Legal

Privacy Policy

Last updated: August 16, 2026

This translation is provided for convenience only; in case of any inconsistency, the English version prevails.

MuseYou ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website atmuseyou.ai.

1. Information We Collect

Information you provide directly

• Account information: email address, name, and password when you register (passwords are stored as encrypted hashes; we cannot see your plaintext password).
• Profile information: city of residence, age (18+), height, weight, style preferences.
• Biometric data — face and body photos: Portrait and full-body photos you upload for AI analysis. See Section 4 for our special biometric data notice.
• Community content: Posts, images, and comments you publish on the MuseYou community.

Information collected automatically

• Device information: device type, operating system, unique device identifiers.
• Usage data: features accessed, outfit generations, products viewed, time spent in-app.
• Location data: precise location (only if you permit) used solely to derive your city for weather-appropriate outfit recommendations; coordinates are shared with geocoding providers (OpenStreetMap Nominatim) to resolve city names.
• Purchase behavior: click-through and purchase data for affiliate commission tracking (anonymized).

2. How We Use Your Information

• To provide AI styling services: color analysis, body type analysis (MuseColor™ and MuseForm™ systems), and outfit generation.
• To personalize product recommendations and fashion content based on your analysis results.
• To send service-related communications and, with your consent, marketing emails.
• To process affiliate commissions when you purchase products through links in our app.
• To maintain and improve app functionality, security, and user experience.
• To comply with legal obligations.

3. Affiliate Links and Third-Party Retailers

MuseYou participates in affiliate marketing programs. When you click on product links in our app or website, we may earn a commission from qualifying purchases at no additional cost to you. We work with affiliate networks including CJ Affiliate, Skimlinks, SHEIN Affiliate Program, Involve Asia, Awin, Rakuten, and others. These networks may use cookies to track purchases for commission attribution. Their privacy practices are governed by their own privacy policies.

Disclosure: Product recommendations shown in the shopping section of our app may include affiliate links. MuseYou may earn a commission if you make a purchase. This does not influence our AI-generated style analysis or recommendations.

4. Biometric Data — Special Notice

What we collect and why

We analyze your face and body photos using AI to extract style characteristics including facial structure, color season type (MuseColor™), and body silhouette (MuseForm™). These analyses are used exclusively to generate your personalized style reports and outfit recommendations.

How your photos are processed

Your photos pass through the following processing chain:

• MuseYou servers (Alibaba Cloud, Singapore region) — initial storage and routing
• Kie.ai — AI gateway for image and video generation, routing requests to underlying model providers
• OpenRouter — AI gateway for language-model analysis
• Anthropic (Claude, via OpenRouter) — facial and style feature analysis
• OpenAI (GPT-Image-2, via Kie.ai) — outfit image generation
• xAI (Grok Imagine, via Kie.ai) — outfit video generation

Your photos are used solely to generate your personal analysis reports, outfit images, and outfit videos. All transmissions are encrypted. Regarding model training: we have verified that the API terms of service of Anthropic and OpenAI explicitly state that API data is not used to train their models; Kie.ai and OpenRouter act as API gateways that only route requests; and xAI (Grok Imagine) handles data in accordance with its published API data policy.

Private storage: Your photos and generated content are stored in a private Alibaba Cloud OSS bucket that is not publicly accessible. Our app, and the AI providers above for the duration of a generation request, can access specific files only through short-lived signed URLs that expire automatically.

Authorization to process your photos

By uploading your photos, you authorize us to process them solely for the purpose of generating style analysis and outfit content for yourself. We do not use your photos for public display, marketing materials, or any other public purpose, and we do not use them to train any third-party AI models.

Data retention

Your original photos (face and body) are retained on our secure cloud storage (Alibaba Cloud OSS) while your account remains active. This retention is required because your photos are used as the visual reference for all outfit generation features, including future regeneration of analysis results and outfit images. If you have not logged in or used the Service for 3 consecutive years, we will delete your photos and generated content after giving you 30 days' advance notice by email — this satisfies the Illinois BIPA, the GDPR storage-limitation principle, and the minimum-necessity retention requirement of China's PIPL. You consented to this retention when you first used the analysis feature.

You may delete your photos at any time through Profile → Privacy Settings → Data Management → Delete Analysis Records, or by deleting your account (which deletes all associated data from our servers).

Your rights regarding biometric data

• Right to delete: Request deletion of your biometric data at any time via the app or by contacting [email protected].
• Right to opt out: You may choose not to submit photos. Limited app functionality will be available without biometric analysis.
• No sale: We do not sell, lease, trade, or otherwise profit from your biometric data.

Illinois BIPA compliance

For users in Illinois: We comply with the Biometric Information Privacy Act (BIPA). We have a written retention policy (this section). We do not sell biometric identifiers or biometric information. We use biometric data only for the stated purpose of generating your personal style analysis. You provided written informed consent via the in-app disclosure prior to photo upload.

5. Sharing Your Information

We do not sell your personal information. We may share information with:

• AI processing providers: Kie.ai and OpenRouter (AI gateways), Anthropic (Claude), OpenAI (GPT-Image-2), and xAI (Grok Imagine) — for generating your style analysis, outfit images, and videos. These providers process your photos solely for the stated purpose; we have verified that Anthropic's and OpenAI's API terms of service explicitly state that API data is not used for model training, Kie.ai and OpenRouter only route requests, and xAI handles data under its published API data policy.
• Cloud infrastructure: Alibaba Cloud (OSS storage, CDN) — for storing and delivering your photos and generated content.
• Payment processing: Google Play Billing — for purchase verification and subscription status only. We never see or store your card details (see Section 6).
• Notification services: Firebase Cloud Messaging (Google) — for delivering task-progress and service notifications.
• Affiliate networks: CJ Affiliate, Skimlinks, Involve Asia, and others — anonymized click and purchase data for commission tracking only.
• Legal requirements: When required by law, court order, or to protect our rights.

6. Payment Information

All purchases in the MuseYou app — subscriptions and one-off in-app purchases — are processed by Google Play Billing. We do not collect, store, or have access to your credit card number, bank account, or other payment method details; payment information is handled entirely by Google under its own privacy policy.

We receive and retain only the records needed to manage your entitlements:

• Subscription status records: plan type, purchase token, and renewal/expiry status — used to activate, verify, and cancel your membership entitlements.
• Transaction records: order identifiers and purchase history for subscriptions and one-off purchases (credit packs, report pack, event tickets) — used for entitlement delivery, customer support, and refund processing.

These records are kept for the duration of your account and for the additional period required by applicable financial record-keeping laws.

7. Data Retention

Data Type	Retention Period	Notes
Face & body photos	Duration of account; deleted after 3 consecutive years without login or use, with 30 days' advance email notice	Required for outfit generation features; aligned with BIPA, GDPR storage-limitation principle, and PIPL minimum-necessity requirement
Analysis reports	Permanently (until account deletion)	Core product feature
Generated outfit images	Permanently (until account deletion)	User's personal archive
Account information	Duration of account; after a deletion request the account enters a 15-day cooling-off period (recoverable by signing in), then is permanently deleted	15-day cooling-off period, then permanent deletion
Subscription & purchase records	Duration of account, plus statutory financial retention period	Entitlement management; card data never stored
Behavior logs	90 days	Security and debugging only
Anonymized analytics	Indefinitely	No personal identifiers retained

When you delete your account, it first enters a 15-day cooling-off period during which you can sign in to cancel the deletion and fully restore your account. After the period ends, all personal data including photos, analysis reports, and generated content is permanently deleted from our servers and cloud storage.

8. Your Privacy Rights

Depending on your location, you may have the following rights. To exercise any right, contact us at [email protected] or use the in-app Profile → Privacy Settings → Data Management.

EU/EEA users (GDPR)

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion (Right to be Forgotten): Request deletion of your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.
• Complaint: Lodge a complaint with your national supervisory authority.

We are not established in the European Union. EEA & UK availability: The Service is currently not offered in the European Economic Area or the United Kingdom (these territories are excluded from app-store distribution). We will appoint an EU representative (GDPR Art. 27) and a UK representative (UK GDPR Art. 27) before any launch in those territories, and will update this Policy accordingly.

California users (CCPA)

• Right to Know: Request information about categories of personal data collected.
• Right to Delete: Request deletion of personal data.
• Right to Opt Out: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. Our affiliate-marketing attribution data contains only click identifiers and redirect records — no name, email, photos, or identifiers that can be linked back to you personally. You may still opt out by contacting [email protected].
• Non-Discrimination: We will not discriminate against you for exercising your rights.

China users (PIPL)

• 查阅权(Access): 查看我们持有的您的个人信息。
• 更正权 (Correction): 要求更正不准确的信息。
• 删除权 (Deletion): 要求删除您的个人信息。
• 单独同意撤回: 您可随时撤回对处理生物特征信息的同意。
• 跨境传输告知 (Cross-border transfer notice): 您的个人信息存储并处理于新加坡（阿里云新加坡节点及第 4 条所述 AI 服务商）。依据《个人信息保护法》第 39 条，我们特此告知境外接收方情况；继续使用本服务即表示您同意该跨境传输。

Japan users (APPI)

• Cross-border transfer: your personal information (including the photos you upload) is stored and processed in Singapore, and transferred to the AI providers listed in Section 4 (including Anthropic, OpenAI, and xAI). Pursuant to Article 28 of Japan's Act on the Protection of Personal Information (APPI), we hereby inform you of these overseas recipients; your in-app consent before photo upload also constitutes your consent to this cross-border transfer.
• Rights: request disclosure, correction, suspension of use, or deletion of your personal information by contacting [email protected].

South Korea users (PIPA)

• Cross-border transfer: your personal information is stored and processed in Singapore and transferred to the AI providers listed in Section 4. Pursuant to Article 28-8 of Korea's Personal Information Protection Act (PIPA), we inform you of the recipient countries, items, purposes, and retention periods, and obtain your consent through the in-app notice before photo upload.
• AI-generated content marking: images and videos generated by MuseYou carry visible AI-generated labels and machine-readable metadata, in line with Korea's requirements for identifying synthetic content.
• Rights: request access, correction, deletion, or suspension of processing via [email protected].

India users (DPDP Act 2023)

This notice is provided to you as the data principal under India's Digital Personal Data Protection Act, 2023:

• Personal data collected: the categories listed in Section 1 (account information, profile information, face and body photos, community content, device and usage data).
• Purposes: the purposes listed in Section 2 (providing AI styling services, personalization, affiliate commissions, service improvement, and legal compliance).
• Storage and transfer: personal data is stored and processed in Singapore, and shared with the processors listed in Section 5.
• Your rights: access, correction, and deletion (via Profile → Privacy Settings), withdrawal of consent (delete your photos or your account), and grievance redress by contacting [email protected]; you may also lodge a complaint with the Data Protection Board of India.

Brazil users (LGPD)

• Rights (LGPD Art. 18): confirmation of processing, access, correction, anonymization or deletion of unnecessary data, portability, and withdrawal of consent — contact [email protected] or use Profile → Privacy Settings.
• International transfer (LGPD Art. 33): your personal data is stored and processed in Singapore and transferred to the AI providers listed in Section 4, for the purposes described in Section 2.
• Data protection contact: our privacy contact [email protected] serves as the communication channel for LGPD matters.

Singapore users (PDPA)

• Consent: we collect, use, and disclose your personal data with your consent as described in this Policy; your photos are processed only with the separate in-app consent obtained before photo upload.
• Rights: request access, correction, and data portability, and withdraw consent at any time (delete your photos or your account) — contact [email protected] or use Profile → Privacy Settings.
• Data breach notification: if a data breach occurs that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected users within the timeframe required by law.
• Data protection enquiries: [email protected] serves as our data protection contact.

9. AI-Generated Content

MuseYou uses AI models to generate outfit images, style analyses, and fashion trend content. Regarding intellectual property:

• Ownership of generated content: content generated from your own photos — including your style reports and outfit images incorporating your likeness — belongs to you. You grant MuseYou a limited license to store such content and display it to you within the product. Purely AI-editorial content that does not incorporate your photos (such as fashion trend insights and MuseYou magazine pages) is owned by MuseYou. AI-generated images incorporating your photos may still be subject to complex copyright considerations under applicable law.
• All generated outfit images include the instruction to remove visible brand logos and trademarks. MuseYou-generated images do not represent endorsement by or affiliation with any brand.
• Fashion trend content is AI-generated based on publicly available trend data and represents editorial opinion only. It does not constitute any evaluation of specific brands, products, or individuals.

10. Age Restriction

MuseYou is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. Age confirmation is required at sign-up and sign-in. If you are under 18, please do not use MuseYou. If you become aware that a minor is using the Service, please report it to [email protected]; once verified, we will delete the account and its data.

11. Cookies and Tracking

Our website itself does not use tracking cookies or similar technologies. Affiliate marketing networks' cookies are set by those networks only after you click a product link and are redirected to a merchant's or affiliate network's website, and are governed by their own policies. If we introduce non-essential cookies on our website in the future, we will obtain your consent (opt-in) before enabling them.

The MuseYou mobile app does not use advertising-tracking SDKs and does not track you across apps; our push service (Firebase Cloud Messaging) only generates a push token on your device to deliver messages.

12. Data Security

We protect your information with technical and organizational measures including encrypted transmission, private cloud storage, and automatically expiring short-lived signed URLs. If a data breach occurs that is likely to result in a high risk to your rights, we will notify the competent supervisory authorities within 72 hours and inform the affected users.

13. Copyright & Takedown

MuseYou respects intellectual property rights. Content on MuseYou — including style reports, outfit images, and MuseYou fashion insight pages — is AI-generated and editorially integrated by our team. If you are a rights holder and believe that any content available through our service infringes your copyright or other legitimate rights, you may submit a takedown request to us at any time.

Please send takedown requests to [email protected]. We will verify and remove the reported content within 72 hours of receiving a complete request. To help us process your request quickly, please include:

• Proof of ownership: identification of the copyrighted work or other right you hold (e.g., the original work, registration record, or evidence of first publication).
• Content location: the specific content at issue and where it appears in our app or website (screenshots or links are helpful).
• Contact information: your name and a way to reach you (email preferred).

For formal notices under the U.S. Digital Millennium Copyright Act (DMCA), you may also contact our copyright team:

• Copyright contact: MuseYou Legal Team
• Email: [email protected]
• Subject line: "DMCA Takedown Notice"

Your notice must include: (1) identification of the copyrighted work; (2) identification of the allegedly infringing material and its location; (3) your contact information; (4) a statement of good faith belief; (5) a statement of accuracy under penalty of perjury; and (6) your physical or electronic signature. We will respond to valid DMCA notices within 72 hours.

14. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes — especially changes to how we handle biometric data — we will notify you in-app and by email at least 30 days before the change takes effect, and will request fresh consent where required by law. Continued use after a non-material update constitutes acceptance.

15. Contact Us

If you have questions about this Privacy Policy, your personal data, or to exercise any of your rights:

• Email: [email protected]
• DMCA: [email protected]
• Copyright & takedown: [email protected]
• Website: museyou.ai
• Operator: Xiamen Siming District Museyou Information Technology Studio, registered in Siming District, Xiamen, Fujian, China; registered address: No. 294 Douzaiwei Road, Siming District, Xiamen, China. You can reach the operator at any time via [email protected]
• EEA & UK availability: The Service is currently not offered in the European Economic Area or the United Kingdom (these territories are excluded from app-store distribution). We will appoint an EU representative (GDPR Art. 27) and a UK representative (UK GDPR Art. 27) before any launch in those territories, and will update this Policy accordingly. For any question, contact us at [email protected]

We aim to respond to all privacy inquiries within 48 hours, and to fulfill verified data requests within 30 days (or the timeframe required by applicable law).