← Back

Effective 6 September 2026

Privacy Policy

Fitly uses your Google identity for authentication and requests the limited drive.file permission to manage only files and folders created or opened through Fitly.

What is stored

Supabase stores your account, consent records, quota events, and opaque Google Drive file IDs. Your Google refresh token is encrypted in Supabase Vault and is never sent to the browser. Durable web body templates, garments, and generated looks live in your visible Fitly folders in Google Drive.

Image processing

For a try-on, Fitly temporarily copies the selected source images to private processing storage and sends them to the AI provider. Staging is removed after the attempt. If Drive delivery fails after generation succeeds, a private recovery copy may remain for up to seven days.

Mobile and web

Your account and daily quota are shared. Mobile and web image libraries are separate, so photos created in one client do not appear in the other.

Your choices

You can remove tracked content, revoke Fitly in your Google account, or delete your Fitly account. Revoking Drive access blocks image features but does not sign you out.