Fashlens Privacy Policy

Last updated and effective: October 16, 2026

Fashlens identifies the clothing in a photo you choose, names the likely brand and shows where to buy it. This policy explains, in plain words, what we collect, why, who else sees it, how long we keep it and how you can delete it.

We built Fashlens to collect as little as possible. There are no ads, no advertising IDs, no third-party analytics tools and no tracking across other apps or websites. We don't sell your data.

Contents

• Who we are
• The short version
• What we collect and why
• How your photo is analysed
• What we never do
• Who we share data with
• How long we keep data
• Deleting your account
• Teens and children
• Security
• Where your data is processed
• Your choices and rights
• Links to stores and other websites
• Changes to this policy
• Contact us

Who we are

Fashlens ("Fashlens", "we", "us") is run by Kindmovelabs LLC, a company based in South Carolina, United States. We decide how your personal information is used (in some laws this is called the "controller"), and we are responsible for protecting it.

Questions, requests or complaints: business@kindmovelabs.com. The person responsible for privacy at Fashlens is Kindmovelabs LLC, at the same address.

This policy covers the Fashlens apps for iPhone and Android and the website at https://fashlens.com.

The short version

Supabase and Render store and process all of this for us as our hosting providers. "Nobody" means it goes to no one else. The rest of this policy gives the details.

What we collect and why

Your account (Apple or Google sign-in)

You need an account to use Fashlens. It holds your history, saved items and purchases, and lets you use them on more than one phone. You sign in with Apple (iPhone) or Google (iPhone and Android). We never see or store a password.

Our account system is Supabase Auth. When you sign in, it receives from Apple or Google and keeps:

• an account ID from Apple or Google, and the Fashlens account ID it creates for you;
• your email address. With Apple's Hide My Email, this is a private relay address, not your real one;
• with Google only: your name and a link to your Google profile picture, because Google's sign-in includes them. Fashlens doesn't use or show them. With Apple, we ask only for your email address, not your name;
• technical details of your sign-ins (such as times, IP address and device type), which Supabase keeps for security. Your sign-in sessions are deleted with your account.
• Supabase's sign-in log (its "audit log"): an entry each time you sign in or out or your sign-in is renewed, with the time, your account ID, your email address (with Google, also your name) and your IP address. We keep these entries for 30 days, then delete them automatically. When you delete your account, the deletion also deletes all of your entries, including the one that records the deletion itself, and checks again 30 minutes later.

We use your email address to show you which account you are signed in with, to find your account when you contact us (for example to delete it), and to write to you about your account or an important change to this policy. We don't send you marketing emails.

Sign in with Apple: we also store an encrypted token from Apple. We use it only to tell Apple to disconnect Fashlens from your Apple ID when you delete your account.

Your age range (never your birth date)

Fashlens is for people aged 13 and over. The app checks your age before you can create an account. If you choose Sign in on the first screen, it signs you in first and, if your account has no age yet, checks right after, before you can use Fashlens:

• First it asks the App Store (Apple's Declared Age Range) or Google Play (Play Age Signals) for an age range. You may be asked to agree to share it.
• If the store gives no answer, the app asks for your birth month and year. Your phone works out the age range itself. Your birth month and year are never sent to us and never saved.

We store only: the age range (13–15, 16–17 or 18+), whether it came from the store or from you, how the store checked it (for example "declared by a parent"), and when we received it. The app asks the store again each time it starts, and when you come back to it after more than a day, and sends us the answer when it changes (and at least once a day).

For some teens the store requires a parent's approval. Then we also store what we need to follow it. See Teens and children.

Your shopping country and section

During setup you choose your shopping country (any country) and the section you shop in (men's, women's or both). We use them to search stores in your country and in your section. You can change both at any time in Profile > Shopping.

Your consent to AI analysis

Before you sign in, the app shows how your photos are analysed (by our server, Anthropic's Claude AI and a visual search provider). Tapping Continue with Apple or Continue with Google under that notice is your consent. We record which version of the notice you agreed to and when.

You can read the notice again, or withdraw your consent, at any time in Profile > Privacy > AI photo analysis. Once you withdraw, the app sends no more photos until you agree again. Withdrawing doesn't delete your history; you can delete that separately.

Photos

Nothing leaves your phone until you tap Find it. Then:

1. On your phone, the app shrinks the photo (at most 1568 pixels on its longest side) and sends it over an encrypted (HTTPS) connection to our server.
2. On our server, the photo is processed in memory, never written to the server's disk. We re-save it without any hidden metadata: the camera details and the GPS location some photos carry are removed.
3. A temporary copy goes to private storage at Supabase, so the visual search can open it through a private link that stops working after 5 minutes. This copy is deleted as soon as the scan finishes, fails or is cancelled. An automatic clean-up also runs every 2 minutes and removes any copy older than 5 minutes, so a copy left behind by an error is gone within about 10 minutes.
4. For analysis, the photo goes to Anthropic (Claude AI), and to Serper and Google (visual search). See How your photo is analysed.
5. A smaller copy (thumbnail) (at most 720 pixels on its longest side, also without metadata) is saved with the result when the scan finds at least one item. The app shows it at the top of your result and in History. This includes your free first scan, which is shown blurred until you unlock it. No thumbnail is saved when nothing is found, when the scan fails, or when the photo is refused.

Your photos and thumbnails are never shown to other people. Fashlens has no social features.

If you use Paste link, your phone downloads the picture from that link itself, so that website sees a normal request from your phone. Our server never visits links you paste.

Please scan only photos you are allowed to use. If other people are in a photo, make sure they are okay with it.

Hints

You can type a short hint (up to 200 characters), such as "the bag", to tell the AI which item you mean. The hint goes to Anthropic with the photo, and it is saved with the scan in your history.

Results, history and saved items

For each scan that finds at least one item, we save to your account:

• the date and time, your shopping country and your hint;
• the results: a one-line summary and, for each item, its type, name, description, colour, brand (with how sure the AI is and why), the text printed on it, where it comes from, where it is in the photo, availability, store links, prices and product picture links. The result can also list other items the AI saw in the photo; the app shows only the one you scanned;
• the thumbnail of your photo;
• whether it was your free first scan or a Pro scan, and whether it has been unlocked;
• for our own records: which AI model made the result and what the scan cost us.

Your free first scan is saved in full but shown blurred until you unlock it with Fashlens Pro.

History and saved items sync to every phone where you sign in. You can delete a single scan or remove saved items in History, or clear your whole history in Profile > Data > Clear history, at any time. Deleting a scan also deletes its thumbnail, its saved items and any problem reports about it.

Problem reports

Every result has Report a problem. A report saves the reason you chose (for example "Wrong brand" or "It talks about the person") and an optional note of up to 300 characters, linked to that scan. We review reports to fix wrong results and to keep the app safe. To stop misuse, we also count reports per account (only the account and the time), and delete those counts after 2 days.

Purchases and subscriptions

Fashlens Pro is an auto-renewing subscription (weekly, monthly or yearly) sold and billed by Apple (App Store) or Google (Google Play). We never see your card or bank details, or your billing address.

We use RevenueCat to manage subscriptions. The app identifies you to RevenueCat by your Fashlens account ID. RevenueCat receives the purchase information from the store, plus technical information its software sends with each request (such as the operating system and app version, your language and region settings, and your IP address). It also uses the purchase information to show us subscription statistics, such as how many people subscribe or cancel. The app doesn't give RevenueCat your email, name or any advertising ID.

Our server asks RevenueCat for your subscription status and stores: whether Pro is active, which plan, which store, when it ends, whether it renews, whether it was a test purchase, and a scrambled (hashed) form of the subscription's ID (so the Pro scan limits apply per subscription, even if it is restored on another account). RevenueCat also sends our server notices when a purchase changes. We keep those notices, which include your account ID and details such as the product, price, currency, store country and transaction IDs, for 90 days.

Device ID

On first launch the app creates an ID for your phone:

• on iPhone, a random ID saved in the iPhone's Keychain, so it stays the same if you reinstall the app;
• on Android, an ID made by scrambling (one-way hashing) the phone's Android ID together with an app-specific value, or a random ID if the Android ID isn't available.

It isn't your name, email, phone number or an advertising ID. The app sends it with its requests. We use it only to give each phone one free first scan, to limit how many scan attempts a phone can make in a day, and to find your records when you contact support. We store it:

• with the record of each scan attempt, for 90 days; and
• if your phone used the free first scan, in our list of phones that already used it. We keep this so that deleting an account and making a new one doesn't give the same phone another free scan.

When an account is deleted because its holder is under 13, we remove the device IDs of the child's phones from both, except from records that belong to another existing account (see Teens and children).

You can see your device ID in Profile > About > Device ID.

IP address

Like every internet service, our server and hosting providers see the IP address your phone connects from.

• Our server uses it in memory, for a short time, to limit how many requests one network can make.
• With each scan attempt, we store only a scrambled form of it (a keyed one-way hash; for IPv6 addresses, of the network part only), to limit free first scans per network per day. We never store the raw IP address, and the scrambled form is deleted after 3 days.
• Supabase records it in its sign-in log each time you sign in or out or your sign-in is renewed. We keep those entries for 30 days, and delete yours when you delete your account (see Your account).
• Our own server's logs are set up not to record your IP address. Render (which runs our server and this website) and Supabase may record it in their own logs, as described below.

Logs and technical data

Our server keeps short technical logs to run the service, fix problems and spot abuse. They contain things like scan IDs, a shortened or scrambled (hashed) form of your account ID (billing log lines show its first 8 characters), result counts, errors, timings, the app version and whether you use iPhone or Android. They never contain your photo, your hint, your email address, or your results (brands, links or prices). Render keeps these logs for up to 30 days. Render and Supabase also keep their own request logs, which can include your IP address, for up to 30 days.

For each scan attempt (including failed ones) we also keep a record for 90 days: the time, your account, your device ID, the type of scan, the outcome (for example "found" or "failed"), timings, which services were used, and what it cost us in AI and search fees. For Pro scans it also holds the scrambled subscription ID. We use it for the scan limits, to stop abuse, to manage costs and to see how well Fashlens works (for example, how often scans fail). After 3 days it no longer holds the scrambled IP address.

If you have turned on sharing with app developers in your phone's settings, Apple or Google may also give us crash reports and anonymous app statistics.

Support emails

If you email us, we get your email address and whatever you write. When you use Contact support in the app, the email it opens already includes your user ID, device ID, the app version and whether you use iPhone or Android, so we can find your account. We use these emails only to help you and to keep a record of what we did (for example a deletion request), and we delete them within 2 years.

Data kept on your phone

The app keeps on your phone: your sign-in session, a copy of your account details and the first page of your history (so the app starts quickly offline), your setup answers until you sign in, the device ID and the age check status. Sign out or delete your account and the app clears the session, the cached account details and history. On Android, the app's data is excluded from phone backups.

What we don't collect

We don't collect your contacts, your precise location (location data in photos is removed), audio (the app never uses the microphone), your browsing history, advertising IDs, payment card details or your birth date.

How your photo is analysed

To identify an item, Fashlens uses two outside services.

1. Visual search (Serper, using Google Lens). Our server sends Serper a private link to the temporary copy of your photo (it stops working after 5 minutes) and your shopping country. Serper has Google Lens look at the photo and returns web pages with similar products. Serper and Google don't receive your name, email, account ID, device ID or IP address from us.

2. AI identification (Anthropic's Claude). Our server sends Claude, an AI model made by Anthropic:

• the photo itself;
• your shopping country and section;
• your hint, if you typed one;
• the visual search matches (page titles, site names and prices).

Claude names the item, the likely brand and the evidence (such as a printed logo), and writes short shopping searches. The request doesn't include your name, email, account ID, device ID or IP address. Claude is told to describe clothing only: it never comments on anyone's body, face, weight or looks, never identifies people (no facial recognition), and refuses photos with sexual content, nudity, a child in a sensitive situation, or graphic violence. Refused photos get no thumbnail and no saved result.

3. Shopping search (Serper, using Google Shopping). Our server sends Serper the shopping searches Claude wrote (for example "Stüssy Paris Chapter hoodie grey"; a search for similar items can add "men's" or "women's" from your section) and your shopping country, to find store links and prices. Your photo is not part of these searches.

Results are generated by AI and can be wrong. The app says so on every result.

What these providers keep:

• Anthropic works for us as a service provider. Under Anthropic's commercial terms, it may not train its models on the content we send. It automatically deletes what we send, and what Claude answers, within 30 days. If its automated safety systems flag a request as breaking its Usage Policy, it may keep that request for up to 2 years, and its safety scores for up to 7 years.
• Serper and Google handle the photo and searches under their own terms. Google isn't our service provider: it handles what it receives through Serper as an independent company. We can't control how long Serper or Google keeps the photo and searches, or how Google uses images that Lens opens.

We don't train any AI models on your photos. We use them only for your scan, your history and, if you report a problem with a result, to check it.

What we never do

• No ads. Fashlens shows no ads and has no advertising SDKs or advertising IDs.
• No tracking. We don't track you across other companies' apps or websites, and we don't use third-party analytics tools. To run and improve Fashlens we only look at our own records, such as scan counts, failures and costs.
• No selling. We don't sell your personal information, rent it, or share it for targeted advertising.
• No profiling. We don't build profiles about you, and we never use your age, or anything about teens, for ads or profiling.
• No cookies. The app and our website use no cookies, analytics or trackers.

Who we share data with

We share data only with the companies below, and only what each one needs. Most of them are service providers that run parts of Fashlens for us. Apple and Google also act under your own agreements with them (for example for sign-in and purchases).

Supabase, Render, Anthropic and RevenueCat work for us under their business and data processing terms. They may use your data only to provide their services to us, and they must keep it confidential and secure, with protection equal to what this policy describes. Serper runs searches for us under its own terms, and Google handles what it receives through Serper under Google's own terms. That's why we send them only the photo link, the search words and your shopping country, never anything that identifies you.

Privacy policies: Supabase https://supabase.com/privacy, Render https://render.com/privacy, Anthropic https://www.anthropic.com/legal/privacy, Serper https://serper.dev/privacy, Google https://policies.google.com/privacy, Apple https://www.apple.com/legal/privacy/ and RevenueCat https://www.revenuecat.com/privacy.

We may also share information:

• when the law requires it, for example a valid court order, or to report apparent child sexual abuse material to the authorities;
• to protect people: the safety of our users or others, or to stop fraud and abuse;
• if Fashlens is sold or transferred to someone else. This policy would keep applying to your data, and we'd tell you before anything changed.

How long we keep data

We don't delete inactive accounts, with one exception. An account that never finishes the age check is deleted automatically once 7 days have passed since it was last used: since it was created, last signed in to, or last opened in the app. This happens if you choose Sign in on the first screen and then close the app or sign out at the age question, and don't come back: the account can't be used until the age question is answered. We delete it exactly as if you had deleted it yourself (see Deleting your account), and only the records in What we keep after you delete your account stay. If you come back after it was deleted, signing in again starts a new account. If such an account has a subscription (now or in the past), scans or a parent's withdrawal of consent on it, we don't delete it automatically: we look at it ourselves.

Your history stays until you delete it or your account.

What we keep after you delete your account

A few records stay after an account is deleted. None of them holds your photos, thumbnails, hints or results:

• "Free first scan used" marks. If you used your free first scan, we keep the device ID of the phone (with that scan's ID and the date) and a scrambled (salted hash) form of your Apple or Google sign-in ID, marked as "used" and no longer linked to an account. This stops the same phone or sign-in from getting another free scan by deleting and re-creating an account. We keep these while Fashlens runs.
• Scan attempt records (time, device ID, type, outcome, timings, cost and, for Pro scans, the scrambled subscription ID), no longer linked to an account, until 90 days after each scan.
• A deletion marker: a scrambled (salted hash) form of your account ID, for 180 days, so that a late purchase notice about your deleted account is recognised and ignored.
• A parent's withdrawal of consent, if one was recorded for a teen's account: scrambled (salted hash) forms of the store ID and sign-in IDs involved, for 180 days, so that deleting and re-creating the account doesn't get around the parent's decision.
• Your account ID on our follow-up list, until the final clean-up about 30 minutes after the deletion has run (it checks RevenueCat, our photo storage and Supabase's sign-in log once more). That is usually within an hour; if our storage provider or database is down, the check is retried until it succeeds.
• Purchase notices from RevenueCat, which include your former account ID, until 90 days after each arrived.
• Server logs and our hosting providers' request logs (up to 30 days) and database backups (up to 7 days), until they expire.
• Emails you sent us, including a deletion request, for at most 2 years.
• Apple and Google keep their own records of your purchases. Anthropic, Serper and Google keep data under their own terms, as described above.

Your entries in Supabase's sign-in log are not kept: they are deleted with your account (see below).

If the account holder is under 13, less stays: no "free first scan used" marks, no parent's withdrawal for that account, scan attempt records without the device ID, scrambled IP address or subscription ID, and a deletion marker kept for 24 hours only (see Teens and children).

Deleting your account

In the app: open Profile (the person icon at the top right of the camera screen), then Account > Delete account. You can also delete your account from the setup, parental-approval and blocked screens.

On iPhone, if you signed in with Apple, Apple may ask you to sign in once more so we can disconnect Fashlens from your Apple ID.

Without the app: follow Delete your account (https://fashlens.com/delete-account), or email business@kindmovelabs.com from the email address you signed in with. If you used Apple's Hide My Email, include that relay address (you can find it in your iPhone's Settings, under Sign in with Apple). We may ask you to confirm the request. We delete the account within 30 days of your request and email you when it's done.

When you delete your account, we:

1. close the account straight away, so no new scans can start;
2. tell Apple to disconnect Fashlens from your Apple ID (if you used Sign in with Apple);
3. delete your customer record at RevenueCat (and again 30 minutes later, in case the app recreated it);
4. delete your thumbnails and any temporary photo (and check your thumbnail folder again 30 minutes later);
5. delete your Supabase account, which deletes your profile, age range, parental-approval details, history, results, hints, saved items, problem reports and subscription status with it;
6. delete your entries in Supabase's sign-in log, including the one that records the deletion (and check again 30 minutes later).

In the app this usually takes a few seconds. If a step fails, our server keeps retrying until it is done. Only the records listed in What we keep after you delete your account remain.

Please note:

• Deleting your account doesn't cancel your subscription. Cancel it in your App Store or Google Play subscriptions, or you'll keep being charged.
• Uninstalling the app doesn't delete your account.
• If you signed in with Google, you can also remove Fashlens from your Google Account's list of connected apps.

Teens and children

Fashlens is for people aged 13 and over. It isn't directed at children under 13, and it isn't part of any children's or family programme. If you're 13 to 17, please make sure a parent or guardian is okay with you using Fashlens and has read this policy.

Under 13. The age check runs before an account is created, so someone under 13 who starts with Get started never gets an account, and their answer never leaves the phone. The exception: choosing Sign in on the first screen signs in first and, for an account with no age yet, asks the age right after, before Fashlens can be used. If that shows under 13, the app tells our server, which deletes the new account and everything in it at once. The app remembers an under-13 result on the phone so the check can't simply be retried. If the App Store or Google Play later reports that an account holder is under 13, the app tells our server, which deletes the account and its data straight away. If you tell us a child under 13 is using Fashlens, we delete the account the same way. In each of these cases we keep much less than after an ordinary deletion:

• no age or parental records, including any parent's withdrawal of consent recorded for the child's account;
• no "free first scan used" marks for the child's phones or Apple or Google sign-in;
• the scan attempt records lose the phone's device ID, the scrambled IP address and the scrambled subscription ID. What is left of them (time, type of scan, outcome, timings and cost, with nothing that identifies anyone) is deleted 90 days after each scan;
• the deletion marker (a scrambled form of the account ID) is deleted after 24 hours instead of 180 days;
• the child's entries in Supabase's sign-in log are deleted, as for every deletion.

Only these remain, until they expire: the account ID on our follow-up list until the final clean-up about 30 minutes later; purchase notices from RevenueCat, if there were any (90 days); a scrambled form of the install's ID if it appeared in Google Play's list of withdrawn approvals (180 days after it last appeared there); a parent's withdrawal of consent recorded for another person's account that used the same install or Apple Account, which belongs to that account (180 days); server logs and our hosting providers' request logs (up to 30 days); database backups (up to 7 days); and any email sent to us. If you believe a child under 13 is using Fashlens, email business@kindmovelabs.com and we'll delete the account.

If the age question after Sign in is never answered, the account is deleted automatically 7 days after it was last used, like any account that never finishes the age check (see How long we keep data).

What we store about a teen's age. Only the age range, where it came from, how the store checked it, and when. Never a birth date.

Parental approval. In some places the law or the store requires a parent to approve a teen's apps. For supervised teens, we then also store the approval state the App Store or Google Play reports, and a scrambled (salted hash) form of the store's ID for this download (Apple's app transaction ID or Google Play's install ID). We use that scrambled ID only to match a parent's withdrawal of consent. We never keep the store's raw ID or anything else from the store's answer. When the store reports that you are 18 or over, we delete these details, except a recorded withdrawal of consent, which stays until you contact us.

Parental tools. Parents and guardians manage approvals with the stores' own family tools: Apple's Family Sharing and Screen Time (including Ask to Buy for purchases) and Google's Family Link. Fashlens has no parental controls of its own, and every purchase goes through the store's own approval.

• Withdrawing consent: a parent can withdraw consent in the store's family settings. Apple sends us a notice (through RevenueCat), and we check Google Play's list of withdrawn approvals regularly, normally every day. We then block the account (scanning, history, saved items and reports) until the store shows a new approval, or the parent confirms it to us. Purchases aren't changed by this. Deleting and re-creating the account doesn't get around the parent's decision (see What we keep after you delete your account).
• Changes that need approval: if we make a significant change (for example to what data we collect, to prices or to the age rating), a supervised teen's parent may be asked to approve again. Until they do, the account is paused.

What we never do with teens' data. We use age data only for age checks and parental approval. We never use teens' data for advertising, profiling or tracking, and we never sell it or share it for advertising. The AI describes clothing only, never people (see How your photo is analysed), and every result has Report a problem, including "It talks about the person".

Parents can email business@kindmovelabs.com to review or delete their teen's account and data. We'll ask for details that show the account is your teen's (for example the user ID from Profile > About > User ID).

Security

• All traffic between the app and our server, and between our server and our providers, is encrypted (HTTPS). Supabase also encrypts our database and storage at rest.
• Photos and thumbnails sit in private storage. The app shows thumbnails through private links that stop working after 1 hour, and the link visual search uses for the temporary photo stops working after 5 minutes.
• Our database only lets you read your own data, and only our server can write to it. Secret keys stay on our server and are never in the app.
• Apple sign-in tokens are encrypted. IP addresses in our own records, and the sign-in IDs and deletion marker we keep after deletion, are stored only in scrambled (hashed) form, using a secret key. The one exception is Supabase's sign-in log, which keeps the IP address of each sign-in for 30 days (see Your account).
• Our logs never contain photos, hints, emails or results.

No system is perfectly secure, so we can't promise absolute security. If a breach affects your personal information, we'll tell you and the authorities as the law requires.

Where your data is processed

We store your data in the United States (Supabase and Render). Anthropic and RevenueCat also process data mainly in the United States. Serper says it operates globally, and Google and Apple operate worldwide. So your information may be processed outside your country, including in the United States, where privacy laws may differ from yours and authorities may be able to access it under local law.

Where the law requires it (for example for people in the EU, EEA or UK), we rely on the safeguards our providers offer in their terms, such as the European Commission's Standard Contractual Clauses.

Your choices and rights

Everyone

Wherever you live, you can:

• see and correct your country and section in the app (Profile > Shopping);
• delete single scans or saved items in History (the clock icon at the top left of the camera screen), or your whole history in Profile > Data > Clear history;
• withdraw your consent to AI photo analysis (Profile > Privacy > AI photo analysis). Nothing is analysed until you tap Find it;
• delete your account (Deleting your account);
• ask us for a copy of your data (in a common, machine-readable format if you like), to correct it, to delete it, or to stop or limit how we use it.

To make a request, email business@kindmovelabs.com from the address you signed in with, or use Contact support in the app, which adds your user ID. We may ask for details to confirm it's your account. We answer within 30 days, and tell you if we need longer where the law allows it. We may keep some information when the law requires it (for example records of a deletion request). We won't treat you differently for using your rights.

Automated decisions

The only decision about you that Fashlens makes automatically and that can stop you using it is the age check: an age under 13 blocks the app, and some teen accounts wait for a parent's approval. If you think your age check is wrong, contact us and we'll review it with you (an age that comes from the App Store or Google Play can only be changed in that store's settings). The AI's results describe clothing, not you.

United States

Depending on your state (for example California, Colorado, Connecticut, Oregon, Texas, Utah or Virginia), you may have the right to know what personal information we collect and how we use it, to access it and get a copy, to correct it, to delete it, and to opt out of its sale, its sharing for targeted advertising, and profiling. We don't sell or share personal information, use it for targeted advertising, or profile you, so there is nothing to opt out of. You can use an authorised agent with your signed permission; we'll still confirm your identity.

If we say no, you can appeal: reply to our answer with "appeal" and we'll review it within 45 days. If you're still unhappy, you can contact your state attorney general.

What we collected in the last 12 months (California):

We disclose these only for the purposes above: to the service providers in Who we share data with, and to Google, which receives the photo and the search words through Serper's searches. We have not sold or shared personal information in the last 12 months, and we have no actual knowledge of selling or sharing personal information of anyone under 16. We don't use sensitive personal information to infer things about you; we use the little we have (such as the sign-in details that keep you signed in) only to provide Fashlens. How long we keep each kind of data is in How long we keep data.

Canada

We ask for your consent before your photos are analysed, and you can withdraw it at any time (see above). You can ask to access or correct your personal information, or for a copy of it in a common format. The person in charge of protecting personal information at Fashlens is Kindmovelabs LLC (business@kindmovelabs.com). If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or your provincial privacy commissioner, such as Quebec's Commission d'accès à l'information. Your information is stored in the United States, outside Canada and Quebec (see Where your data is processed).

Australia

We handle personal information in line with the Australian Privacy Principles. You can ask to access or correct your personal information. You can't use Fashlens without an account, but with Sign in with Apple you can hide your real email address. We disclose personal information to providers overseas, mainly in the United States, and Serper, Google and Apple may process it in other countries (see Where your data is processed). The age check is the only automated decision that can stop you using Fashlens (see Automated decisions above). If you have a complaint, email us first and we'll answer within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (https://www.oaic.gov.au).

EU, EEA, UK and other countries

Fashlens is offered in the App Store and Google Play in the United States, Canada and Australia, but you can choose any shopping country. If the EU or UK GDPR or a similar law applies to you, Kindmovelabs LLC is the controller of your personal data, and we rely on these legal bases:

• to provide the service you asked for (contract): your account, profile, scans, history, saved items, subscription and answers to your emails;
• your consent: sending your photo for AI analysis and visual search. You can withdraw it at any time; that doesn't affect scans already made;
• our legitimate interests: keeping Fashlens secure, preventing abuse of the free first scan (device ID, scrambled IP address and sign-in IDs), logs, scan records, problem reports and managing our costs;
• legal obligations, and our legitimate interest in following app store rules: age checks, parental consent rules and records the law requires.

You need an account, an age range, a shopping country and section to use Fashlens; without them the app can't work. You have the right to access, correct, delete, restrict or object to the use of your data, to receive it in a portable format, and to withdraw consent. You can also complain to your data protection authority (in the UK, the Information Commissioner's Office, https://ico.org.uk). Apart from the age check (see Automated decisions), we don't make decisions about you with legal or similarly significant effects based only on automated processing. We are not required to appoint a data protection officer; privacy questions go to Kindmovelabs LLC at business@kindmovelabs.com.

Links to stores and other websites

Store links open in your phone's browser, never inside the app. Once you open one, the store's own privacy policy applies, not this one. A link marked "via Google Shopping" opens a Google page first, under Google's privacy policy. Product pictures in your results load directly from the store's or Google's servers, which can see your IP address like any website. We don't add tracking to these links, and we don't get paid for them.

Our website, fashlens.com, has no scripts, cookies or analytics. Render, which hosts it, sees your IP address in its logs, as described above.

Changes to this policy

When we change this policy, we'll update the date at the top. For significant changes, we'll tell you before they take effect, in the app or by email to your account's address. If a change affects how your photos are analysed, we'll ask for your consent again before your next scan. For supervised teens, a parent may also be asked to approve the change.

Contact us

Kindmovelabs LLC
South Carolina, United States
Email: business@kindmovelabs.com