Privacy Notice — India (English)

Version date: 9 September 2026
Data Fiduciary / Provider: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse", "we")
Address: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Contact: support@echojoy.cn

This notice applies to OutfitMuse users in India and supplements our global Privacy Policy. Where applicable Indian law gives you a mandatory protection, that protection applies.

Data, purpose and AI

We may process account and contact information (email, account ID and Apple, Google or email sign-in information); clothing, profile or body photos you submit, prompts, generated images and feedback; style preferences and profile information you choose to provide; a manually chosen city and approximate city-level location inferred from your IP address; and device, security, crash and support information.

We use this information to create and secure your account, organize your wardrobe, provide the functions and AI results you request, provide weather-aware features when available, answer support requests, prevent fraud, fix faults and comply with law. We do not request device location permission or collect precise device location. For city-based weather features, we use approximate city-level location inferred from your IP address or a city you select manually.

Only when you select an AI feature and submit its necessary inputs do we process those inputs to generate your requested result. Our AI features use only OpenAI models through Vercel AI Gateway. Before sending necessary inputs, we explain the data, purpose and providers and ask for your explicit consent. You may decline; the inputs are then not sent for that request and the dependent feature cannot generate the requested result. Buying a membership does not authorize this data sharing. Apple and Google may still provide sign-in or purchase services. We do not use your photos, prompts, profile or body information, or generated images to train our or a third party's AI models. We do not sell personal data or use it for targeted advertising.

International processing, retention and choices

Our primary overseas environment is in the United States, using Amazon Web Services. Contracted providers may process information for hosting, AI, authentication, email, crash diagnostics and support, only as needed to provide services to us and subject to appropriate safeguards. We apply transfer safeguards required by applicable law and will update this notice if our material processing practices change.

We retain account and saved content while your account is active. Temporary AI-request copies are removed from active systems within 30 days unless you save them or a minimum legal, security, fraud or dispute retention applies. Operational logs are generally retained for up to 90 days. When you confirm account deletion in the app, we immediately close your account, stop providing services to that account, and directly delete the associated account information and personal content. You can no longer sign in with the deleted account.

If specific records must be retained by law or are temporarily needed for security audits or dispute resolution, we retain only the minimum necessary information for the shortest necessary period, restrict processing to the permitted purpose, and directly delete it when that requirement ends. Where technical limitations temporarily prevent deletion from backups, we securely isolate those copies and limit processing to storage and necessary security protection until they can be directly deleted as soon as technically possible. These exceptions do not permit continued use of your photos or account content for other purposes, and we do not retain them as anonymized data instead of deleting them.

You can withdraw optional device permissions and delete content or your account in the app. To withdraw consent where applicable, ask about your data, correct or delete information, or make another privacy request, email support@echojoy.cn with “India Privacy Request” and your account email. We may verify identity. We will provide any rights and complaint channels required by applicable Indian law when they apply to our processing.

Purchases, subscriptions and retained transaction records

We process purchase and subscription records, including store, product, order or transaction identifier, verification token, purchase and renewal status, paid period, available price and currency, refunds, membership benefits and credit balances. We use them to verify purchases, grant and restore access, manage credits, reconcile transactions, handle support and refunds, prevent fraud and meet legal or accounting duties. Apple App Store and Google Play process payment methods under their own policies; we do not receive full card numbers, payment passwords or security codes.

Minimum transaction and entitlement records may be retained after account deletion when necessary for legal, accounting, refund, fraud-prevention or dispute purposes. We restrict them to those purposes and directly delete them when no longer needed. Stores retain their records under their own policies. Deleting an OutfitMuse account does not cancel store renewal; after reviewing the warning, you may still proceed with deletion without first canceling or waiting for the paid period to end.

Related documents

Global Privacy Policy · Global Terms of Service · India Terms · Membership Terms · Account Deletion Instructions · Subprocessor List · Hindi notice.

Usage analytics and provider retention

We use Firebase Analytics to process configured app interactions and usage events, app and device details, app-instance identifiers and account identifiers where enabled, to understand feature usage and improve the service. This does not mean that we use this information for cross-app behavioral advertising.

The retention and deletion rules for our own systems are not uniform deadlines for all provider-held copies. AI providers may retain limited information for security, abuse prevention or legal obligations. Not using data for model training does not mean zero retention. See the provider-retention details in the Third-Party Services List.