Privacy policy
Your photos, your rules.
Last updated: 6 November 2026.
Who we are
wearfits.me is operated by WEARFITS sp. z o.o., NIP 6762571106, KRS 0000803803, ul. Wadowicka 7, 30-347 Kraków, Polska. WEARFITS sp. z o.o. is the controller of your personal data. For privacy questions or requests, write to us at this registered address.
What we collect
- Your face selfie. We use it only to create your digital model and try-on images, with your explicit consent. We do not use your photos to identify or authenticate you.
- Your full-body photo (optional). You can add one on top of your height and weight to make your digital model more accurate. We use it only to build your digital model’s body, under the same consent as your selfie.
- Body details you give us: height, weight and body type (female / male). We use your height and weight to build your digital model’s body, together with your full-body photo if you add one. Records created earlier may also hold a usual size.
- Product links and photos you paste or upload, and the product details we read from those pages.
- Generated images: your digital model and your try-on results.
- Essential browser identifiers keep your anonymous session and digital model available without an account. A separate signed identifier, stored in the __Host-wf-browser cookie for one year and backed up as wf.browser in local storage, helps enforce the free allowance across sign-in and sign-out. Free usage is recorded on our servers and linked with your account when you sign in. We also use protected hashes of your network address (one IPv4 address or an IPv6 /64 prefix) to limit free generations. Monthly usage records and allowance links become eligible for removal after the month ends, in bounded hourly batches; a backlog can delay removal. Browser history flags become eligible for removal after about a year of inactivity. Deleting an account removes its account references from these records while preserving the monthly abuse-prevention counts. These identifiers do not give access to an account and are not used for advertising.
- Your email — only if you choose to save your account with email. If you are signed in, we can also send you a service email when a try-on finishes; you can turn this off in Account.
- Payment status from Stripe if you buy a plan or pack. We never see your full card number. When you start a checkout, we send Stripe your language as checkout metadata (mail_lang: English or Polish, from the saas_locale cookie or your browser’s Accept-Language header), and use it for your purchase email if your account has no stored language.
This marketing site does not use analytics or advertising cookies. If you select a language, it saves your preference in the saas_locale cookie for one year and in local storage so that the site and app can remember your choice. The site and app also save the displayed currency (PLN, USD or EUR) in the wf_currency cookie for one year when you change the currency selector, follow a link from this site’s pricing section into the app, or start a purchase in the app. This preference keeps the shown prices and checkout currency consistent; simply viewing a page does not set it. If you are signed in or sign in, we also store a language on your account: the one you select or, if you have not selected one when you sign in, the language your browser reports through that cookie or its Accept-Language header (only English or Polish; otherwise none is stored). We use it to choose the language of our emails, and the app shows it to you when you are signed in. If you have already used the app, it keeps a small account-state snapshot in local storage: whether you are signed in, your remaining try-ons, your digital model’s status and when it was saved, with no ids or email. This marketing site reads that snapshot and refreshes it from our API, using your session cookie, only for those visitors. If that cookie is gone, our API starts a new anonymous session. The snapshot is used to show the right button and your remaining try-ons; first-time visitors make no such call. Cloudflare Web Analytics is cookieless and counts visits without identifying you. The other cookies described here belong to the app. If you add a product photo on this site, it stays only in your browser until you reach the app. It is removed once the app reads it, or on a later visit once it is over an hour old, and it reaches our servers only if you save it in the app.
The Save to Wearfits Chrome extension reads a shop page only when you click it. If you choose Save and the shop blocks the original photo download, the extension can capture the visible tab and crop the selected photo on your device; the full screenshot is never stored or sent. The selected photo is kept in a temporary browser buffer with access expiring 30 minutes after it is saved in the extension. Expired records are removed by activity-based cleanup and may remain in browser storage until cleanup runs; an open wearfits.me tab can retain its decoded preview until closed or reloaded. The photo, its name and the shop link reach our servers only when you confirm saving on wearfits.me. Once saved, they are stored like any other product upload, and you can delete them under Saved.
Why we use it
To create your digital model and to generate try-on images of you wearing the products you choose — and to run your account, try-on allowance and payments. Your face selfie (and full-body photo, if you add one) is used for nothing else. wearfits.me does not use your photos to train AI models.
We do not sell your data. We do not share your photos or try-ons with shops. Product links open the shop directly; the shop receives no information about you from us.
Services we use
| Service | What for |
|---|---|
| Cloudflare | Hosting, database, EU photo storage (R2), bot protection, analytics and technical logs |
| WEARFITS GenAI API | Our service for digital model and try-on generation |
| Google Gemini via OpenRouter | Image generation — may be processed outside the EU |
| fal.ai and Modal | Body and pose processing |
| Stripe | Payments |
| Mailgun / Sinch | Sending sign-in links, receipts and account emails |
| TypeSafe (Jev) | Category recognition from selected product photos and the available product name; digital-model selfie inputs are not sent for this purpose. |
WEARFITS sp. z o.o. has accepted the applicable data processing agreements with its external service providers. EU storage does not mean that all processing takes place in the EU. You can request information about these arrangements by post at our registered address.
How long we keep it
Your selfie and optional full-body photo are unlinked when your digital model is ready or the attempt fails. Inputs also become eligible for hourly cleanup after 24 hours if you leave the app. Media deletion is queued and retried; backlogs or storage failures can delay removal. If the provider returns no separate model image, a copy of your selfie remains as your digital model photo.
Retaking your digital model replaces the previous one and queues its selfie, full-body and digital model media for deletion; product uploads and existing try-on results stay. Your digital model, product uploads and try-on results are stored in the EU (Cloudflare R2). “Delete my photos, digital model and all looks” or account deletion removes your app records and queues their stored media for deletion. External image-generation providers do not retain your photos. Our WEARFITS GenAI API caches generated models with 30-day validity. Deleting app data does not clear this cache; physical cleanup may occur later.
Your anonymous optional analytics and marketing choice becomes eligible for hourly cleanup 400 days after its last update; cleanup backlogs can delay removal. When our anonymous-choice capacity is reached, the oldest anonymous choice is forgotten earlier. Account choices are excluded from this cleanup. Without a saved choice, both optional purposes are denied and the app asks you again. These rules concern optional cookie choices, separately from consent to processing your photos.
Your rights
- Access and export — see everything in your gallery; signed-in users can export their data from Account.
- Deletion — “Delete my photos, digital model and all looks” in Account removes your app records and queues their stored media for deletion.
- Withdraw consent — at any time, by deleting your digital model. Withdrawal doesn’t affect processing done before.
- Rectification, restriction, objection and the right to complain to your data protection authority.
18+ only
wearfits.me is for adults. Only upload a photo of yourself, and only if you are 18 or older.
Contact
For privacy questions or requests, write to WEARFITS sp. z o.o., ul. Wadowicka 7, 30-347 Kraków, Polska.