Privacy Policy

Last updated October 9, 2026

This policy explains what information Rizz My Fit (“we”, “us”) collects when you use rizzmyfit.com, how we use it, and how you can have it deleted.

Information we collect

From your sign-in provider

You sign in with Google, Facebook or Apple. From that provider we receive your email address, your name and, for Google and Facebook, the address of your profile picture. We record which provider you used. We never receive your password. If you use Apple’s “Hide My Email”, we only receive the relay address Apple gives us.

Photos you upload and the images we generate

When you create a fit, we store the photo you upload and the images generated from it, along with the style you chose. These are kept for 7 days and then deleted automatically (see How long we keep it).

Purchases

Token purchases are processed by Stripe. Your card details go directly to Stripe and are never seen or stored by us. We pass Stripe your email address and account ID so the payment can be matched to your account, and Stripe tells us when a payment succeeds.

Account activity

We store your token balance, a history of token grants, purchases and spending, and whether you have accepted our terms of use.

Technical information

• Cookies: we use a session cookie to keep you signed in and short-lived cookies to protect the sign-in process. With your permission we also use Google Analytics cookies (see Analytics). We do not use advertising cookies.
• Browser storage: your light/dark theme choice, your style options and your cookie choice are saved in your browser and never sent to us.
• Server logs: like most websites, our servers log requests (such as IP address, time and page) and sign-in events, which we use to run and secure the service.

Analytics

We use Google Analytics to understand how the site is used: which pages are visited, which features and styles are popular, where visitors come from, and whether generations and purchases succeed. Google Analytics receives your IP address (which it uses to estimate your city and country, then discards), your browser and device type, the pages you visit and the actions you take, and a random account ID that lets us count your visits across devices. It never receives your name, email address or photos, and we don’t use it for advertising.

In the European Economic Area, the UK and Switzerland, Google Analytics only sets cookies after you accept them; elsewhere they are on until you decline. Either way you can change your choice at any time with Cookie settings at the bottom of the page. If you decline, we remove the cookies and send Google only anonymous, cookie-free measurements.

How we use your information

• To sign you in and operate your account.
• To generate restyled images from the photos you upload.
• To process purchases and keep your token balance accurate.
• To prevent abuse, fix problems and keep the service secure.
• To understand how the service is used and improve it (see Analytics).

We do not sell your information, use it for advertising, or use your photos to train AI models.

Who we share it with

• Sign-in providers (Google, Facebook, Apple), which handle authentication under their own privacy policies.
• Stripe, for payments, as described above.
• Google Analytics, for usage measurement, as described above. Google keeps analytics data for 14 months.
• Content delivery networks (Google Fonts, jsDelivr and cdnjs), which serve the fonts, icons and styles our pages use and so receive your IP address and browser details when a page loads.
• People you share with. If you share an image, anyone with the link can view it until you delete it or it expires.
• Authorities, if we are required to by law.

How long we keep it

• Uploaded photos and generated images: deleted automatically 7 days after creation, or straight away when you delete a fit. Share links stop working at the same time.
• Account information and token history: kept while your account exists and deleted when you ask us to delete your account.
• Payment records: held by Stripe, which may keep them as required by tax and financial law.

Your choices and rights

You can ask us for a copy of your information, ask us to correct it, or ask us to delete your account and everything associated with it. See our data deletion instructions, or email us at [email protected]. Depending on where you live, you may have further rights under local law, such as the right to complain to a data protection authority.

Children

Rizz My Fit is not intended for children under 13, and we do not knowingly collect their information. Do not upload images of minors. If you believe a child has used the service, contact us and we will delete their information.

Security

Images are stored privately and are only served to you or through signed share links. Connections to the site are encrypted. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be announced in the app.

Contact

Questions about privacy: [email protected]