Privacy Policy

1. Introduction

Dreamfit ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in compliance with applicable laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other global privacy regulations.

This Policy describes what data we collect, how we use it, and your rights.

2. Data We Collect

We collect and process the following categories of personal and usage information to operate, maintain, and improve the Dreamfit Service:

2.1 Account Information

When you register or sign in to Dreamfit, we collect basic account details necessary to authenticate and communicate with you, including:

• Email address (used for account creation, authentication, and service-related communication)
• Apple ID credentials (if you choose to log in using Apple ID)

2.2 Uploaded and Generated Content

To provide the virtual try-on functionality, we collect and process:

• Images you voluntarily upload for apparel visualization and AI-based try-on generation
• Resulting generated images and videos, which are visible exclusively to you within your account

All uploaded and generated content is securely stored on encrypted cloud servers and retained only for as long as your account remains active. Once your account is deleted, all associated content is permanently removed in accordance with our data retention policy.

2.3 Technical and Usage Data

To ensure stable operation and improve user experience, we automatically collect certain non-identifiable technical data, including:

• Device information, such as model, operating system, and preferred language
• Application metadata, including app version, feature interaction metrics, and diagnostic logs (e.g., performance, crash, or error reports)

We do not collect, transmit, or share personal data through any third-party Software Development Kits (SDKs) or external analytics tools.

3. How We Use Your Data

We process your personal and usage data solely for legitimate and clearly defined purposes, as outlined below:

• Service Delivery: To operate, maintain, and provide you with full access to the Dreamfit platform and its core functionalities.
• Content Management: To store, process, and display the images and virtual try-on results you generate through the Service.
• Service Improvement: To analyze aggregated and anonymized data in order to enhance algorithmic accuracy, system performance, and user experience.
• Communication: To contact you with essential service information, security updates, or material changes to our terms or policies.
• Legal and Compliance Obligations: To meet regulatory requirements, enforce our Terms of Service, and respond to lawful requests from competent authorities.

4. Data Retention

4.1 Storage of Images Containing Face Data

When you upload photos that include your face, Dreamfit stores this content securely in order to:

• generate virtual try-on images or videos;
• allow you to view, re-generate, and manage these results within the app's internal gallery.

Although your face may appear in the photo, Dreamfit does not extract, analyze, or store biometric identifiers, and does not use facial information for identity verification, user tracking, advertising, or purposes unrelated to providing the try-on service.

4.2 Active Account Retention

All uploaded and generated content is retained only while your account remains active, allowing you to access your personal gallery and service history within the app.

4.3 Deletion and Erasure

When you delete your account:

• all associated personal data — including uploaded and generated content — is scheduled for permanent deletion from our systems within thirty (30) days;
• backups containing this data are also deleted within the same lifecycle window.

We do not use your content for training models or for third-party purposes.

4.4 Anonymized Data Retention

We may retain aggregated or anonymized datasets derived from your content for research or service-improvement purposes.

This data is irreversibly de-identified and no longer constitutes personal information.

5. Legal Basis for Processing (GDPR)

For individuals located in the European Union (EU) or the European Economic Area (EEA), we process personal data only where a valid legal basis applies under the General Data Protection Regulation (GDPR). Depending on the context of your interaction with Dreamfit, processing may rely on one or more of the following bases:

• Performance of a Contract: Processing that is necessary to provide, maintain, and support the Dreamfit Service, including account management, content generation, and related customer support.
• Legitimate Interests: Processing undertaken to enhance algorithmic performance, improve overall user experience, ensure service security, and conduct limited anonymized analytics—provided such interests are not overridden by your data-protection rights and freedoms.
• Consent: Processing based on your explicit consent, such as receiving optional communications or participating in research or feedback initiatives. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing and Disclosure

We value your privacy and handle your personal information with the highest level of care and confidentiality. Dreamfit does not sell, rent, or trade personal data under any circumstances.

We may share limited categories of information only with the following parties, and solely for the purposes described in this Privacy Policy:

• Authorized Service Providers: Trusted third-party vendors that provide secure cloud hosting, data storage, and technical infrastructure necessary to operate the Dreamfit Service. These providers process data strictly in accordance with our documented instructions and are contractually bound by confidentiality and data-protection obligations consistent with applicable laws.
• Regulatory or Legal Authorities: When required to comply with applicable laws, enforce our Terms of Service, respond to lawful government requests, or protect the rights, safety, and property of Dreamfit, our users, or the public.

All external processors and partners engaged by New Port LLC are vetted for compliance and operate under data-processing agreements (DPAs) that meet the standards of the GDPR, CCPA, and other relevant international privacy frameworks.

7. International Data Transfers

Your personal data may be stored or processed in countries outside your country of residence, including the United States, where data-protection standards may differ from those in your jurisdiction.

Whenever such international transfers occur, New Port LLC implements appropriate safeguards to ensure that your information remains protected in accordance with applicable privacy laws, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers involving EU/EEA residents; or
• Equivalent contractual and organizational safeguards recognized under other regional data-protection frameworks.

We also apply internal security and privacy controls to ensure consistent protection across all jurisdictions where data is processed.

8. Your Privacy Rights

Depending on your location and applicable privacy laws, you may have the following rights regarding your personal data:

• Right of Access: Request confirmation as to whether we process your personal data and obtain a copy of such data.
• Right to Rectification: Request correction or completion of inaccurate or incomplete information.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: Request temporary or permanent limitations on how we process your data.
• Right to Data Portability: Obtain your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller where technically feasible.
• Right to Object: Object to processing carried out on the basis of legitimate interests, including for analytics or service-improvement purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@dreamfit.ai . We will respond to verified requests in accordance with applicable laws and within statutory timeframes.

9. Children's Privacy

Dreamfit is not intended for, and does not knowingly collect personal data from, children under the age of 13, or the minimum age required by local law in your jurisdiction.

If we become aware that personal information has been collected from a child without verifiable parental consent, we will take immediate steps to delete such information from our systems.

10. Security Measures

We implement a combination of technical, administrative, and organizational safeguards designed to protect your personal data against unauthorized access, loss, misuse, or alteration, including:

• Encryption of data both in transit and at rest;
• Access controls to limit internal data exposure;
• Continuous monitoring for system vulnerabilities and intrusions;
• Regular audits, penetration testing, and secure backups.

While we strive to protect your information, no online system or transmission method can guarantee absolute security. You acknowledge and accept this inherent risk when using the Service.

11. Changes to This Policy

We may revise or update this Privacy Policy periodically to reflect changes in technology, legal requirements, or our operational practices.

When material updates occur, we will notify users through in-app notifications or other appropriate means and update the "Last Updated" date below. Continued use of Dreamfit following such updates constitutes your acknowledgment and acceptance of the revised Policy.

Last Updated: November 2025

12. Contact Us

For privacy inquiries, please contact:

Email: wangziyue@newport.ai.com

Address: 201 Redwood Shores Pkwy, 375, Redwood City, California 94065, US