Privacy Policy

This privacy policy applies to the Mix & Match app for mobile devices, together with any related services operated by Phạm Tiến Thắng (collectively, the "Application"). Phạm Tiến Thắng is hereby referred to as the "Service Provider".


Information Collection and Use

The Application collects information when you download and use it. This information may include information such as


Cookies and tracking technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.


Location Information

The Application collects your device's location to provide location-based features, improve the Application, and support related services.


Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at meocungptt@gmail.com.


Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at meocungptt@gmail.com.


AI Virtual Try-On and Sharing with FASHN AI

The Application uses FASHN LTD ("FASHN AI"), a third-party AI service provider, to create virtual try-on results.

When you select or create a model image and a garment or outfit image, and then affirmatively continue with the create-image action, the Application processes and transmits the following data:

Images stored locally on your device are transmitted as encoded image data. An image that is already available from an online source may be transmitted as an image URL. The request is first sent over an encrypted connection to the Service Provider's backend hosted using Google Firebase services and is then relayed to FASHN AI. Firebase authentication information is used by the Service Provider's backend to authenticate and protect the request. The request body relayed to FASHN AI does not include your email address or Firebase user ID.

FASHN AI processes the images, prompts, instructions, and processing parameters only to analyze the submitted media, generate the requested virtual try-on result, and return that result to the Application. A face or physical appearance visible in an image is processed for the requested image-generation feature, not to verify or establish a person's identity.

This data is sent to FASHN AI only after the Application displays a notice identifying the data and recipient and you affirmatively continue creating the image. You can decline by dismissing the selection sheet or otherwise not continuing with image creation. Permission is requested for each new generation request.

FASHN AI processes Customer Personal Data under its Data Processing Addendum. Under those terms, FASHN AI processes Customer Personal Data only to provide, secure, maintain, and support the requested service and does not use Customer Content to train or fine-tune AI models, sell it, use it for cross-context behavioral advertising, or create advertising profiles.

Under FASHN AI's current API data retention documentation, full base64 image data is used to process and deliver the request but is represented by a placeholder in stored request history and prediction metadata. Submitted image URLs, request parameters, status, error information, and output references may remain in request history for monitoring and debugging. Standard generated outputs delivered through FASHN AI's CDN are scheduled for deletion after three days. The Application downloads the generated result to app-controlled storage on your device so it can display and manage the result locally.

FASHN AI may use authorized sub-processors for relevant service paths, as described in its current Subprocessor List. FASHN AI contractually requires its sub-processors to provide substantially the same data protection for the relevant processing. The Service Provider requires FASHN AI and other service providers that receive personal data from the Application to provide the same or equivalent protection described in this Privacy Policy and required by the applicable App Store privacy rules.


The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.


For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to Email, userId, gender. The information the Service Provider requests will be retained and used as described in this privacy policy.


Third Party Access

The Application transmits personal data and User Provided Data to service providers only as needed for the purposes described in this Privacy Policy. This includes Google Firebase services used for authentication, backend request processing, security, analytics, and crash reporting, and FASHN AI used to process virtual try-on images. Aggregated or anonymized data may also be transmitted to help the Service Provider operate and improve the Application.


International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.


Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:


The Service Provider may disclose User Provided and Automatically Collected Information:


Opt-Out Rights

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at meocungptt@gmail.com.


Data Retention Policy

The Service Provider retains personal data based on its necessity for the stated purposes:

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at meocungptt@gmail.com. Please note that some User Provided Data may be required for the Application to function properly.


Data Deletion

You can request deletion of your personal data or account by contacting the Service Provider at meocungptt@gmail.com. The Service Provider will process your request within the timeframes required by applicable law.

Upon verification of your identity, the Service Provider will delete your personal data from its systems, except where retention is required for legal compliance or legitimate business purposes. Where applicable, the Service Provider will also send an authenticated deletion instruction to FASHN AI under its Data Processing Addendum and require relevant service providers to delete the data they process on the Service Provider's behalf, subject to legal requirements and access-restricted backup cycles.


Children

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.


Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (meocungptt@gmail.com) so that they will be able to take the necessary actions.


Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.


Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.


Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.


Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at meocungptt@gmail.com.


This privacy policy is effective as of 2026-08-26


Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. For AI virtual try-on, the Application asks for permission immediately before each transmission to FASHN AI. You can decline or withdraw permission for future requests by dismissing the selection sheet or not continuing with image creation. Withdrawing consent does not affect processing already completed. To request deletion of data already transmitted, contact the Service Provider at meocungptt@gmail.com.


Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at meocungptt@gmail.com.