Privacy Policy

Fashion Labs ("we," "our," or "us") respects your privacy. This policy explains how we handle information when you use our application and browser extension.

1. Information We Collect

Malva collects the information needed to provide account access, digital-twin creation, virtual try-ons, size and style suggestions, subscriptions, and credit-pack purchases:

• Account information and authentication — your email address and, where provided, your name are used to create and secure your account and give you access to your digital twin and history across sessions and devices. We process authentication credentials, including passwords and OAuth/provider tokens where applicable, plus session tokens needed to keep you signed in. Passwords are stored only as secure one-way hashes; we do not store them in plain text.
• Anonymous session identifier — a randomly generated ID stored locally on your device (via browser storage or the extension's chrome.storage.local) to maintain your session.
• Photos you provide — face and body photos submitted to create or update your digital twin, plus optional complementary styling photos. These photos are used to generate AI try-on previews and related digital-twin features. You must have permission to provide each image. Photos are transmitted to our backend over HTTPS and may be stored with your account so your twin and history survive reinstall or a change of device.
• Gender or profile selection — the gender/profile option you choose when creating a digital twin is used only to select appropriate body measurements, poses, grooming details, and outfit-generation instructions. It is not used to identify you, infer your identity, or make decisions about you, and it is not linked to your name or email address.
• Optional body measurements — height, bust, waist, hips, and weight, if you choose to provide them, are used to generate size suggestions and improve your digital-twin visualization.
• Retailer product information — product images, names, prices, sizes, product URLs, and related information visible on supported retailer product pages. The extension reads supported retailer pages only to generate a try-on request; it does not collect general browsing history.
• Approximate location — our server may infer a coarse country or region from the request IP address, using ipapi.co, to tailor seasonal, climate-appropriate, or other style/"vibe" suggestions during try-on. Malva does not use the browser's precise Geolocation API, request GPS coordinates, or trigger a location permission prompt. This approximate location is not used to change subscription pricing.
• Try-on images — when you use the virtual try-on feature, the resulting images are uploaded to Bunny CDN and stored linked to your account ID. Each image is assigned a unique URL in our database.
• Try-on history — product images and retailer URLs from items you try on are stored in our database, linked to your account.
• Your digital twin — AI-synthesised images, your selected gender/profile option, and optional body measurements (height, bust, waist, hips, and weight), stored locally and, when linked to an account, in our database. The gender/profile option remains a feature-setting for your twin and is not linked to your name or email address.

Information listed above is sent to and stored by Malva's backend at malva.fit as needed to provide account access, process payments, generate try-on results and size/style suggestions, and store your digital twin and history.

2. Payment Processing

Paid subscriptions and credit-pack purchases are processed by Stripe. Your email and billing transaction details are shared with Stripe as needed to create a billing record and complete payment. Malva's servers do not store raw card numbers: payment details are entered into Stripe's secure payment form. Stripe's use of your data is governed by the Stripe Privacy Policy. Subscription pricing is fixed and displayed in U.S. dollars; we do not use your IP address or approximate location to change the price.

3. Consent & How We Use Data

Before a photo is uploaded to create a digital twin, Malva asks you to affirmatively accept the Terms of Service and this Privacy Policy. Account sign-up separately requires agreement to these policies. We use the information described above only to provide the features you request: account access, billing, digital-twin creation, virtual try-ons, size/style suggestions, and saved twin or try-on history. We do not sell this information, use it for advertising, or use it for purposes unrelated to those features.

4. Browser Extension — Data Transmission

The Fashion Labs browser extension runs on supported fashion retailer websites. When you click Try On on a product image, that product image, product name/URL, optional styling references, and your stored digital-twin data are sent to malva.fit over HTTPS for AI processing. The extension sends a request to our server, which uses the request IP address with ipapi.co to determine a coarse country/region for regional scene suggestions. The country/region is used only for scene selection and is not stored with your account. The extension does not request device-location permission or read GPS coordinates; if you use a suggested scene, the selected scene description is sent with the try-on request. No browsing activity outside the supported retailer sites is observed, collected, or transmitted.

5. Camera & Photo Library

We request access to your camera and photo library exclusively for the Digital Studio feature. We never access your camera or photos without your explicit action. Images are processed for generation only and are not sold, shared, or used for advertising.

6. Third-Party Services

• Stripe — subscription and credit-pack payment processing. Malva does not store raw card numbers.
• ipapi.co — receives the request IP address from our server to return a coarse country or region for seasonal and style/"vibe" suggestions. It is not used for pricing or precise location tracking.
• Bunny CDN — try-on images are stored on Bunny CDN's content delivery network. Each image is assigned a unique URL; that URL is stored in our database linked to your account ID.
• AI image generation — your photos are processed by our AI pipeline to produce virtual try-on imagery.
• Google Fonts — loads typography. Subject to Google's Privacy Policy.
• Brand partners — when you tap "Buy Now," you are redirected to the retailer's website. Their privacy policy applies from that point. Fashion Labs may receive a referral fee. This does not affect the price you pay.

7. Data Storage & Security

Account information, authentication records, linked digital-twin and history images, retailer product information used for try-ons, and related records are sent to and stored by our backend at malva.fit and, for image delivery, Bunny CDN. The extension also stores a random account/session identifier, consent record, digital-twin cache, and saved UI state in Chrome local storage. All data is transmitted over HTTPS. Passwords are one-way hashed and payment card details are handled by Stripe, not stored by us. We retain account-linked data while the account is active unless you request deletion; local caches may remain until you clear extension/site storage.

8. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not display advertising or use this data for advertising. We do not build behavioural profiles. Service providers such as Stripe, Bunny CDN, ipapi.co, and AI image-generation providers process information only as needed to provide the features described in this policy.

9. Data Deletion

To request deletion of your account and associated data — including your email, name, authentication records, digital twin, measurements, retailer-linked try-on history, Bunny CDN images, and local extension data — email privacy@fashionlabs.shop with the subject line Delete my account. We will process your request within 30 days. Stripe may retain billing and payment records as required for legal, accounting, fraud-prevention, or dispute purposes under Stripe's policy.

10. Children's Privacy

Fashion Labs is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us at the address below and we will delete it.

11. AI-Generated Content

This application uses artificial intelligence to generate images of your likeness wearing fashion items. Outputs may be inaccurate and are for personal, non-commercial visualisation only; they are not a guarantee of fit, size, colour, availability, safety, or purchase suitability.

12. Contact

For privacy questions or to request data deletion:
privacy@fashionlabs.shop