do not access your camera roll in the background.
• We do not use facial recognition, face-matching, or biometric identification. We do not extract, generate, or store any biometric template, faceprint, or unique facial identifier from your photos.
• Uploaded photos (including any facial image they contain) are processed on our own AI service to generate your requested outfit result.
• We do not send your photos to any third-party AI provider, and we do not share your photos with third parties for their own purposes.
• We do not use your uploaded photos, any facial image contained in them, or your Generated Results to train AI models.
• We do not sell your photos, Generated Results, facial image data, or any personal data.
• Automated safety filters are used during processing to block inappropriate content.
• You maintain full control over your Generated Results and can delete them at any time.

1.2 Account Information

When you use the Application:

• If you sign in with Apple, we receive the name and email address that Apple provides (which may be a private relay email if you choose to hide your email).
• If you sign in with Google, we receive your name, email address, and Google account identifier as provided by Google through Google Sign-In. We use this information only to create and manage your account. We do not access your Google contacts, calendar, drive, or any other Google services beyond the basic profile information you authorize during sign-in.
• If you use the Application as a Guest User, no personal account information is collected. Photos you upload in Guest Mode are processed in the same manner described in Section 1.1 solely to generate your requested result.
• We store in-app coin balance and purchase history for transaction purposes.
• Generated AI images are stored in your account history until you delete them.

2. Data Storage and Security

• Data is stored and processed on secure servers located in the United States.
• All data in transit is protected with encrypted transmission (HTTPS/TLS).
• Stored photos and Generated Results are protected using industry-standard encryption at rest.
• Automated safety filters are used during processing to block inappropriate content.
• We implement reasonable technical and organizational measures to protect your data. However, no method of transmission or storage is 100% secure.

2.1 International Data Transfers

As a developer based in Germany serving users worldwide, and because our servers are located in the United States, personal data (including your uploaded photos and Generated Results) will be transferred outside the European Economic Area for processing and storage. Where such transfers occur, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses, to protect your data.

3. Data Retention and Deletion

Our data retention policy is as follows:

• Original uploaded photos are deleted from our servers immediately after AI processing is complete.
• Generated AI results are retained until you manually delete them through the Application.
• Account data (Apple ID identifier or Google account identifier, coin balance, purchase history) is retained while your account is active.
• You can delete any Generated Result at any time through the Application.
• Account deletion (available in Settings via "Delete My Account") will remove all associated data, including your generation history, coin balance, and account information.

4. Feature-Specific Data Processing

4.1 AI Outfit Generation Feature

• Processes user-uploaded photos (which may contain your facial image) to generate an AI outfit result.
• Processing is performed on our own AI service; photos are not sent to any third-party AI provider.
• Stores Generated Results in your account history until you delete them.
• Original uploaded photos are deleted immediately after the result is generated.
• Neither the uploaded photos nor the Generated Results are used to train AI models or sold to any third party.

4.2 In-App Purchases

• The Application offers consumable coin packages as in-app purchases.
• All purchases are processed through Apple's App Store. We do not receive or store your payment card details.
• Coin balance and purchase history are stored in your account for transaction management.

5. User Responsibility

You agree not to use the Application to:

• Upload photos of anyone other than yourself unless you have that person's explicit permission.
• Upload photos of public figures, celebrities, athletes, or other individuals without authorization.
• Upload inappropriate, sexually explicit, or offensive content.
• Use the Application for any illegal or harmful purposes.
• Create non-consensual images or manipulate images of others without their explicit consent.
• Share or distribute AI-generated results in ways that infringe others' rights or violate applicable law.
• Attempt to bypass our automated safety filters.

6. Data Security

We implement reasonable technical and organizational measures to protect your photos and personal data, including:

• Encrypted transmission (HTTPS/TLS) for data in transit.
• Encryption at rest for stored photos and Generated Results.
• Automated safety filters during processing.

7. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA, and CPRA), you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Request data portability.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Opt-out of the sale of personal data (we do not sell personal data).
• Lodge a complaint with your local data protection authority. If you are in the EEA, you may contact the supervisory authority in your country of residence.

To exercise these rights, please use the in-app settings ("Delete My Account") or contact us at the email below. We will respond within the timeframes required by applicable law.

8. Third-Party Services

The Application relies on the following third-party services:

• Apple Services: For Sign in with Apple authentication and in-app purchases via the App Store. Subject to Apple's Privacy Policy.
• Google Sign-In: For optional authentication using your Google account. When you choose to sign in with Google, Google may collect and process data as described in Google's Privacy Policy. We only receive the basic profile information (name, email, and Google account identifier) that you authorize during sign-in.
• Adjust SDK (Adjust GmbH): For attribution and fraud prevention. The Adjust SDK processes certain device and event data as described in Section 8.1 below. Subject to Adjust's Privacy Policy.

AI generation is performed on our own service and is not outsourced to any third-party AI provider. The Application does not display any advertising and does not include any third-party advertising SDKs.

8.1 Adjust SDK

We use the Adjust SDK to measure the performance of our marketing campaigns, attribute installs and in-app events to their source, and detect and prevent fraudulent activity (such as install fraud or click injection). The Application does not display advertising, and Adjust is used solely for attribution and fraud-prevention purposes — not for behavioral advertising.

When the Adjust SDK is active on your device, it may collect and transmit to Adjust the following categories of data:

• Device information: device model, operating system and version, device language, country/timezone, screen size, and device identifiers (e.g., IDFA) where the relevant platform permission has been granted.
• Session and event information: app opens, session length, in-app events (such as completed AI generations or coin purchases), and interaction timestamps.
• Attribution information: install referrer, click and impression data, IP address (used to approximate geographic location at a city/country level), and attribution source.
• Technical identifiers: Adjust-generated device identifier, SDK version, and build number.

Adjust processes this data on its own servers as a data controller for its own purposes (attribution, analytics, and fraud prevention). The legal bases for this processing are our legitimate interest in measuring marketing performance and preventing fraud, and — where required by applicable law — your consent, which you can withdraw at any time through your device's privacy controls (e.g., Apple's "App Tracking Transparency" prompt on iOS).

You can opt out of Adjust's tracking at any time by:

• Declining the App Tracking Transparency (ATT) prompt when it appears.
• Disabling tracking later via Settings → Privacy & Security → Tracking on your iOS device.

For more details, see Adjust's Privacy Policy at https://www.adjust.com/terms/privacy-policy/.

9. Children's Privacy

The Application is not intended for use by children under the age of 13. If you are located in the European Economic Area or the United Kingdom, you must be at least 16 years old, or have the consent of a parent or legal guardian where required by local law. We do not knowingly process photos or collect personal data from children below these ages. If you believe we have collected data from a child, please contact us immediately and we will delete such data.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through the Application. We encourage you to review this Privacy Policy from time to time.

11. Contact Us

For privacy-related questions or to exercise your data rights:

Email: [email protected]

12. Disclaimer of Warranties

The Application and its AI-generated results are provided "AS IS" without any warranties. Results may vary based on photo quality, lighting, and outfit selection.

13. Limitation of Liability

To the extent permitted by law, we are not liable for:

• Unsatisfactory or unexpected AI generation results.
• Temporary service interruptions.
• Loss of saved generation history.
• Issues with photo processing or AI generation.

By using the Application, you acknowledge and consent to the collection, processing, and storage of your photos (including any facial image they contain) and Generated Results as described in this Privacy Policy.