FitCheck - AI Stylist Privacy Policy
How outfit photos, AI analysis, local history, diagnostics, and purchases are handled.
FitCheck - AI Stylist provides clothing and styling feedback from an outfit photo. This policy explains what is processed when you request a fit check and what can be retained on your iPhone.
No account or public profile
FitCheck works without signing in. It does not create a username, social profile, public feed, or a place where other users can see your scans.
Your choice before remote analysis
Before the first photo can be uploaded for remote AI analysis, FitCheck shows a disclosure that identifies Cloudflare and OpenAI, explains what will be sent, and asks for your explicit permission. Choosing Not Now sends nothing and does not start the remote analysis. You can withdraw permission at any time in FitCheck Settings under Privacy to stop future uploads, and you can re-enable it there if you later choose to use remote analysis.
Photos and AI analysis
A photo is used to produce the scorecard you request. Before remote analysis, the app corrects orientation, reduces the longest edge to a maximum of 1400 pixels, and re-encodes a new JPEG copy without the original location, camera EXIF, or timestamp metadata.
With your permission, that metadata-free copy, your selected occasion and styling choices, a randomly generated app-installation identifier, and Apple-signed app or purchase verification when available are sent over an encrypted connection to FitCheck's Cloudflare service. Cloudflare holds the service credentials and relays the analysis request to OpenAI.
FitCheck's Cloudflare service does not save the uploaded photo in its application storage. Its OpenAI Responses API request sets store: false, so response application state is not retained for later retrieval. Under OpenAI's standard API data controls, request content may still be included in abuse-monitoring logs retained for up to 30 days. OpenAI may retain data longer when required by law or reasonably necessary to protect its services or third parties from harm. Enhanced retention controls may reduce this retention where they apply.
On-device analysis
If a FitCheck build is configured to use its on-device analyzer instead of remote AI, Apple Vision and FitCheck's local visual rubric process the photo and styling choices on the iPhone, and the photo is not uploaded. The Private Analysis setting is separate: it controls whether a scan photo is saved on the device after analysis.
Temporary scorecard retry cache
If a remote analysis completes, FitCheck's Cloudflare service may cache the completed scorecard JSON for up to 10 minutes so the same result can be delivered after a lost connection without running another analysis or consuming another check. The submitted photo is never included in this cache. A scheduled Cloudflare deletion removes an expired cached scorecard without waiting for another app request.
Local scan history
Scorecards and any scan photos you choose to retain are stored in the app's private container on your iPhone. A retained scan photo is an app-generated copy limited to 1400 pixels on its longest side, rather than the original full-resolution file. Scan images are excluded from device backups by default.
You can turn off Save scan photos, enable Private Analysis to discard the on-device image after the scan and keep only the scorecard, delete individual scans, or use Delete All Scans in Settings. Private Analysis controls on-device photo saving only. It does not authorize remote processing or replace the separate remote-analysis permission described above.
Service identifiers and operational logs
Remote requests include a randomly generated app-installation identifier used for abuse prevention and fair-use limits. The service may record operational details such as a request identifier, duration, model version, selected occasion category, score band, and error status. It does not place the submitted photo in those application logs.
On-device diagnostics
FitCheck records coarse product events to Apple's unified device log to help diagnose problems, such as whether a scan completed or failed. These events do not include photos, names, free-form outfit text, or a third-party analytics identifier. The app does not include an advertising SDK.
Purchases
Apple processes App Store downloads, subscriptions, lifetime purchases, refunds, payment details, and Apple Account information. FitCheck receives the product and entitlement status needed to unlock features. For remote checks, the app may send Apple-signed app-installation or purchase verification to the Cloudflare service to confirm legitimate access and apply the correct fair-use allowance. QnSub does not receive your payment card details or Apple Account credentials.
Weekly and yearly subscriptions provide access while active and include up to 25 successful analyses per rolling 24 hours and 100 per rolling 30 days. The $119.99 Lifetime option is a one-time purchase that never expires and includes 1,000 total successful analyses, still subject to those daily and rolling 30-day limits. The Lifetime total does not renew or reset. Failed or rejected analyses do not count toward these allowances.
Photo library, camera, and exports
Camera access is used only when you choose to take an outfit photo. Photo library access is used when you choose an existing image or export retained photos. Once an exported image leaves FitCheck, the destination app, recipient, or storage provider handles it under its own privacy practices.
Children
FitCheck is not directed at children. If an image appears to include a minor, analysis is restricted to ordinary clothing and age-appropriate styling guidance, and unsuitable content is rejected.
What FitCheck does not do
- FitCheck does not score attractiveness, body shape, race, age, identity, or personal worth.
- FitCheck does not use face recognition or create a biometric profile.
- FitCheck does not sell outfit photos or use them to train models.
- FitCheck does not provide a social feed or expose scans to other users.
Deleting data
Delete individual records from History, use Delete All Scans in Settings, or delete FitCheck to remove its local app container. Copies exported to Photos, Files, messages, cloud storage, or another service must be deleted separately from those locations.
Changes to this policy
If FitCheck's privacy practices change, this page will be updated with a new effective date. Material changes to image processing, storage, accounts, analytics, or advertising will be described clearly.
Contact
For privacy questions or any app concern, send an email to appsupport@qnsub.com.