Privacy Policy

1. The owner and operator of your personal data is Garmio AI (“Garmio”, “we”, “us”), Tashkent, Republic of Uzbekistan. Contact: dev@vibeapp.uz.
2. This Policy covers the Garmio iPhone app, its server side and the vibeapp.uz pages that belong to it. It is part of our Terms of Use.

• We use your data to run Garmio for you: your wardrobe, try-ons, the Garmio AI stylist, the social feed and your plan.
• Our servers are located in Uzbekistan.
• To make try-ons and to answer you in chat, we send your selfie, clothes photos, chat messages and voice notes to Google’s Gemini AI. Google processes this data abroad.
• The photo-library scan and your face signature work only on your phone. Library photos never leave it.
• We do not sell your data and do not show ads. We do not track you across other apps.
• Your account is public unless you make it private. You can delete your account in the app at any time.

3.1 Account and sign-in

• Phone number, if you sign in by SMS. We send you a one-time code and keep only a hashed copy of it.
• Sign in with Apple: Apple’s identifier for you, your email address (which may be an Apple relay address), and your first and last name if you share them.
• Google: Google’s identifier for you, your email address, your name and the address of your Google profile photo. The photo is used as your avatar and is loaded from Google’s servers.
• Security tokens that keep you signed in. On your phone they are kept in the iOS Keychain.

3.2 Profile and style

• Username, name, bio, avatar and Instagram username, if you add them.
• Your answers in onboarding: gender, date of birth, goals, style preferences, how often you shop and how you heard about Garmio.
• Body details for try-ons: height, weight, body shape and proportions, the try-on figure and your modesty preference.
• Settings: language, time zone, units, currency, notification preferences and privacy settings.

3.3 Photos and generated images

• Selfies you take or choose for try-ons (face or full-length).
• Photos of clothes you take or upload, cut-outs made from them, and product pictures you import from shops.
• Generated images: try-ons, outfit covers, backdrops and enhanced pictures.
• Before uploading, the app re-encodes photos on your phone. This removes embedded data such as the location where a photo was taken.

3.4 Wardrobe and outfits

Your clothes and their details (category, colours, brand, season, price, material, shop and link), outfits, saved looks, wishlist, planner, and what you wore and when.

3.5 Chat with Garmio AI

Your messages, the photos you send, your voice notes and their text transcripts, Garmio AI’s replies, and the shop finds Garmio AI suggests.

3.6 Social features

Who you follow and who follows you, follow requests, likes, comments, stories and their tags, story views and reactions, mutes and blocks, reports you file or that concern your content, and your notifications.

3.7 Location

Only if you allow it. The app takes your approximate position (about 1 km accuracy) and the name of your city, or uses a city you choose. We use this to show the weather and suggest outfits for it, and to work out your local time for the morning look. You can turn location off in Settings → Weather location or in iOS Settings.

3.8 Purchases, credits and invitations

Your plan and its status, purchase and renewal records that Apple passes to us through RevenueCat, your credit balance and history, your invite code, and who invited you. We never see your card details.

3.9 Support and moderation

Your messages to support, appeals, warnings and restrictions on your account, and notes our team makes while handling them.

3.10 Device and usage data

• Push token, app version and language, so we can send you notifications.
• Usage events: which screens and features you use and when. They are linked to your account, to a random install ID and to a session ID, along with app version, language, approximate country, device model, iOS version and where the app was installed from (App Store or TestFlight). They never contain your messages, photos, phone number or email. We keep them on our servers, and a copy also goes to Google Analytics for Firebase.
• Google Analytics for Firebase: we use it to understand which features are used and where people get stuck. Google receives the following:
  • usage events: which screens you view and what you tap or open, for example starting a try-on or making a purchase;
  • your Garmio account ID (a random identifier), used as your user ID in Google Analytics, and an app-instance ID that Firebase creates on your phone;
  • the device model, iOS version, app version and the app’s language;
  • a few details of your account and settings: your plan and subscription status, which permissions you have allowed, roughly how many items are in your wardrobe (a range, not the exact number) and whether your account is private.
  Google also works out your approximate location (country and city) from your IP address. Google Analytics never receives text you type, photos, contacts, names or phone numbers. The app does not send it the advertising identifier (IDFA), its advertising features are off, and we do not use it to track you across other companies’ apps.
• Crash reports: if the app crashes, a report goes to Firebase Crashlytics. It contains the device model, the iOS version, the app version and technical details of the crash.
• Server logs: technical records of requests to our servers, used for security and to fix errors.

1. Photo-library scan. If you allow access to your photos, Garmio looks through them on your phone for outfit photos and cuts out the clothes. The photos themselves never leave your phone. Only the clothing cut-outs you choose to add go to your wardrobe on our servers. You can turn the scan off in Settings → AI & privacy.
2. Face signature. To tell your photos from other people’s, Garmio turns your selfie into a face signature: a set of numbers describing your face. It is made and kept only on your phone. It is excluded from backups and is never sent to us or anyone else. It is deleted when you tap Forget in Settings → AI & privacy, when you sign out, or when you delete your account. Faces of other people found during the scan are compared and then forgotten.
3. Contacts. If you allow access to your contacts, Garmio can show which of them are already on Garmio. Names, photos and everything else in your contacts stay on your phone. Only one-way codes (hashes) of their phone numbers and emails are sent to our server, which compares them with Garmio accounts while answering and keeps nothing — no copy, no log. Inviting a contact opens your own Messages app; Garmio never sends anything to them itself.
4. The app also keeps a copy of your wardrobe and a cache of pictures on your phone, so Garmio works quickly and offline.
5. Permissions are asked only when needed, and you can change them in iOS Settings:
   • Camera: to photograph clothes and take selfies.
   • Photos: for the library scan and for choosing photos.
   • Add to Photos: to save stories you choose.
   • Microphone: for voice notes to Garmio AI.
   • Location (while using the app): for the weather.
   • Notifications: for messages from Garmio.
   • Contacts: to show which of your contacts are on Garmio, and to invite the others.

You give your consent when you sign up in the app and accept this Policy. You can withdraw consent at any time by deleting your account or writing to us. Withdrawing consent does not affect processing that took place before it.

1. Try-ons. To make a try-on, we send Google’s Gemini API the following: your selfie; pictures and descriptions of the chosen clothes; and the body details needed to draw you (gender, height, weight, body shape and proportions, modesty preference). We ask Gemini to keep your face recognisable.
2. Covers, backdrops and enhancement. We send the pictures of the clothes or the photo you want improved, with their descriptions.
3. Garmio AI. For each message, Gemini receives the following:
   • your message, and any photo you attach;
   • the recent conversation (up to the last 12 turns);
   • a summary of your profile (name, gender, styles, goals, city, body shape, proportions and height);
   • today’s weather;
   • a list of up to 60 items from your wardrobe.
   Voice notes are sent to Gemini as audio and turned into text.
4. Recognising clothes. Each clothes photo you add is sent to Gemini to identify the item, its category and colours. Background removal runs on our own servers.
5. Training. We do not train AI models on your data. We use Google’s paid Gemini API. Under Google’s terms for it, Google does not use prompts or responses to improve its products. Google keeps them for a limited time only to detect abuse.
6. SynthID. Images made with Gemini carry SynthID, an invisible watermark that marks them as AI-generated. It contains no personal data about you.
7. No automated decisions. We do not make decisions with legal or similarly significant effects about you solely by automated means. AI is used only to create the content you ask for.

Who on our team can see your data

A small number of authorised team members can access account data and content when this is needed for support, safety and moderation, and to investigate errors. They sign in with a password and a second factor, and their actions on accounts are logged. To improve Garmio AI, team members may read conversations with Garmio AI under a pseudonym, without your name or phone number.

We share data only with the service providers below, and only what each one needs. They process it on our instructions or under their own terms for the service.

• Shops. When you import a find, our server downloads the product page and pictures from the shop’s website. The shop sees our server, not you, and receives nothing about you.
• Other users see what section 9 describes.
• Authorities. We disclose data to competent state bodies only when the law of the Republic of Uzbekistan requires it.
• Change of owner. If Garmio is transferred to another owner, your data may pass to them under this Policy. We will tell you in advance.

We do not sell personal data, do not share it for advertising and do not use advertising tools. We do not track you across other companies’ apps. We use Google Analytics for Firebase only for product analytics, with its advertising features off (3.10).

1. Our servers and databases are physically located in the Republic of Uzbekistan. Your account, wardrobe, photos, generated images, chats and other data are stored there.
2. Some of our providers (section 7) process data outside Uzbekistan, mainly in the USA. When you use the related features, the data they need is transferred to them across the border. This includes sending your photos, chats and voice notes to Google for AI processing, and a copy of your usage events to Google Analytics for Firebase.
3. We transfer data abroad on the basis of your consent and under the providers’ data-protection terms. You give this consent when you accept this Policy in the app. AI features do not work without such a transfer. If you do not want it, do not use the AI features or delete your account.
4. Your face signature never leaves your phone. We do not create face templates or other biometric identifiers on our servers.

1. Always visible to signed-in users: your username, name, avatar, bio, Instagram username, chosen styles and counts (followers, items, outfits). People can find you by username or name. Your phone number, email, date of birth, gender, body details and selfies are never shown to others.
2. Public account (the default): any Garmio user can see your wardrobe, your try-ons (images of you made by AI), your followers and the people you follow.
3. Private account (Settings → AI & privacy): only followers you approve can see these.
4. Looks are private by default. You choose who sees each one: only you, followers, or everyone. Only public looks from public accounts appear in the community feed.
5. Stories are visible for 24 hours to your followers, or to everyone if you choose so and your account is public. Only you see who viewed your story.
6. Blocking hides your content from the blocked person, and theirs from you. Muting hides someone’s stories from you.
7. Picture links. Pictures of clothes, avatars, outfit covers and stories are stored at hard-to-guess links that open without signing in. Anyone who obtains such a link can open the picture. Selfies, try-ons, chat photos and voice notes are protected: they open only for you, with a short-lived personal link.
8. Anything you share with others can be saved by them, for example as a screenshot, and we cannot undo that.

When you delete your account (Profile → Settings → Delete account), the following is removed from our database at once: your account, profile, wardrobe, outfits, selfies, try-ons, chats, stories, comments, likes, follows, notifications, support tickets, credits and invite records. The files themselves (photos, generated images, voice notes) are deleted from our storage within 30 days. Some records are kept after deletion:

• purchase records, for the time the law requires;
• reports you filed about others, without your identity;
• usage events and logs, until the end of the periods above;
• what Google Analytics for Firebase already holds, until the end of its period above.

The app also resets the Google Analytics ID on your phone and creates a new install ID, so your later use of the app is not linked to the deleted account.

Deleting your account does not cancel an App Store subscription. Cancel it in your Apple Account settings.

Under the Law “On Personal Data” you have the right to:

• know whether we process your data, for what purpose, and who receives it;
• get access to your data;
• have inaccurate data corrected;
• have your data deleted;
• withdraw your consent;
• object to processing;
• complain to the authorised state body for personal data, or go to court.

Many of these you can do yourself in the app:

• edit your profile;
• delete or replace selfies;
• forget the face signature;
• turn off the photo-library scan;
• change weather location;
• make your account private;
• choose who sees each look and story;
• block, mute and report;
• change notifications;
• delete your account.

For anything else, such as a full copy of your data, write to dev@vibeapp.uz from the email linked to your account, or include your username and phone number. We may ask you to confirm the account is yours. We correct inaccurate data within three days and answer other requests within ten days.

Garmio is not currently offered in the European Union. Wherever you live, you can ask us to do any of the following:

• give you access to your data, or a copy of it in a portable format;
• correct it;
• delete it;
• restrict its processing;
• stop processing it, if you object.

You can also withdraw consent. Write to dev@vibeapp.uz, and we will answer within one month. Where laws such as the EU General Data Protection Regulation apply, our legal bases are those in section 5:

• consent, for AI processing of photos, for location and for transfers abroad;
• performance of a contract;
• legitimate interests, for security, abuse prevention, error fixing and improvement;
• legal obligations.

You also have the right to complain to the data protection authority where you live.

• All connections to our servers are encrypted.
• Sign-in tokens are kept in the iOS Keychain on this device only.
• Sign-in codes are stored only as hashes.
• Selfies, try-ons, chat photos and voice notes are served only to you, through personal links that expire.
• Team access is limited by role, protected by a second factor and logged.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Garmio is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor uses Garmio, write to us, and we will delete the account.

We publish the current version at vibeapp.uz/privacy with its date. We will tell you about important changes in the app before they take effect. Where the law requires, we will ask for your consent again.

Garmio AI
Tashkent, Republic of Uzbekistan
Email: dev@vibeapp.uz