Vivariety ("we", "us", "our"), under the parent company of Ihcanum Enterprise Limited (SC868445), operates the Vivariety website at vivariety.com as well as the Vivariety mobile application (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect
We collect the following categories of personal information:

Account information (Your email address and password): We use this to create and secure your account.

Body measurements and fit preferences: Height, weight, chest, waist, hip and other measurements you choose to enter, plus how you like clothes to fit. This is what your Fit Passport is built from, and it is what lets us recommend a size.

Your sizes at brands you already wear: If you tell us you’re a size 12 at one brand, we use that to work out your size at others.

Size check history: The products you’ve checked and the recommendations we gave you.

Technical information: Device type, app version, and basic usage data such as which screens you visit. We use this to fix problems and improve the app.

Payment information: We do not see or store your card details. Purchases made in the iPhone app are handled by Apple. Purchases made on Android are handled by Google.

2. How We Use Your Information
We use your information solely to provide and improve the Service:

• To generate personalised size recommendations based on your body measurements or your known sizes at specific brands.

• To maintain your Fit Passport and size check history.

• To authenticate your account and keep it secure.

• To improve recommendation accuracy and fix issues.

• To train and improve our AI recommendation models using anonymised, aggregated data that does not identify you. This anonymised data may be retained and used indefinitely, including after your account is deleted, because it is no longer personal data.

• To communicate important service updates (e.g., security notices).

We do not sell your personal information to third parties.

3. How We Store and Protect Your Information
Your data is stored securely in an encrypted database with access controls that isolate your data to your account. Passwords are hashed and never stored in plain text. All data is transmitted over HTTPS. While we take reasonable measures to protect your information, no method of electronic storage is completely secure. We cannot guarantee absolute security.

4. Data Sharing
We do not sell, rent, or trade your personal information. We share data with trusted service providers strictly to operate the Service. These include hosting and database providers (Vercel and Supabase), and subscription management (RevenueCat). Payments made in our mobile apps are processed by Apple or Google, and we never receive your card details. These providers process data on our behalf and are bound by their own privacy policies. We may also share anonymised or aggregated data that cannot identify you personally. We may disclose information if required by law, such as in response to a court order or legal process.

5. Your Rights and Choices
You have full control over your data: Access:

• You can view all data we hold about you within the app (your Fit Passport, size check history).

• Update: You can update your body measurements, brand size preferences, and fit preferences at any time.

• Delete: You can delete your account and all associated data by contacting us at the email below. We will process deletion requests within 30 days.

• Export: You can request a copy of your data by contacting us.

• If you are located in the United Kingdom or European Economic Area, you have additional rights under UK GDPR / EU GDPR, including the right to lodge a complaint with your local data protection authority (the ICO in the UK: ico.org.uk).

6. Cookies and Tracking
The Service uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication and core functionality (e.g., keeping you logged in).

• Analytics cookies: Help us understand how the Service is used so we can improve it. These may be provided by third-party analytics services.

• Affiliate and referral cookies: When you visit a retailer's website through a link in the Service, cookies may be used to track referrals. This helps support the Service and does not affect the price you pay.
  You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

7. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days, except where we are required by law to retain certain records.Cached product data (scraped from retailer websites) is retained for up to 24 hours and does not contain personal information.

Before your personal data is deleted, we may anonymise and aggregate certain elements of it (such as body measurement statistics) so that they can no longer identify you, whether alone or in combination with other information reasonably available to us. This anonymisation is irreversible. Once data has been anonymised in this way, it is no longer personal data, falls outside the scope of this Privacy Policy, and may be retained indefinitely to train and improve our AI recommendation models. This does not change the deletion of your identifiable personal data described above, which will still occur within 30 days of account deletion.

9. International Data Transfers
Our servers are hosted in regions provided by Supabase and Vercel, which may include locations outside the United Kingdom. Where data is transferred outside the UK, appropriate safeguards are in place in accordance with UK data protection law.

10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: support@vivariety.com