The short version: we do not keep your original photos. Photos are processed to produce a score and then discarded. A small thumbnail (360px) is only kept when you choose to share a result, and it is deleted automatically after 30 days. We never use your images for face recognition.
1. Who we are
OOTD Score ("we", "us") operates the outfit-scoring web application available at this domain. For privacy questions or requests, contact [email protected].
2. What we collect
- Account data: email address and a bcrypt hash of your password. We never store plain-text passwords.
- Outfit photos: the image you upload is transmitted to our server, converted to a standard format, analysed, and the score is returned. The original image is not written to disk.
- Share thumbnails: if you use the share feature, a downscaled 360px thumbnail is stored so the link shows your result. This is deleted automatically after 30 days.
- Score records: occasion, score, grade, summary and suggestions. No photo data is included.
- Technical data: IP address (also hashed for rate limiting), approximate country, browser/User-Agent, pages visited, session cookie, timestamps — used for security and anonymous traffic statistics. Access records are kept for 90 days.
3. How we use it
- To produce your outfit score and suggestions.
- To operate accounts, credits and referral rewards.
- To prevent abuse (rate limits, duplicate-signup detection).
- To improve the product in aggregate, non-identifying form.
4. Photo processing and AI providers
To score an outfit we send the image to a third-party vision model provider through an API. The transfer is used solely to generate your result. We select providers that do not train their models on API customer data, and we do not permit our inputs to be used for model training.
We do not perform facial recognition, face-template extraction, or biometric identification. The model describes clothing, colour and silhouette; it does not create a biometric identifier of you.
5. Legal bases (GDPR)
- Contract — providing the scoring service you request.
- Consent — uploading a photo is your explicit choice, and you may withdraw it by deleting the score or your account.
- Legitimate interests — fraud prevention, security, service integrity.
6. Retention
- Original photos: not stored.
- Share thumbnails: 30 days, then automatically erased.
- Score records and account data: until you delete them or your account.
- Hashed IP counters used for rate limiting: 90 days.
7. Your rights
You may access, correct, export or delete your data at any time. The app includes a "Delete my data" action that permanently removes your account, scores and thumbnails. You can also email us. EU/UK users may lodge a complaint with their local supervisory authority; California residents may exercise CCPA/CPRA rights on the same basis.
8. Sharing
We do not sell personal data. We share data only with: (a) our hosting provider, (b) the AI model provider (image only, for scoring), and (c) authorities where legally required.
9. Children
The service is intended for users aged 13 and over (16 and over in the EU/UK). We do not knowingly collect data from younger children; if you believe a child has provided data, contact us and we will delete it.
10. Security
Passwords are hashed with bcrypt, sessions use HttpOnly cookies, images are processed in memory, and access to production data is restricted. Traffic will be served over HTTPS once our domain is live.
11. Changes
We may update this policy; material changes will be announced in the app. Continued use after an update constitutes acceptance.
隐私政策
最后更新：2026 年 11 月 5 日
一句话总结：我们不保存你的原始照片。照片仅用于生成评分，处理完即丢弃。只有当你主动分享时，才保留一张 360px 缩略图，且 30 天后自动删除。我们绝不将你的照片用于人脸识别。
1. 我们是谁
OOTD Score（"我们"）运营本域名下的穿搭评分网页应用。隐私相关问题或请求请联系 [email protected]。
2. 我们收集什么
- 账号数据：邮箱地址与密码的 bcrypt 哈希值。我们从不存储明文密码。
- 穿搭照片：你上传的图片会传输到服务器、转为标准格式并分析后返回评分。原始图片不会写入磁盘。
- 分享缩略图：仅在你使用分享功能时保存一张 360px 缩略图，以便链接展示你的结果；30 天后自动删除。
- 评分记录：场合、分数、等级、总结与建议，不含任何照片数据。
- 技术数据：IP 地址（部分哈希后用于限流）、大致国家/地区、浏览器标识、访问页面、会话 Cookie、时间戳——用于安全与匿名流量统计，访问记录保留 90 天。
3. 用途
- 生成你的穿搭评分与搭配建议；
- 维护账号、点数与邀请奖励；
- 防止滥用（频率限制、重复注册检测）；
- 以匿名聚合方式改进产品。
4. 照片处理与 AI 服务商
为生成评分，我们会通过 API 将图片发送给第三方视觉模型服务商，仅用于生成本次结果。我们选择不使用 API 客户数据训练模型的服务商，且不允许将我们的输入用于训练。
我们不做人脸识别、不提取人脸模板、不做生物特征识别。模型只描述服装、颜色与版型，不会为你建立生物特征标识。
5. 法律依据（GDPR）
- 合同履行 —— 提供你请求的评分服务；
- 同意 —— 上传照片是你的主动选择，可通过删除评分或账号撤回；
- 正当利益 —— 防欺诈、安全与服务完整性。
6. 保留期限
- 原始照片：不保存；
- 分享缩略图：30 天后自动清除；
- 评分记录与账号数据：直至你删除或注销账号；
- 用于限流的哈希 IP 计数：90 天。
7. 你的权利
你可随时访问、更正、导出或删除个人数据。应用内提供 "删除我的数据" 功能，会永久清除你的账号、评分与缩略图；也可邮件联系我们。欧盟/英国用户可向当地监管机构投诉；加州居民可依 CCPA/CPRA 行使同等权利。
8. 共享
我们不出售个人数据。仅与以下方共享：(a) 托管服务商；(b) AI 模型服务商（仅图片、仅用于评分）；(c) 法律要求时的执法机关。
9. 未成年人
本服务面向 13 岁及以上用户（欧盟/英国为 16 岁及以上）。我们不会有意收集更低龄儿童的数据；如你认为儿童提供了数据，请联系我们删除。
10. 安全
密码使用 bcrypt 哈希，会话使用 HttpOnly Cookie，图片在内存中处理，生产数据访问受限。域名上线后将全站启用 HTTPS。
11. 变更
我们可能更新本政策，重大变更将在应用内公告。更新后继续使用即视为接受。