Daban Wardrobe Privacy Policy

1. Controller

The personal information controller is Xiang Wang. Contact support@mryc.top. This Policy applies to the Daban App, account, and related online services, not services independently provided by Apple or another third party.

2. Information and purposes

• Account and identity: Apple’s stable account identifier and, when authorized, your name and private relay or actual email; the nickname you set, selected preset avatar color and animal character, and system-generated unique Daban ID support in-App account display, cross-device sync, support, and exact admin lookup. A Daban ID is not a sign-in credential. A random installation identifier, session, login challenge, and security state support account creation, sign-in, replay prevention, and deletion. The installation identifier is a random UUID, not an advertising ID or hardware serial number.
• Profile and settings: personal styling information (body measurements, an optional bra-cup value, skin tone depth and undertone, current hair color, eye color, self-described body features, liked and disliked colors and styles, fit preference, skin-exposure preferences, and styling goals), language, display and try-on output settings, free-text styling experience, and try-on model support profile management and cross-device sync. We also derive a minimized descriptive styling context to personalize recommendations you request.
• Wardrobe and images: garments, model photos, try-on input or reference images, results, feedback attachments, and file name, type, size, dimensions, and integrity information support validation, recognition, recommendations, try-on, display, and security.
• Recommendations and weather: natural-language messages, conversations, results, selected garments, preferences, and the current seasonal wardrobe. When you request local weather, necessary coordinates are sent once to QWeather; the server stores necessary weather facts returned by QWeather, not precise coordinates. City search text is sent to QWeather city search.
• Daba and interactions: canvas positions, tags, versions, and collections. Every work created in Daba or transferred from a recommendation conversation enters the public pool anonymously by default. Your private wardrobe, recommendation content not sent to Daba, and unsaved edits stored only on your device are not made public for that reason.
• Buttons and purchases: balance, reservations, ledger, products, Apple transaction identifiers, signed transaction material, and refund or reversal state support pricing, verification, accounting, reconciliation, anti-fraud, temporary restriction of new paid operations during refund review, and tax obligations. If you separately enable refund-consumption sharing on the purchase page, when Apple asks about a specific transaction we also create an immutable request-time snapshot from that transaction’s actual Button grant and the then-available balance to calculate delivery, percentage used, and a refund recommendation. Apple processes payment card details; we do not receive a full card number.
• Feedback and support: submitted text and files plus App version, build, OS version, and language help us resolve issues. Feedback does not automatically include hardware IDs, access tokens, Keychain contents, or full device logs.
• Message Center: we process system announcements, support or service messages addressed only to your account, sent times, and read status to communicate service matters and feedback outcomes and synchronize read state across devices. Direct messages are not shown to other users.
• Operations and security: network address, request time, API result, trace identifier, and security events necessary for delivery, rate limiting, troubleshooting, attack prevention, and audit. Security rate limiting uses hashed or minimized identifiers where practical.

3. Permissions and sensitive information

• Camera and Photos read access is used only when you actively capture or choose a garment, model, try-on image, or feedback attachment.
• Photos add-only access is requested only when you tap to save a successful try-on result and is not used to read your library.
• When-in-use location is requested once, after an explanation on the recommendation page, for local weather. There is no continuous background location. You can deny location and use city search; valid weather is still required before generating a recommendation.
• The current Message Center does not use notification permission or register a device push token. Messages appear only after you open the App and load the Message Center.
• Body measurements, an optional bra-cup value you provide, skin coloring, hair and eye color, self-described body features, styling preferences and goals, clear portraits, model photos, location, and purchase information may be sensitive. We process them only for the specific feature you choose and apply stricter access and storage controls. Do not upload another person’s unauthorized image or sensitive information.

4. Processors, disclosure, and third parties

We do not sell personal information, use IDFA for cross-app tracking, or integrate an advertising network in the current version. The following providers may process only what is necessary for a feature you choose:

• Apple for Sign in with Apple, App Store and StoreKit transactions, refunds, and authorization revocation. Only while your separate consent remains active, Apple may also receive a specific refund transaction’s delivery status, percentage used, and our refund recommendation. We do not send photos, styling content, prompts, specific tasks, or itemized usage.
• Alibaba Cloud: cloud computing, database and private object-storage infrastructure. Alibaba Cloud Model Studio receives garment images and instructions needed for recognition. Private images are accessed through short-lived controlled URLs.
• DeepSeek: requests, relevant conversations, garment attributes, weather and minimized profile descriptions needed for recommendations. Long-conversation summaries use only necessary history text and descriptions of selected garment categories, not photos.
• ApiMart: the image-service intermediary receiving garment images, model or portrait images, optional reference images and text instructions needed for garment standardization or virtual try-on. It may pass these to its downstream image-model service. This is not the same as the App calling the model maker directly.
• Profile data used by AI: recommendations receive minimized descriptions derived from measurements and appearance, not structured raw centimetres, kilograms or cup strings. A cup value may generate a low-confidence bust-fit cue sent to the recommendation model; it does not automatically create a body-correction goal. Self-described features may be included. Saved experience, structured preferences and goals are included only when enabled for the session. Personal information you type in a message may still be sent with that message.
• The task confirmation explains recipients and data purposes. Declining does not start that AI task. You can cancel future tasks, change optional profile data or contact us about your rights. Stopping new transfers cannot recall data already processed. Third-party retention, deletion and subsequent processing are governed by applicable agreements and law; deleting our copy does not itself delete a supplier copy.
• QWeather for necessary coordinates, date, language, or place queries after you request weather or search a city.
• Authorized authorities, advisers, or a business successor where required by law, necessary to protect rights, or part of a business transfer, subject to reasonable safeguards.

5. International processing

AI, weather, Apple, or cloud processing may occur outside your location. We limit data and use contractual and technical safeguards based on actual deployment. Before Mainland China is opened, we will complete the required specific notices, impact assessment, and separate consent for actual recipients and data. General consent to this Policy will not be treated as completing those steps.

6. Retention and deletion

• Account, wardrobe, profile and settings data are kept to provide the ongoing service. Garment deletion may initially be a soft deletion; files still referenced by historical works or tasks are not immediately physically deleted. Deleted recommendation sessions enter a 30-day recovery period before background cleanup. Account deletion initiates account-wide cleanup.
• Garment and reference images uploaded temporarily for one try-on are unlinked after success, failure or cancellation and removed by background cleanup with retries. This does not include permanent wardrobe images, saved model photos or images still referenced by historical tasks. Unbound or interrupted uploads have separate background cleanup.
• Successful try-on results and necessary history remain while the account and task are retained. Individual try-on-history deletion and automatic expiry are not currently provided. You can save a result to your device, request deletion at support@mryc.top, or initiate account deletion.
• Resolved or dismissed feedback is generally retained for 180 days and necessary feedback audit records for up to 730 days. Account deletion removes linkable feedback text and files unless law requires otherwise.
• Sessions have idle and maximum lifetimes and are revoked on expiry or sign-out. Transaction, refund, anti-fraud, and tax records are kept as required by law or dispute handling and are de-linked from account identity where practical.
• Account deletion freezes the account and revokes sessions first, then asynchronously removes linked identity, profile, files, wardrobe, tasks, and public content. Minimum financial or security facts required by law are not used for continued personalization.
• To prevent repeated starter offers after deletion and re-registration, we retain an irreversible eligibility marker derived from the Apple account identifier and remove its old account association. The marker can still be checked on re-registration; it is not used for personalized recommendations. Purchase, refund and minimum audit facts are retained for lawful purposes and necessary periods.
• We also retain legal-document versions and acceptance records, system announcements and their read status, support or service messages addressed to your account and their read status, and reporting/blocking records for authorization, service communication, cross-device synchronization, moderation, and security. Linkable direct messages are deleted with the account; global announcements remain. Backups, logs and supplier-held data follow their applicable retention and deletion arrangements; account deletion does not mean all copies disappear immediately from every system.

7. Security

We use HTTPS, private object storage, short-lived access URLs, access control, session revocation, server-side hashing or encryption for security credentials, and iOS Keychain storage for mobile refresh credentials. We limit internal and provider access, but no system is completely secure. Report a concern to support@mryc.top.

8. Your choices and rights

• You can view or change your account nickname, preset avatar color and animal character, personal styling information, styling experience, and settings in the App; the system-generated Daban ID cannot be changed. You can turn off new refund-consumption sharing with Apple on the purchase page and withdraw camera, Photos, or location permission in iOS Settings. You may also request deletion through the contact method below. Withdrawal does not affect earlier lawful processing or information already sent to Apple, but may disable a feature.
• You can delete garments, works, and other content where a delete control is provided. You can initiate permanent account deletion under My — Settings — Account & Security to remove linked data such as try-on records. If Apple authorization cannot be revoked automatically, the App directs you to Apple Account settings.
• For access, correction, portability, restriction, deletion, objection, complaint, or withdrawal requests, email support@mryc.top. We will verify identity and respond within the period required by applicable law.

9. Adults only

Accounts and online services are only for adults who have reached the legal age of majority where they live. We do not target minors or knowingly collect their personal information. Static preview without sign-in creates no account, calls no account business API, and uploads no personal information. If you believe a minor provided information, contact support@mryc.top; after verification we will restrict the account and delete the information as required by law.

10. Updates and contact

We may update this Policy when features, providers, or laws change and will show a new effective date. We will give reasonable notice of material changes. Send privacy questions, rights requests, or security reports to support@mryc.top.