Privacy Policy
This Privacy Policy explains how Three Brain Apps LLC, doing business as Three Brain Apps (“we”, “us”), collects, uses and shares personal data when you use the Taifa mobile app (the “App”). We are the controller of this data.
Please also read our Terms of Use.
The short version
- Your account is anonymous: we do not ask for your name, email or phone number.
- We use your photos to detect clothing and generate your looks.
- We do not use them to train AI models.
- We do not use them in marketing.
- We do not sell them.
- We do not create face templates or use photos to identify anyone.
- Quiz answers such as body shape or skin tone may be used only to personalize your styling.
- Advertising and attribution partners get your device’s advertising identifier only if you allow tracking.
- You can delete your account and all stored photos and looks at any time in Settings → Delete Account.
1. Data we collect
1.1 Data you give us
- Photos. Photos and screenshots of clothing that you take or pick from your library. If you choose to add one, also a photo of yourself to style the look on. We only access the photos you select; the App does not read your whole library.
- Quiz answers. Collected during onboarding:
- how you heard about us;
- which wardrobe you shop (women’s or men’s);
- your age range;
- style preferences and goals;
- height, weight and body shape;
- hair colour, eye colour and skin tone;
- favourite colours;
- the demo model and images you pick.
- Optional style notes you type when generating a look.
- Messages to support. If you contact us through the App or our website, we receive your name (if provided), email address and message. Messages initiated from the App may also include the App and iOS version, and for look feedback, the look ID.
1.2 Data created when you use the App
- Your library. Detected clothing items (cut-outs of your photos and their labels), generated looks, and their status and timestamps.
- Account and device data.
- An anonymous account ID created by the App;
- device model, OS and App version, language, region and time zone;
- IP address;
- Apple’s identifier for vendors (IDFV);
- if you enable notifications, a push-notification token.
- Usage and performance data.
- Screens viewed, buttons tapped and features used;
- how long processing takes;
- errors from our servers;
- crash reports and diagnostics.
- Purchase data. Which plan you bought, trial status, renewal and cancellation events, and the App Store transaction ID. Payments are handled by Apple, and we never receive your card details.
- Advertising and attribution data.
- Whether you allowed tracking.
- If you did, your advertising identifier (IDFA).
- Which ad campaign led to your install.
- Apple Search Ads attribution.
- Events such as starting a trial or a subscription.
- If ads are shown, ad impressions and rewarded-ad completions.
- On-device data. The App keeps a few values on your device, such as whether you have used your free look. This value sits in the iOS Keychain, so it can survive reinstalling the App.
2. Photos, AI processing and biometrics
- What happens to a photo.
- Your photo is uploaded to our cloud storage.
- An AI model detects the clothing items in it.
- An AI image model generates a look from the selected items. If you added a photo of yourself, that photo is also used to generate the look.
- The results are stored so you can view, save and share them.
- AI providers. The models run on Google Cloud (Vertex AI). We may also use fal.ai as a backup image-generation provider. These providers process images only to return results to us, under contracts that prohibit using them to train their models. They may keep temporary copies only as needed to deliver the service and prevent abuse, as their terms allow.
- No training by us. We do not use your photos, the people in them, or your looks to train or fine-tune AI models.
- If we ever want to, we will ask for your separate, opt-in consent first.
- If you send us feedback about a look, we may review that look and its photos to investigate and fix the problem.
- No biometric identification. We do not extract face geometry, faceprints or other biometric identifiers or templates. We do not use photos to identify or verify anyone, and we do not sell, lease or trade photos.
- A photo of a person is passed to the image model only to render the look.
- The look is linked to your account, not to anyone’s identity.
- Other people. Upload photos of other people only if they are adults and have agreed. If someone asks us to remove a photo of them, we will do so.
- Sensitive answers. Your skin tone, hair and eye colour, height, weight and body shape are used only to tailor colour and fit suggestions and your style profile.
- We do not use them to infer your racial or ethnic origin, health or any other sensitive characteristic.
- We do not use them for advertising.
- We do not share them with advertising partners.
3. How we use data
- To provide the App.
- Detect clothing and generate looks.
- Keep your library.
- Personalise your style profile and suggestions.
- Manage your free look and your subscription, and restore purchases.
- To communicate with you.
- Answer support requests.
- If you enable them, send push notifications, for example when a look is ready or new features arrive. You can turn them off in iOS Settings.
- To keep the App working and improve it.
- Measure feature usage and onboarding completion.
- Find slow or failed processing.
- Fix crashes.
- Test new versions of screens.
- To measure and run marketing.
- Attribute installs and subscriptions to ad campaigns.
- Optimise our campaigns.
- Where you allowed tracking, build audiences for ads on other platforms.
- To show ads, where the App offers them, such as optional rewarded ads.
- For safety and legal reasons.
- Prevent abuse, fraud and prohibited content.
- Enforce our Terms.
- Comply with law, accounting and tax duties, and requests from authorities.
We do not make decisions with legal or similarly significant effects about you based solely on automated processing.
4. Legal bases (EEA, UK and Switzerland)
- Performance of a contract. Providing the App, processing photos and generating looks, storing your library, and managing subscriptions.
- Consent.
- Optional quiz answers, including those about your body and colouring (explicit consent where they may count as special-category data).
- Push notifications.
- Accessing your camera and photos.
- Tracking with your advertising identifier and personalised ads.
- Legitimate interests.
- Analytics with pseudonymous identifiers.
- Crash reporting.
- Security and abuse prevention.
- Install attribution without the advertising identifier.
- Improving the App.
- Legal obligation. Tax, accounting and responses to lawful requests.
5. Who we share data with
We share personal data only with the service providers below, acting on our instructions, and in the cases described after the table.
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Backend, database, file storage, anonymous sign-in | Account ID, photos, detected items, looks, quiz answers, subscription status, push token |
| Google Cloud (Vertex AI) | Clothing detection and look generation | Photos and detected items, style notes |
| fal.ai | Backup look generation | Photos and detected items, style notes |
| Apple | App Store payments, subscriptions, push notifications, Apple Search Ads attribution | Purchase data, push token, attribution token |
| RevenueCat | Subscription management and analytics | Account ID, purchase data, device data, attribution IDs |
| Amplitude | Product analytics | Account ID, device ID, usage and performance events, coarse location from IP |
| Google Firebase (Analytics, Crashlytics) | Analytics and crash reporting | App instance ID, usage events, crash logs, device data |
| AppsFlyer | Install and campaign attribution | Device data, IP, IDFA (only with your permission), install and subscription events |
| Meta (Facebook SDK) | Ad measurement and campaign optimisation | Device data, IDFA (only with your permission), app and purchase events |
| Google AdMob | Showing ads, where offered | Device data, IP, IDFA (only with your permission), ad interactions |
| Web3Forms | Website contact-form processing and email delivery | Name, email address, message, IP address and browser data |
We may also disclose data:
- if required by law or to protect rights, safety and property;
- to a buyer or successor in a merger, acquisition or sale of assets, under this Policy;
- with your consent.
We do not sell your photos, looks or quiz answers.
6. Tracking, ads and your choices
- App Tracking Transparency. The App asks before it lets anyone use your advertising identifier (IDFA) to track you across other companies’ apps and websites. If you decline, the IDFA is not accessible. Attribution partners may still measure installs in a privacy-preserving way, such as through Apple’s SKAdNetwork and Apple Search Ads attribution. You can change your choice any time in iOS Settings → Privacy & Security → Tracking.
- Personalised ads. If you declined tracking, any ads shown are non-personalised or contextual.
- Notifications. You can switch them off in iOS Settings → Notifications → Taifa.
- Camera and photos. You can change access in iOS Settings → Taifa.
- Analytics. To opt out of analytics, submit a request through our contact form. We will exclude your account from analytics where technically possible.
7. How long we keep data
| Data | Retention |
|---|---|
| Photos, detected items, looks, quiz answers, account data | As long as your account exists. When you delete your account, we erase your files and account records, normally immediately and in any case within 30 days. Copies in backups are overwritten in line with our backup cycle. |
| Looks you delete | Removed from your library at once and permanently erased when you delete your account. You can ask us to erase them sooner. |
| Images sent to AI providers | Processed transiently to return the result. Any temporary copies are deleted under the provider’s terms. |
| Analytics and attribution data | Kept in pseudonymous form for no longer than needed, up to 2 years, then deleted or aggregated. |
| Crash reports | Up to 90 days. |
| Support emails | Up to 3 years after the request is resolved. |
| Purchase records | As long as tax and accounting laws require. |
Deleting the App from your phone does not delete your account. Please delete your account in the App first, or contact us through our contact form.
8. Your rights
Depending on where you live, you may have the right to:
- access your personal data and get a copy of it;
- correct it;
- delete it;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw consent;
- not be subject to solely automated decisions.
The quickest way to delete everything is Settings → Delete Account in the App. For other requests, use our contact form:
- Because your account is anonymous, open the contact form from the App (Settings → Contact Us) or include the ID of one of your looks, so we can find your data.
- We may ask for more information to verify that the request is yours.
- We answer within one month, which may be extended where the law allows.
If you are in the EEA, UK or Switzerland, you can also complain to your local data protection authority. We would appreciate the chance to resolve your concern first.
9. US state privacy rights
If you live in California or another US state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah or Texas), you have these rights:
- to know what personal information we collect, use and disclose;
- to access, correct and delete it;
- to opt out of “sale”, “sharing” for cross-context behavioural advertising, and targeted advertising;
- to limit the use of sensitive personal information;
- not to be discriminated against for using these rights.
Over the past 12 months we collected these categories of personal information, for the purposes described in section 3:
- identifiers (account ID, device IDs, IDFA if permitted, IP address);
- commercial information (subscription purchases);
- internet and app activity;
- approximate location derived from IP;
- photos (audio, electronic and visual information);
- inferences (your style profile);
- information you choose to give in the quiz, some of which may count as sensitive personal information under certain state laws.
We use sensitive information only to provide the service you request.
We do not sell personal information for money. When you allow tracking, sending identifiers and app events to Meta, AppsFlyer and AdMob for advertising may count as “sharing” or “targeted advertising” under these laws. We never sell or share your photos, looks or quiz answers.
To opt out:
- turn off tracking for Taifa in iOS Settings;
- submit a request through our contact form and include “Do Not Sell or Share” in your message.
We honour Global Privacy Control signals on our website. You may use an authorised agent, and if we deny your request, you may appeal by replying to our decision. We do not knowingly sell or share the personal information of anyone under 18.
10. International transfers
We and our providers process data in the United States and other countries, which may have different data-protection laws than yours.
When we transfer personal data out of the EEA, UK or Switzerland, we rely on adequacy decisions, such as the EU-US Data Privacy Framework where the provider is certified. Otherwise we use the European Commission’s Standard Contractual Clauses and the UK Addendum, with additional safeguards where needed.
11. Security
We protect your data in several ways:
- Data is encrypted in transit (HTTPS).
- Files are kept in private storage that is accessed through short-lived signed links.
- Database rules restrict each account to its own data.
- Access to production systems is limited.
No system is completely secure. If a breach affects your data, we will notify you and the authorities as the law requires.
12. Children
The App is intended only for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and photos of minors must not be uploaded.
If you believe a minor has used the App or uploaded a photo of a minor, contact us and we will delete the data.
13. Changes
We may update this Policy from time to time, and the date at the top shows the latest version. For material changes, we will notify you in the App before they take effect, and ask for consent where the law requires it.
14. Contact
Three Brain Apps LLC
30 N Gould St
Sheridan, WY 82801-6317
United States
Contact: threebrainapps.com/contact