Vivariety ("we", "us", "our"), under the parent company of Ihcanum Enterprise Limited (SC868445), operates the Vivariety website at vivariety.vercel.app and vivariety.com as well as the Vivariety mobile application (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect
We collect the following categories of personal information:

2. How We Use Your Information
We use your information solely to provide and improve the Service:

• To generate personalised size recommendations based on your body measurements or your known sizes at specific brands

• To maintain your Fit Passport and size check history

• To authenticate your account and keep it secure

• To improve recommendation accuracy and fix issues

• To communicate important service updates (e.g., security notices)

We do not sell your personal information to third parties.

3. How We Store and Protect Your Information
Your data is stored securely in an encrypted database with access controls that isolate your data to your account. Passwords are hashed and never stored in plain text. All data is transmitted over HTTPS. While we take reasonable measures to protect your information, no method of electronic storage is completely secure. We cannot guarantee absolute security.

4. Data Sharing
We do not sell, rent, or trade your personal information. We share data with trusted service providers strictly to operate the Service, including hosting, authentication, and payment processing (Stripe). These providers process data on our behalf and are bound by their own privacy policies. We may also share anonymised or aggregated data that cannot identify you personally. We may disclose information if required by law, such as in response to a court order or legal process.

5. Your Rights and Choices
You have full control over your data: Access:

• You can view all data we hold about you within the app (your Fit Passport, size check history).

• Update: You can update your body measurements, brand size preferences, and fit preferences at any time.

• Delete: You can delete your account and all associated data by contacting us at the email below. We will process deletion requests within 30 days.

• Export: You can request a copy of your data by contacting us.

• If you are located in the United Kingdom or European Economic Area, you have additional rights under UK GDPR / EU GDPR, including the right to lodge a complaint with your local data protection authority (the ICO in the UK: ico.org.uk).

6. Cookies and Tracking
The Service uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication and core functionality (e.g., keeping you logged in).

• Analytics cookies: Help us understand how the Service is used so we can improve it. These may be provided by third-party analytics services.

• Affiliate and referral cookies: When you visit a retailer's website through a link in the Service, cookies may be used to track referrals. This helps support the Service and does not affect the price you pay.
  You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days, except where we are required by law to retain certain records. Cached product data (scraped from retailer websites) is retained for up to 24 hours and does not contain personal information.

9. International Data Transfers
Our servers are hosted in regions provided by Supabase and Vercel, which may include locations outside the United Kingdom. Where data is transferred outside the UK, appropriate safeguards are in place in accordance with UK data protection law.

10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: support@vivariety.com