Daban Wardrobe Privacy Policy

1. Controller

The personal information controller is Xiang Wang. Contact support@mryc.top. This Policy applies to the Daban App, account, and related online services, not services independently provided by Apple or another third party.

2. Information and purposes

• Account and identity: Apple’s stable account identifier and, when authorized, your name and private relay or actual email; a random installation identifier, session, login challenge, and security state support account creation, sign-in, replay prevention, and deletion. The installation identifier is a random UUID, not an advertising ID or hardware serial number.
• Profile and settings: display name, avatar, language, display and try-on output settings, free-text recommendation preferences, and try-on model support personalization and cross-device sync.
• Wardrobe and images: garments, avatars, model photos, try-on input or reference images, results, feedback attachments, and file name, type, size, dimensions, and integrity information support validation, recognition, recommendations, try-on, display, and security.
• Recommendations and weather: natural-language messages, conversations, results, selected garments, preferences, and the current seasonal wardrobe. If you enable local weather, necessary coordinates are sent once to a weather service; the server stores normalized weather facts, not precise coordinates. City search text is sent to a location search service.
• Daba and interactions: canvas positions, tags, versions, collections, and publishing state. Works directly completed or expressly published may appear anonymously in the public pool. A private wardrobe, private draft, or unpublished content is not made public for that reason.
• Buttons and purchases: balance, reservations, ledger, products, Apple transaction identifiers, signed transaction material, and refund or reversal state support pricing, verification, accounting, reconciliation, anti-fraud, and tax obligations. Apple processes payment card details; we do not receive a full card number.
• Feedback and support: submitted text and files plus App version, build, OS version, and language help us resolve issues. Feedback does not automatically include hardware IDs, access tokens, Keychain contents, or full device logs.
• Operations and security: network address, request time, API result, trace identifier, and security events necessary for delivery, rate limiting, troubleshooting, attack prevention, and audit. Security rate limiting uses hashed or minimized identifiers where practical.

3. Permissions and sensitive information

• Camera and Photos read access is used only when you actively capture or choose an avatar, garment, model, try-on image, or feedback attachment.
• Photos add-only access is requested only when you tap to save a successful try-on result and is not used to read your library.
• When-in-use location is requested once, after an explanation on the recommendation page, for local weather. There is no continuous background location, and recommendations can continue without it.
• Clear portraits, model photos, location, and purchase information may be sensitive. We process them only for the specific feature you choose and apply stricter access and storage controls. Do not upload another person’s unauthorized image or sensitive information.

4. Processors, disclosure, and third parties

We do not sell personal information, use IDFA for cross-app tracking, or integrate an advertising network in the current version. The following providers may process only what is necessary for a feature you choose:

• Apple for Sign in with Apple, App Store and StoreKit transactions, refunds, and authorization revocation.
• Cloud infrastructure and object-storage providers for APIs, databases, queues, and private images accessed through short-lived controlled URLs.
• AI providers for the images, garment structure, and instructions needed after you confirm recognition, recommendation, or virtual try-on.
• Weather providers for necessary coordinates, date, language, or place queries after you enable weather or search a city.
• Authorized authorities, advisers, or a business successor where required by law, necessary to protect rights, or part of a business transfer, subject to reasonable safeguards.

5. International processing

AI, weather, Apple, or cloud processing may occur outside your location. We limit data and use contractual and technical safeguards based on actual deployment. Before Mainland China is opened, we will complete the required specific notices, impact assessment, and separate consent for actual recipients and data. General consent to this Policy will not be treated as completing those steps.

6. Retention and deletion

• Account, wardrobe, profile, settings, recommendation history, try-on results, and private works are generally retained until you delete them, delete the account, or the purpose no longer exists.
• Try-on input and reference images are temporary and are cleaned after a task succeeds, fails, or is cancelled. Unbound or interrupted uploads are removed by background cleanup.
• Resolved or dismissed feedback is generally retained for 180 days and necessary feedback audit records for up to 730 days. Account deletion removes linkable feedback text and files unless law requires otherwise.
• Sessions have idle and maximum lifetimes and are revoked on expiry or sign-out. Transaction, refund, anti-fraud, and tax records are kept as required by law or dispute handling and are de-linked from account identity where practical.
• Account deletion freezes the account and revokes sessions first, then asynchronously removes linked identity, profile, files, wardrobe, tasks, and public content. Minimum financial or security facts required by law are not used for continued personalization.

7. Security

We use HTTPS, private object storage, short-lived access URLs, access control, session revocation, server-side hashing or encryption for security credentials, and iOS Keychain storage for mobile refresh credentials. We limit internal and provider access, but no system is completely secure. Report a concern to support@mryc.top.

8. Your choices and rights

• You can view or change your display name, avatar, recommendation preferences, and settings in the App, and withdraw camera, Photos, or location permission in iOS Settings. Withdrawal does not affect earlier lawful processing but may disable a feature.
• You can delete garments, works, and other content where a delete control is provided. You can initiate permanent account deletion under My — Settings — Account & Security to remove linked data such as try-on records. If Apple authorization cannot be revoked automatically, the App directs you to Apple Account settings.
• For access, correction, portability, restriction, deletion, objection, complaint, or withdrawal requests, email support@mryc.top. We will verify identity and respond within the period required by applicable law.

9. Adults only

Accounts and online services are only for adults who have reached the legal age of majority where they live. We do not target minors or knowingly collect their personal information. Static preview without sign-in creates no account, calls no account business API, and uploads no personal information. If you believe a minor provided information, contact support@mryc.top; after verification we will restrict the account and delete the information as required by law.

10. Updates and contact

We may update this Policy when features, providers, or laws change and will show a new effective date. We will give reasonable notice of material changes. Send privacy questions, rights requests, or security reports to support@mryc.top.