Notis Privasi OutfitMuse — Malaysia

Tarikh versi: 2026-09-09
Pengawal Data: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse", "kami")
Alamat berdaftar: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Hubungan privasi: support@echojoy.cn

Notis ini terpakai kepada pengguna OutfitMuse di Malaysia. Notis tempatan dalam bahasa Melayu ini diikuti oleh Dasar Privasi global OutfitMuse dalam bahasa Inggeris dalam Bahagian 2 pada halaman yang sama. Jika terdapat perlindungan mandatori di bawah undang-undang Malaysia, perlindungan tersebut tetap terpakai.

1. Data yang kami proses

Kami memproses data yang anda berikan atau yang dijana apabila anda menggunakan Perkhidmatan: alamat e-mel dan maklumat log masuk; foto pakaian, foto profil atau badan, foto pakaian dan imej yang dijana; arahan (prompt) dan pilihan gaya; bandar yang dipilih secara manual atau anggaran bandar berdasarkan alamat IP; serta butiran peranti, alamat IP, log, laporan ranap dan permintaan sokongan. Kami menerima data terus daripada anda, daripada Apple atau Google apabila anda memilih kaedah log masuk tersebut, dan secara automatik daripada peranti serta penggunaan Perkhidmatan anda.

Kami memproses data ini untuk menyediakan, melindungi dan menyokong akaun serta ciri OutfitMuse; menjana hasil AI yang anda minta secara aktif; menyediakan cadangan pakaian berasaskan cuaca; mencegah penyalahgunaan; dan membaiki kebolehpercayaan Perkhidmatan. Alamat e-mel dan maklumat log masuk diperlukan untuk mencipta serta melindungi akaun. Foto, arahan dan pilihan gaya adalah pilihan anda; namun, ciri yang memerlukan input tersebut tidak akan berfungsi tanpa input berkenaan. Versi antarabangsa tidak meminta kebenaran lokasi peranti dan tidak mengumpul lokasi tepat peranti. Ciri cuaca menggunakan bandar yang dipilih secara manual atau anggaran bandar berdasarkan alamat IP. Anda juga boleh menolak kebenaran kamera atau pustaka foto, tetapi ciri yang memerlukan pengambilan atau muat naik foto tidak akan berfungsi.

Bagi pembelian, kami memproses kedai asal, pengecam produk dan pelan, pengecam pesanan atau transaksi, resit atau token pembelian, masa pembelian dan tamat tempoh, status pembaharuan dan bayaran balik, serta rekod pemberian, penggunaan dan pelarasan kredit. Data ini diperlukan untuk mengesahkan transaksi, menyediakan dan memulihkan manfaat, menyegerakkan hak akses, mengurus pembatalan, bayaran balik, pencegahan penipuan dan pertikaian, serta memenuhi kewajipan perakaunan dan undang-undang. Apple App Store atau Google Play memproses pembayaran di kedai masing-masing. Kami tidak menerima atau menyimpan nombor kad pembayaran penuh, kata laluan pembayaran atau kod pengesahan anda. Lihat Terma Keahlian.

Kami tidak menjual data peribadi, tidak menggunakannya untuk iklan tingkah laku merentas aplikasi atau laman web, dan tidak menggunakan foto, arahan, maklumat profil atau badan, atau imej yang dijana untuk melatih model AI kami atau model pihak ketiga.

2. Pilihan anda dan pemprosesan AI

Permintaan AI versi antarabangsa dihantar melalui Vercel AI Gateway kepada OpenAI. Sebelum penghantaran, kami menerangkan penerima, jenis data dan tujuan pemprosesan serta meminta anda memilih secara aktif untuk bersetuju atau menolak. Membuka ciri, membeli keahlian atau menerima terma umum bukan persetujuan untuk penghantaran ini. Selepas anda bersetuju, kami hanya menghantar imej atau pautan imej, arahan, pilihan dan parameter yang diperlukan bagi permintaan itu; imej mungkin termasuk foto peribadi, wajah, badan atau pakaian yang anda pilih. Jika anda menolak, permintaan itu tidak dihantar dan ciri AI yang memerlukannya tidak dapat diselesaikan, tanpa menjejaskan ciri tersedia yang tidak memerlukan pemprosesan tersebut. Anda boleh berhenti menggunakan ciri AI pada bila-bila masa.

Kami tidak memilih untuk berkongsi data ini bagi latihan model. Data API OpenAI secara lalai tidak digunakan untuk latihan model kecuali pelanggan memilih untuk berkongsinya. Ini tidak bermakna tiada penyimpanan: log pemantauan penyalahgunaan OpenAI secara lalai boleh disimpan sehingga 30 hari, dengan pengecualian bagi keperluan undang-undang dan semakan keselamatan imej. Pemprosesan gateway Vercel serta penyimpanan keselamatan dan undang-undang oleh penyedia perlu difahami secara berasingan; kami tidak menjanjikan sifar penyimpanan atau pemadaman oleh semua penyedia dalam 24 jam.

3. Penerima data dan pemindahan antarabangsa

Kami menggunakan penyedia perkhidmatan bagi pengehosan awan, storan, pengesahan, penghantaran e-mel, pemprosesan AI, pelaporan ranap dan sokongan. Mereka boleh memproses data hanya untuk menyediakan perkhidmatan kepada kami dan tertakluk kepada perlindungan kontrak serta teknikal.

Apple dan Google terus menyediakan kaedah log masuk yang anda pilih serta kedai, pembayaran, pengurusan langganan dan proses bayaran balik masing-masing. Bagi akaun, transaksi kedai, keselamatan dan kewajipan undang-undang mereka sendiri, mereka boleh memproses data secara bebas di bawah terma dan dasar privasi mereka, bukan semata-mata mengikut arahan kami. Kami bertukar maklumat hanya setakat yang perlu untuk pengesahan dan penyediaan manfaat.

Persekitaran pengeluaran luar negara kami dihoskan terutamanya di Amerika Syarikat menggunakan Amazon Web Services. Penyedia kami boleh memproses data di Amerika Syarikat atau lokasi lain yang diperlukan untuk perkhidmatan mereka. Untuk maklumat lanjut tentang penerima dan lokasi pemprosesan utama, lihat Senarai Penyedia Perkhidmatan Pihak Ketiga OutfitMuse.

4. Tempoh simpanan dan penghapusan

Kami menyimpan data hanya selama yang diperlukan untuk tujuan di atas. Data akaun dan kandungan yang disimpan kekal semasa akaun anda aktif melainkan anda memadamkannya lebih awal. Salinan sementara bagi permintaan AI dipadam daripada sistem aktif dalam 30 hari, melainkan kandungan itu disimpan dalam akaun anda atau perlu disimpan atas sebab keselamatan, undang-undang atau pertikaian. Log keselamatan dan diagnostik biasanya disimpan sehingga 90 hari.

Selepas anda mengesahkan penutupan akaun dalam aplikasi, kami segera menutup akaun, menghentikan perkhidmatan kepada akaun itu dan memadam terus data peribadi yang berkaitan, tertakluk hanya kepada pengecualian minimum di bawah. Kami tidak menggantikan pemadaman dengan penyahkenalpastian atau penganoniman. Jika sebab teknikal menghalang pemadaman sandaran buat sementara waktu, sandaran diasingkan dengan selamat dan pemprosesannya dihadkan kepada penyimpanan serta perlindungan keselamatannya, kemudian dipadam terus secepat mungkin apabila keadaan teknikal membenarkannya. Tiada tempoh menunggu tambahan yang tetap. Lihat juga Arahan Penghapusan Akaun.

Hanya data yang wajib disimpan menurut undang-undang serta rekod audit keselamatan, pencegahan penipuan, bayaran balik atau pertikaian yang diperlukan disimpan dalam skop minimum dan bagi tempoh paling singkat yang diperlukan, dengan akses serta pemprosesan terhad. Rekod transaksi dan hak akses yang diperlukan bagi kewajipan undang-undang atau perakaunan juga tertakluk kepada had yang sama. Apabila keperluan penyimpanan tamat, rekod dipadam terus, bukan digantikan dengan penyahkenalpastian atau penganoniman. Ini bukan alasan untuk menyimpan semua foto atau kandungan akaun selama-lamanya.

Memadam akaun tidak dengan sendirinya membatalkan langganan Apple App Store atau Google Play. Jika pembaharuan automatik masih aktif, kedai boleh terus mengenakan caj selepas penghapusan. Kami mengesyorkan anda membatalkan pembaharuan di kedai asal terlebih dahulu, tetapi selepas membaca amaran anda masih boleh meneruskan penghapusan tanpa menunggu tempoh berbayar tamat. Lihat Terma Keahlian.

5. Akses, pembetulan dan pilihan

Anda boleh mengemas kini atau memadam banyak kandungan, pilihan dan akaun anda dalam aplikasi. Anda juga boleh menarik balik kebenaran peranti pilihan, seperti kamera atau pustaka foto, dalam tetapan peranti. Untuk meminta akses kepada atau pembetulan data peribadi, untuk membuat permintaan penghapusan, menarik balik persetujuan jika berkenaan, mengehadkan pemprosesan, atau mengemukakan pertanyaan atau aduan privasi, e-mel support@echojoy.cn dengan subjek "Malaysia Privacy Request" dan alamat e-mel akaun anda. Kami mungkin mengesahkan identiti anda sebelum membalas.

6. Keselamatan dan perubahan

Kami menggunakan langkah perlindungan pentadbiran, teknikal dan organisasi yang munasabah, termasuk kawalan akses, penyulitan semasa penghantaran, akses berasaskan peranan dan pengelogan keselamatan. Tiada penghantaran atau storan yang benar-benar selamat. Jika kami mengesan insiden keselamatan yang memerlukan pemberitahuan, kami akan memberikan notis sebagaimana dikehendaki oleh undang-undang.

Kami boleh mengemas kini notis ini apabila amalan, Perkhidmatan atau keperluan undang-undang berubah. Bagi perubahan penting, kami akan memberikan notis yang sesuai dan, jika diperlukan, mendapatkan persetujuan anda sebelum perubahan berkuat kuasa.

7. Hubungi kami

Chengdu Xinling Qiyue Network Technology Co., Ltd.
Soalan dan permintaan privasi: support@echojoy.cn

Jika anda menghubungi kami tentang permintaan privasi, jangan hantarkan foto, dokumen pengenalan atau maklumat sensitif lain melainkan kami meminta perkara itu melalui saluran yang selamat.

8. Analitik penggunaan dan penyimpanan oleh penyedia

Kami menggunakan Firebase Analytics untuk memproses interaksi aplikasi dan peristiwa penggunaan yang dikonfigurasi, butiran aplikasi dan peranti, pengecam instans aplikasi serta pengecam akaun apabila diaktifkan, untuk memahami penggunaan ciri dan menambah baik perkhidmatan. Ini tidak bermaksud data tersebut digunakan untuk pengiklanan tingkah laku merentas aplikasi.

Peraturan penyimpanan dan pemadaman semasa penutupan akaun bagi sistem kami sendiri tidak terpakai secara seragam kepada semua salinan yang disimpan oleh penyedia. Penyedia AI mungkin menyimpan data terhad untuk keselamatan, pencegahan penyalahgunaan atau kewajipan undang-undang. Tidak menggunakan data untuk latihan model tidak bermaksud tiada penyimpanan. Sila lihat butiran penyimpanan penyedia dalam Senarai Perkhidmatan Pihak Ketiga.

---

Part 2 — Global Privacy Policy (English)

Document version: 2026-09-09
Controller: Chengdu Xinling Qiyue Network Technology Co., Ltd. ("OutfitMuse," "we," "us," or "our")
Registered address: Room 1601, No. 2 (self-numbered), 16th Floor, Building 1, No. 145 Tiantai Road, Chengdu High-Tech Zone, Chengdu, Sichuan, People's Republic of China
Privacy contact: support@echojoy.cn

This Privacy Policy explains how OutfitMuse collects, uses, discloses, retains, and protects personal information when you use our mobile applications, websites, and related services (collectively, the "Services").

This global Policy applies wherever we make the Services available. Country-specific notices may supplement it for Brazil, Japan, Mexico, India, Indonesia, Malaysia, the United Arab Emirates, Nigeria, or another market. It is not directed to people in the European Economic Area, the United Kingdom, or jurisdictions where we have not made the Service available. We will publish an applicable regional notice before offering the Service in those regions.

Regional privacy notices

Please also read the notice for your country or region, where listed below. A regional notice supplements this global Policy; choosing a different display language does not remove any protections that apply where you live.

• Hong Kong and Taiwan — 繁體中文
• Canada — Français
• Brazil — Português
• Japan — 日本語
• Mexico — Español
• India — English
• India — हिन्दी
• Indonesia — Bahasa Indonesia
• Malaysia — Bahasa Melayu / English
• United Arab Emirates — English
• Nigeria — English

Please read this Policy with our Terms of Service. If you have questions or wish to exercise a privacy right, contact us at the email address above.

1. Information We Collect

We collect information that you provide, information generated while you use the Services, and limited information that is collected automatically.

We do not request device location permission or collect precise device location. For city-based weather features, we use approximate city-level location inferred from your IP address or a city you select manually. You may also deny camera or photo-library permission; however, features that require you to take or upload photos will not be available.

Payments for subscriptions and in-app purchases are processed by Apple App Store or Google Play, as applicable to your purchase. OutfitMuse receives the transaction and subscription information necessary to verify purchases and provide benefits. Through these store billing integrations, we do not receive your full payment-card number, card security code, payment-account password or payment authentication code. The relevant store handles payment details under its own terms and privacy policy.

2. How We Use Information

We use personal information only as needed to:

• provide, maintain, personalize, and secure the Services;
• create and administer accounts; verify sign-ins; prevent fraud, abuse, and unauthorized access;
• receive, store, transform, and return the photos, prompts, and other inputs needed for the AI feature you actively request;
• provide weather-aware outfit recommendations based on your manually selected city or approximate city inferred from your IP address;
• verify and reconcile purchases, provide and synchronize membership and AI credits, prevent payment-related fraud, and handle refunds, billing disputes and necessary transaction records;
• understand app usage through the configured analytics described above;
• respond to support requests and communicate about material service or policy changes;
• diagnose crashes, fix defects, measure service reliability, and enforce our Terms; and
• comply with legal obligations and protect the rights, safety, and security of OutfitMuse, our users, and others.

We do not use your photos, prompts, profile or body information, or generated images to train or improve our or a third party's AI models. We do not use personal information for targeted advertising.

3. AI Feature Processing and Your Choices

When you request an AI-powered feature, OutfitMuse sends the photos or image links you choose, which may include your face, and the instructions and relevant preferences needed for the request, through Vercel AI Gateway to OpenAI for analysis, generation or editing as needed. Before this personal information is sent, we explain the processing and ask for your explicit permission in the app. If you decline, we do not send that AI request and the relevant feature cannot proceed. Agreeing to general service terms or buying a membership does not replace this permission. Further details are in our Third-Party Services List.

You may stop using an AI-powered feature at any time. The relevant feature cannot operate without the necessary inputs. You can delete uploaded content, generated content, or your account as described in the Account Deletion Instructions.

4. When We Disclose Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We disclose information only in these limited circumstances:

• Service providers. We use providers that process information on our behalf for cloud hosting, storage, content delivery, authentication, email delivery, AI processing, crash reporting, and customer support. They may use the information only to provide services to us, subject to contractual and technical safeguards.
• App stores and billing. We exchange the identifiers and transaction information needed to verify purchases and administer paid benefits with the store used for your purchase. Apple and Google also process certain account, payment and fraud-prevention information independently under their own policies; not every store activity is performed solely on our instructions.
• AI providers. When you request an AI feature, the necessary images, prompts, and related request parameters are disclosed to the AI providers described in our Subprocessor List.
• Legal and safety reasons. We may disclose information when we reasonably believe it is necessary to comply with law, enforce our agreements, protect rights or safety, investigate fraud or security incidents, or respond to valid legal process.
• Corporate transactions. If we are involved in a merger, financing, reorganization, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or notice where required by law.

We do not make your wardrobe, profile photos, body photos, or generated images public by default.

5. International Processing and Data Location

Our overseas production environment is hosted primarily in the United States using Amazon Web Services. This includes application infrastructure and storage for overseas account and content data.

Our providers may process information in the United States or other locations necessary to provide their services. When information is transferred across borders, we use appropriate contractual, organizational, and technical safeguards required by applicable law. We will update this Policy before changing the primary data region or materially changing the categories of recipients.

6. Retention and Deletion

We retain personal information only for as long as needed for the purposes in this Policy:

• Account information, wardrobe content, profile information, preferences, and saved generated results are retained while your account remains active, unless you delete them earlier.
• Temporary copies used to complete an AI request are deleted from our active systems within 30 days after completion, unless they are saved as content in your account or must be retained for security, legal, or dispute-resolution reasons.
• Security, diagnostic, and operational logs are generally retained for up to 90 days, unless a longer period is necessary to investigate an incident or comply with law.
• When you confirm account deletion in the app, we immediately close your account, stop providing services to that account, and directly delete the associated account information and personal content. You can no longer sign in with the deleted account.

If specific records must be retained by law or are temporarily needed for security audits or dispute resolution, we retain only the minimum necessary information for the shortest necessary period, restrict processing to the permitted purpose, and directly delete it when that requirement ends. Where technical limitations temporarily prevent deletion from backups, we securely isolate those copies and limit processing to storage and necessary security protection until they can be directly deleted as soon as technically possible. These exceptions do not permit continued use of your photos or account content for other purposes, and we do not retain them as anonymized data instead of deleting them.

Purchase, subscription, entitlement and related support records may be retained after account deletion where and for as long as necessary for legal or accounting obligations, refunds, disputes or fraud prevention. Access is restricted and retention is limited to the relevant purpose. Account deletion does not itself cancel a subscription held with Apple or Google; cancellation is explained in our Membership and Auto-Renewal Terms.

The retention and deletion rules above describe OutfitMuse's systems, not an unconditional promise of immediate deletion of every third-party copy. AI-service security or abuse-monitoring records and legally required retention are described separately in the Third-Party Services List.

For deletion steps and the limited exceptions to deletion, see our Account Deletion Instructions.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit, role-based access, and security logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we identify a security incident that requires notice under applicable law, we will provide notice as required.

8. Your Privacy Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information. You may also withdraw optional camera or photo-library permissions in your device settings. You can update or delete many items directly in the app, including saved photos, preferences, and your account.

To make a request that is not available in the app, email support@echojoy.cn with the subject line "Privacy Request." Please include the email address associated with your account and the request type. We may verify your identity before responding. We will not discriminate against you for exercising a privacy right.

9. California Privacy Notice

This section applies to California residents. In the preceding 12 months, we may have collected the following categories of personal information: identifiers (such as email address, account ID, IP address, and device identifiers); customer-record information you provide; commercial information such as purchase history, subscription status and entitlement records; internet or network activity; approximate city-level location inferred from IP and manually selected city information; user content (including photos, prompts, and generated images); and profile information, including body-profile information that you choose to provide.

We collect these categories directly from you, automatically from your device and use of the Services, and from sign-in providers when you choose Apple or Google sign-in, and from the store used for a purchase to verify transactions and administer benefits. We use and disclose them for the purposes described in Sections 2 and 4.

We do not sell personal information or share personal information for cross-context behavioral advertising, as those terms are defined by California law. We do not use or disclose sensitive personal information for purposes other than providing and securing the Services and the other permitted purposes described in this Policy. California residents may submit access, correction, deletion, or portability requests through the contact method in Section 8. Authorized agents may submit requests where permitted by law, subject to verification of their authority and your identity.

10. Children

OutfitMuse is not directed to children under 13, and you must be at least 13 years old to use the Services. If you are under the age of majority where you live, you may use the Services only with permission from your parent or legal guardian. We do not knowingly collect personal information from children under 13. If we learn that we collected such information without appropriate authorization, we will delete it.

11. Changes to This Policy

We may update this Policy when our practices, Services, or legal requirements change. For material changes, we will provide notice through the Services or by another appropriate method and, where required, obtain your consent before the change takes effect. The "Document version" date identifies this revision. Any effective date and required notice will be communicated when an update takes effect.

12. Contact Us

Chengdu Xinling Qiyue Network Technology Co., Ltd.
Privacy requests and questions: support@echojoy.cn

If you contact us about a privacy request, please do not send photos, identity documents, or other sensitive information unless we specifically ask for it through a secure channel.