Privacy Policy
Version 0.6 · Fitm SpA · Español
Fitm is an app for keeping your clothes as a collection: you mark the items you own and the ones you want, you log what you wear each day, and you see other people's collections. Here we explain what data of yours we use, what for, who we share it with, and how you can control it.
This policy follows Chilean data protection law (Law 19.628, as amended by Law 21.719).
This policy was written in Spanish and is also available in English. If the two versions differ, the Spanish version prevails, because Fitm SpA is a Chilean company and this policy is written under Chilean law. The English version is a faithful translation, provided so that you can read it in your own language.
1. Who is responsible
The controller of your data is Fitm SpA, Chilean tax ID 78.515.924-1, with its address at Av. Providencia 1208, office 207, Providencia, Región Metropolitana, Chile.
For any question about your data, or to exercise your rights, write to us at soporte@fitm.app.
2. What data we use
What you give us when you create your account
- Your email and your password. The password is stored encrypted: nobody at Fitm can see it.
- Your @username.
What you add to your profile
- Your profile photo and your bio, if you decide to add them.
- Whether your account is private or not.
Your collection and your day to day
- The items you mark as "I own it" or "I want it", when you marked them, and which ones you highlight on your profile.
- "Your item": the size, when you got it, and what you paid. Only you can see this.
- Your sizes, and the styles and brands you choose. Only you can see these.
- The brand drops you ask us to notify you about ("Notify me"), so we can tell you on the day they come out.
- Your journal: each day's fit (the items, the photo if you upload one, where you tag each item in the photo, and the note), and whether you mark it as "Only for me".
- Your fits: the combinations you save, with their names.
The try-on (Fitm+)
- Your models: the name, whether it is a woman or a man, the height, build and skin tone of the people or mannequins you choose to try your fits on. They don't have to be you. Only you can see them.
- When you use the try-on, the catalog photos of the items in the fit and what the model you choose looks like are sent to our artificial intelligence provider so it can generate the image. A photo of you, or of any person, is never used.
- The image is not stored, unless you save it to your fit. We always mark it as a generated image.
- How many try-ons you make, to count how many you have left this month.
What you contribute to the catalog
- The items you create (brand, model, type, color, year and link), and the fact that you added them.
- The photos you send of your items (front, back and label). Before uploading them, the app strips the hidden data the phone stores, such as the location. If they are approved, the front and back photos have their surroundings changed (background, shadow and framing) to bring them up to the catalog standard; the item itself is not touched, and the original is kept as well.
- The photo of your item, if you add one in "Your item": yours, which shows on your profile instead of the catalog one. Its hidden data, such as the location, is stripped too, and it is not retouched.
- The error reports you send about an item.
- The photos you take to recognize an item in Add (the item and its label): they are sent to our providers to read what they say (brand, model, size) and, if the item is not in the catalog, to search for it online. We do not store them anywhere.
If you run a brand's account
- The brand's name, its website and its Instagram, and the code you send us by direct message to verify it.
- What the brand says about itself (logo, where it is from, its text) and its catalog with its photos, which are shown on its page.
- Who carries out the review and when, and who is on its team (each account's email, which only the team sees).
- Its drops, and how many people asked to be notified about each one.
- The statistics a brand sees are always totals and never say who: how many of its items are in collections and wishlists, how many people own or want them, in which colors, which sizes they have (added up from "Your item"), how many people follow its page, and how many visits its page and website get and from which countries. Any figure that comes from fewer than 5 people is shown as "fewer than 5", so nobody can work out who it is. All accounts count, including private ones: a total like this reveals nothing about anyone.
Fitmarket
- Your listings: the item, the photos, the price, the size, the condition, the description and the area or city where you hand it over, with its country and the central point of that area or city on the map (never where you are). You choose it, or it comes from your phone's location if you allow it. The photos also have their hidden data, such as location, removed.
- Which items in your collection you mark with "I'd sell it", which says you would sell it, with no price or listing.
- Your messages with other people about a listing or an item marked "I'd sell it", so that both of you can read them.
- The questions you ask on a listing and, if you sell, your answers.
- The ratings you give to whoever sold to you (stars and, if you want, a comment) and the ones you receive from whoever bought from you.
- If a moderator hides a listing of yours for being a counterfeit, we record it: the second time, you lose access to Fitmarket.
- That you confirmed you are 18 or older the first time you entered.
- Your phone's location, only if you allow it: when you enter Fitmarket and when you tap "Use my location", to find the nearest area or city and sort listings by distance. The location is not stored: only the area or city, on your phone and, if you post, in the listing. You can remove the permission at any time in your phone's settings.
- If you turn on "Let people who want it know", we notify the people with Fitm+ who have that item in "I want it". You do not see who they are.
If you ask to be verified (Fitmarket)
- A photo of the front of your ID card, another of the back and a selfie, taken with the camera at that moment. Only moderators see them, through temporary links. A person compares them by eye: we do not use facial recognition or any automated system.
- The photos are deleted as soon as your request is reviewed, whether it is approved or not.
- If it is approved, the moderator types your RUN (Chilean ID number) and we only keep a fingerprint of it (a code calculated from the number), not the number, so that nobody can verify two accounts with the same ID card. We also keep when you asked, when it was reviewed and who reviewed it.
- To grant it, we also look at your Fitmarket history: how many ratings you have, your average score, confirmed reports against you and how long you have been on Fitm.
Your relationship with other people
- Who you follow, who follows you, and pending requests.
- Who you block.
- The reports you make (of accounts, fits, listings or conversations), with their reason and any detail you write.
Technical data
- Failed sign-in attempts with your @username, to stop anyone trying to guess your password.
- When you last looked at your news.
- When you open a brand's page or its website from Fitm, we record a visit with the country of your phone's region (never your location) and the time. We don't record who made it.
- Whether you have premium, and from when until when.
- The technical logs our server provider generates each time the app connects (for example, the IP address, the device type and the time).
- If you turn on notifications: the identifier your phone provides to receive them (a code, not your number), the app language and which notifications you want (Settings → Notifications).
- Your session is stored on your phone, so we do not ask for your password every time, along with whether you prefer light or dark mode.
What we do not use
- We do not use your contacts or your microphone. Location, only in Fitmarket and with your permission, as explained above.
- The app only uses the camera and your photos when you choose to take or pick a photo.
- There is no advertising, and no third-party tracking or analytics tools.
- If you tap the link to an item's official page, you leave Fitm. Some of those links may be affiliate links, and we will tell you so on the item page: we do not send that shop any data about you, only a code saying you arrived from Fitm. What happens from there, including its cookies, is between you and that shop, under its own privacy policy.
- We do not ask you for sensitive data (health, religion, political views, ethnic origin, sex life, and so on). We ask you not to write any in your bio, your notes or your reports.
3. What we use it for, and on what legal basis
| What for | Legal basis (Law 19.628, as amended by Law 21.719) |
|---|---|
| Creating and maintaining your account, and letting you sign in | Performance of the contract: the Terms you accept (art. 13 c) |
| Storing your collection, your journal, your fits and your profile, and showing them to whoever should see them according to your privacy settings | Performance of the contract (art. 13 c) |
| Maintaining the shared catalog with the items and photos people contribute | Performance of the contract, and legitimate interest in maintaining a catalog that is useful to everyone (art. 13 c and d) |
| Showing a brand its statistics, always as totals and without figures from fewer than 5 people | Legitimate interest in letting brands understand how their clothes are used on Fitm, without anyone being identifiable (art. 13 d) |
| Suggesting items to you in "For you" | Legitimate interest in making the app useful (art. 13 d) |
| Recognizing an item from a photo when you ask for it | Performance of the contract (art. 13 c) |
| Generating try-on images when you ask for them | Performance of the contract (art. 13 c) |
| Publishing your listings on Fitmarket and delivering your messages to the other person | Performance of the contract (art. 13 c) |
| Sending notifications to your phone (messages, questions, followers and anything else you choose) | Your consent, which you give with the phone's permission (art. 12). They are turned off in Settings → Notifications or in your phone's settings |
| Finding your area or city with your phone's location, in Fitmarket | Your consent, which you give with the phone's permission (art. 12). It is withdrawn in your phone's settings |
| Checking your identity when you ask to be verified | Your consent, which you give when you ask (art. 12). You can withdraw it by writing to us or deleting your account |
| Sending you the emails you need, such as the codes to create your account or recover your password | Performance of the contract (art. 13 c) |
| Moderating: reviewing reports, flags and photos, and protecting people from abuse | Legitimate interest in the security of the service and in enforcing the Terms (art. 13 c and d) |
| Protecting your account, for example by stopping attempts to guess your password | Legitimate interest in security (art. 13 d) |
| Complying with the law and defending ourselves against claims | Legal obligation and defense of rights (art. 13 b and e) |
When you create your account you tick a box accepting the Terms and this Policy. That box is your consent: the law requires it to be freely given, informed and specific, and to be given by a statement or a clear affirmative act, which is why you have to tick it on purpose and it never comes ticked in advance.
You can withdraw your consent whenever you like and without giving reasons, by deleting your account from Settings → Delete account, or by writing to us. Withdrawing it does not affect what we did earlier with your permission. For the uses that do not depend on your consent but on performing the contract or on a legitimate interest, see the table above.
About the suggestions. To suggest items to you, the app takes into account the brands and item types in your collection, and the styles and brands you chose. It does not make decisions that affect you legally or significantly: it only orders which items to show you. You can change your styles and brands whenever you like from the profile menu.
We do not sell your data and we do not use it for advertising.
4. Who can see what
- Only you: "Your item", your sizes, your styles and brands, your try-on models, your blocks, your reports and flags, and the journal days marked "Only for me".
- People on Fitm, if your account is public: your @username, bio and profile photo, your collection and the photos of your items, your highlights, your fits (with the try-on image, if you saved one), your journal, who you follow and who follows you.
- Only the people you accept, if your account is private: your collection and the photos of your items, your fits and your journal. Your @username, your bio and your profile photo are still visible, so that people can find you and ask to follow you.
- Everyone on Fitm, in Fitmarket: your listings while they are live, with your @username, even if your account is private, because a listing is published for anyone to see. Your collection stays private.
- Everyone on Fitm, on a brand page, if your account is public: the photos you took of your items from that brand and the photos of the diary days when you wore one, with your @username. Never the days marked “Only me”, and never if your account is private. You can turn this off in Settings → “Your photos on brand pages”.
- Only people who joined Fitmarket and can see your collection: which items you marked "I'd sell it". With a private account, that means the people you accepted; anyone who has not joined Fitmarket does not see it.
- Everyone on Fitm, on a listing: answered questions, with the @username of whoever asked. An unanswered question is only seen by whoever asked it and the seller.
- Everyone on Fitm: the ratings you receive as a seller and the ones you give, with the @username of whoever gives them, except between people who block each other.
- Everyone on Fitm: if you are verified, the circle next to your @username. Nothing from your ID card is shown.
- Only you and the other person: the messages in a conversation. Moderators only read a conversation if one of you reports it, and only that one.
- Anyone with the link can open your profile photo.
- People on Fitm, if you have Fitm+: a mark next to your @username that shows it. Nobody sees since when you have it or how you pay for it.
- People you block, or who block you, do not see your items, fits or days, and you do not see theirs.
- Everyone, in the catalog: the items you create once approved, with "Added by @your_username", and the front and back photos you send of an item, if they are approved, normally in their retouched version, without the surroundings. The label photo is only used to review the submission: only you and the moderators see it.
- Anyone, even without an account, on the fitm.app website: the catalog of approved items, with their front and back photos, and how many people have it and want it. The website never shows who has it, wants it or added it, and private accounts are not counted in those numbers. Also the published Fitmarket listings: their photos, the price, the size, the item and the area or city. The website never shows who is selling: for that you need to sign in to the app.
- Anyone, even without an account, on your profile on the website (fitm.app/your_username), if your account is public: your photo, your @username, your bio, how many people follow you and how many you follow, your highlights, your collection, your "Likes" if you let them be seen, your fits and the days of your journal with their photos (never the ones marked "Only for me"). If your account is private, only your photo, your @username, your bio and those numbers. Profiles do not appear in search engines such as Google.
- Anyone, even without an account, on each brand's page on the website, with "In the community": the same photos as in the app, but without your @username. Brand pages do appear in search engines, though without them keeping those photos. It is turned off the same way, in Settings → "Your photos on brand pages".
- Fitm's moderators see what they need in order to moderate: pending items, submitted photos, reports, flags and, while they review it, your verification request. They never see your days marked "Only for me".
- We do not tell the person you report that it was you, and we do not notify the person you block.
5. Who we share your data with
Only the providers we need in order for Fitm to work. They process your data following our instructions, under a contract that requires them to protect it at least as well as we do:
- Supabase, Inc. (United States): database, accounts, photo storage and server functions. The servers are in the United States. If you use your location in Fitmarket, it receives the point briefly to find the nearest city, and does not store it.
- Cloudflare, Inc. (United States): retouches the front and back photos that get approved (cutting out the item and giving it the catalog background) and reads the photos you take to recognize an item, using an artificial intelligence model that runs on its servers. It also carries your try-on requests to the try-on provider. It receives each photo for that purpose only; it does not store it.
- Google LLC (United States): reads the photos you take to recognize an item (Cloud Vision: the brand from the logo and the text on the label) and generates the try-on images (Gemini), from the catalog photos and the model you choose. We ask it not to store try-on requests, and on its paid services Google does not use that data to improve its products.
- SerpApi, LLC (United States): when an item is not in the catalog, it searches Google Lens for the photo you took to recognize it. It deletes the photo after 10 minutes. With Fitm+, it also searches Google for which stores in your country sell an item ("Where to buy it"): we only send it the brand, the item's name and the country, which comes from your phone's region and not from your location. None of that includes your data.
- Resend, Inc. (United States): sends the emails with the codes to sign in or create your account. It receives your email address and the code, nothing else.
- Functional Software, Inc. (Sentry) (United States): receives a report when the app crashes (which screen, which error and the phone model) so we can fix it. Only your account's internal identifier is sent: not your email, your @username, your IP or your photos.
- 650 Industries, Inc. (Expo) (United States): delivers notifications to your phone through Apple (on Android, through Google). It receives the phone identifier and the notification (for example, "@username:" and the start of the message), only to deliver it.
- Apple: distributes the app, delivers notifications to the iPhone and, if there are ever paid features, handles the billing. Fitm never sees your card details.
We may also hand data over to the authorities when the law requires it.
6. Transferring data outside Chile
Because our providers store data in the United States, your data leaves Chile. To protect it, we use contracts with adequate safeguards: each provider's data processing agreement, with standard contractual clauses, as the law allows.
7. How long we keep it
- While you have your account, we keep your data in order to provide the service. Anything you delete in the app (a photo, a journal day, a fit, an item from your collection) is deleted at that moment.
- When you delete your account (Settings → Delete account), the following is deleted immediately: your profile, your profile photo, your collection and "Your item" with its photo, your sizes, styles and brands, your journal and its photos, your fits and the try-on images you saved to them, your models, your Fitmarket listings and their photos, your messages, questions and ratings, your verification (photos and RUN fingerprint), your followers and following, your drop notifications, the phones registered to receive notifications, your blocks, your reports and flags, and the photos you sent that were not approved.
- When a brand deletes its account, its account, its studio photos and its logo are deleted. If nobody else on its team remains on Fitm, its page is no longer verified, loses what the brand said about itself and its drops, and goes back to being the page the community builds. Its items stay in the catalog, because people have them in their collections.
- The only thing that stays is what already forms part of everyone's catalog: the items you created and the photos that appear in the catalog for an item (front and back). They stay without your name.
- Fitmarket: a listing you withdraw or mark as sold stops being shown immediately. Your messages are kept while the conversation exists, and if one is reported, we keep it until we have finished reviewing it.
- Technical logs: our provider keeps them for a few days and then they are deleted automatically.
- Backups: if any exist, they are replaced within a maximum of 7 days.
- Notifications: the phone identifier is deleted when you sign out on that phone and when you delete your account.
- Failed sign-in attempts: they are deleted when you sign in successfully, and when you delete your account.
- Verification: the photos of your ID card and the selfie are deleted when the request is reviewed. The RUN fingerprint is kept for as long as you have your account.
8. Your rights
You can ask us at any time, free of charge:
- Access: to know what data of yours we hold and how we use it.
- Rectification: to correct wrong or incomplete data. You can change most of it yourself in the app.
- Erasure: to delete your data. You can do it yourself by deleting your account, or ask us to.
- Objection: to object to us using your data for something specific, such as the suggestions.
- Portability: to receive your data in a structured format that can be used in another service. You can download it yourself at any time in the app, under Settings → Export your data: a file with your account, your collection, your fits, your diary, your listings, your messages and your photos.
- Blocking: to ask us to stop using your data for a period while we resolve a request.
To exercise them, write to us at soporte@fitm.app from your account's email, saying what you need. We will acknowledge receipt and reply within a maximum of 30 calendar days, which we may extend only once by a further 30 if necessary, explaining why.
If we do not reply, or you do not agree with our reply, you can complain to Chile's Personal Data Protection Agency.
9. How we protect your data
- All connections are encrypted.
- Passwords are stored encrypted.
- The database has per-person rules: each account can only read and change what belongs to it, and what is private is protected by the server, not only by the app.
- Private photos are opened through temporary links.
- We strip the location and the other hidden data from photos before uploading them.
- We throttle repeated attempts to guess passwords.
If there were a leak or improper access to your data, we will notify the Personal Data Protection Agency as the law requires. If the risk to you were high, we will notify you as well.
10. Children
To use Fitm you must be at least 14 years old. Chilean law requires parental consent to use the data of children under 14, and Fitm is not designed for them. If we learn that an account belongs to someone under 14, we will delete it. If you are a parent or guardian and believe your child under 14 has an account, write to us.
11. Changes to this policy
If we change this policy, we will update the date and version above. If the change is significant, we will tell you in the app before it takes effect.
12. Contact
Fitm SpA Email: soporte@fitm.app