Privacy Policy

Last modified: September 13, 2024

Welcome to privacy at Muse: AI Fit-Check.

We care about your privacy and want to be upfront about how we treat your data when using the service ("Service") that Muse: AI Fit-Check ("Muse") offers: what we collect, why we collect it, where it all goes, for how long, your rights, and what you can ask us to do with it. So we wrote this policy ("Privacy Policy") to explain it to you in the clearest and simplest way we know.

Caring about your privacy means that you don't have to worry that your data is being misused or misappropriated. Sometimes we'll make decisions relating to your data on your behalf, but please know that these decisions are made in the best interests of you and other Muse users.

Your use of our Service is subject to our Terms of Service. Please read it – it's important that you understand and agree to what you're signing up for before using any of our Service.

As always, feel free to reach out to us at contact@muse-labs.xyz should you ever have any questions related to this policy.

Muse is your data controller

Muse is the "controller" of your data as described in this Privacy Policy. By your "data", we mean any piece of data that identifies you directly (such as your photo, your name, or your phone number) or indirectly (such as your user ID, your location, or the technical data related to your device). This in short means that law requires us to take your privacy very seriously. We're not just saying we do… we really do.

As "controller", we process some of your data to power our Service. Processing your data, however, does not mean we can do what we want with it. We follow all the rules and create even more ourselves. We provide a lot of Service – most of which can't work without your data, and therefore we use your data according to this Policy and our Terms.

What kind of data do we collect?

There are three categories of data we collect: data you provide us; data we collect through the use of our Service; data we collect from third parties.

Data you provide us

Account data: When you register for the Service you provide us with your first name, last name, age, and phone number. We cannot provide the Service without these. We'll then send you a verification code via text message to enable us to verify your account.
Profile picture: If you want, you may also add a profile picture to make it easier and more fun to interact with your friends.
Contacts: We also ask you to share your contacts to let you easily find friends that are already active on our Service. Sharing your contacts also makes it easy to invite friends. When you provide access to your contacts we also get access to your own contact information, this can include your email address. You could also receive a text message from us through one of our partners to connect you with your friends on the app.
Location: Muse is always evolving. We create many features built around your experience of the world and the people in it. In order for our Service to fully function we need access to your location and history while on Muse. You provide this to us through the permission settings on your phone. We collect your location using methods that include GPS, wireless networks, cell towers, Wi-Fi access points, and other sensors, such as gyroscopes, accelerometers, and compasses. We use this range of data sources to give the friends you choose the most accurate picture of where you are or were.
Communications: You also provide us with any other data you send through our Service, such as comments, images, videos, and other media to your friends. We also keep track of communication metadata, such as the time and date of correspondence.
Media: You provide media created during your time using Muse such as pictures, videos, photos and more.
Support: Data you provide to our support team. This includes the content of our communications, photos, copies of government issued identification, and identifiers like the method you used to contact us.
Exercising your rights: When exercising your data protection rights (contact@muse-labs.xyz), we receive data from you that is necessary to identify and respond to you.
Transaction data: If you purchase paid features or subscriptions, we retain your purchase and subscription history. However, we will not be processing your payment data, it will be collected and processed via the store (App Store, Google Play Store).

Data we get from your usage of the service

• Usage data: We collect data with regards to your activity on any of the Service. For example, how you interact with AI fit-checks, how much content you create in a day, search results when you look for fashion inspiration, and so on. This helps us understand what you like and how we can improve.
• Interaction data: Your interactions with AI fit-checks, the number of fit-checks requested, comments you leave on content shared by others, the styles you interact with the most, and functional data related to comments or messages.
• Location data: We collect location data and location history so we can build useful and fun service and features for you, like giving context about where your outfit photos were taken or suggesting location-appropriate styles.
• Device data: We collect a variety of device-specific data, the BSSIDs of Wi-Fi terminals, as well as the SSIDs (the address of any WiFi routers you're connected to) but only in a temporary manner and for statistical purposes. We also collect whether or not headphones are connected, your phone name, phone hardware model, operating system version, unique device identifiers, phone language, wireless network names, IP addresses, and general mobile network data. This helps us protect your security, fix bugs, and improve the precision of your location and AI fit-check recommendations, for example.

Data we collect from third parties

We may obtain data from other companies that are owned or operated by us — or any other third party sources — and combine that with the data we normally collect through our service:

• Other users: We may receive data from other users, especially in user-generated content, support requests, and user reports.
• Business partners: We may receive data from trusted business partners, such as app stores or operating system providers and analytics providers.
• Law enforcement and NGOs: We may receive data from non-governmental or law enforcement organizations for safety purposes, investigations, or legal proceedings.

How do we use your data?

We use your data to:

• Develop, operate, improve, deliver, maintain, and protect our Service.
• Send you communications, including by email. For example, we may use email to respond to direct support inquiries.
• Create statistical studies and analyze trends:
- Statistical studies: Creating statistical studies on an anonymous basis. For example, we may look for groups of users with similar style preferences or usage patterns to see if we can improve the user experience of the Service.
- Registration statistics: Determining which groups like country, users of different phone types, operating systems, etc. are statistically relevant to the different studies that we conduct on an aggregate basis.
- Style trends over time: We may measure and analyze the fashion trends of users over time. This can enable us to add useful features like seasonal style recommendations.
• Enhance the safety and security of our products and service.
• Assess the success rate of our marketing campaigns.
• Send you push notifications to get updates when friends interact with you.
• Verify your identity to prevent fraud or other unauthorized or illegal activity.
• Enforce our Terms of Service and other usage policies.
• Respond to your exercise of rights requests.
• Store data locally on your phone, so that you can open the app and view content faster.

What are our bases for using your data?

As a company, we are only allowed to use your data when certain conditions apply. These conditions are called "legal bases" and, at Muse, we typically rely on one of four:

• Contract: We may use your data should it be needed to be able to provide our service to you as described in our Terms of Service. Because Muse's Service may use your camera and location, we need to access and store said data in order to offer our Service to you. This data is needed to provide you with the full Muse experience.
• Legitimate interest: We may need to use your data to provide and improve our service, including protecting your account, delivering our Service, providing customer support, helping you find style inspiration, or to detect fraudulent activity. We only rely on legitimate interest when we believe that the way we use your data doesn't significantly impact your privacy.
• Consent: In some cases, we may ask for consent to use your data for specific purposes. If we do, we'll make sure you can revoke your consent to our Service or through your device permissions. Even when we do not rely on consent to use your data, we may ask you for permission to access it via your device permissions.
• Legal obligation: We may be required to use your data to comply with the law, like when we respond to valid legal processes or need to take action to protect our users.

Who can have access to your data?

A lot of good people are involved with providing you with our Service. Here's who they are and how we may share your data with them:

• Muse employees: As our Service can't run themselves for now, authorized Muse employees may access your data to provide our Service or required support. Such access is only granted within the scope of their responsibilities and only for the data which they need to access in order to carry out these responsibilities.
• Other users who use our Service: You can find more information about this in the section below.

• Data you share when using our Service features, such as your name, friend list, number of friends, and profile picture. When you create your profile, keep in mind that it's public and can be viewed by others.
• The content shared on the feed to your friends, including AI fit-checks and outfit photos.
• Information about how you have interacted with the Service such as the day you joined.
• When sending a friend request, your profile name, friends you have in common, and in some cases your education or your job if you chose to share them, so the receiver can make a better decision on whether or not to accept the friend request.
• If you let us access and share your device's contacts, we may share data about you with other users who have your name and phone number in their device's contacts.

• Our affiliates: That means that we may share data with entities within Muse: AI Fit-Check.
• Third parties: We may share your data with third parties for the following purposes:

• Service providers and partners: We may share data about you with service providers who perform Service on our behalf and business partners that provide service and functionality, including partners who may show ads for the Service on their platforms.
• Third parties for legal reasons: We may share data about you if we reasonably believe that disclosing the data is needed to:
- • Comply with any valid legal process, governmental request, or applicable law, rule, or regulation.
- • Investigate, remedy, or enforce potential Terms of Service violations.
- • Protect the rights, property, and safety of us, our users, or others.
- • Detect and resolve any fraud or security concerns.
• Other third parties: We may also share aggregated, non-personally identifiable or non-identifiable data.
• Third parties as part of a merger or acquisition: If Muse gets involved in a merger, asset sale, stock sale, share sale, financing, liquidation or bankruptcy, or acquisition of all or some portion of our business to another company, we may share your data with that company before and after the transaction closes. Sharing just in case although we have no plans of going anywhere!

How long do we keep your data?

We store your data as long as you're a user of our Service and have different retention protocols in place for different types of data. You can find details on said retention protocols in our data processing recap chart, but in any case, we'll always delete or anonymize your data at the end of the periods indicated.

If you haven't opened or used the Service for more than 36 months, we will delete your account and its associated data. We of course won't delete your data as long as you remain a user of the Service.

The following data is stored as long as you are actively using the Service:

• Your name and phone number;
• Your age and profile picture;
• Your contacts;
• Friend requests and friend list;
• Your written messages and images;
• Location history;
• Your device and usage data;
• AI fit-check history and preferences.

Should you not feel comfortable sharing your data you may delete your account at any time. The following section provides more information on how you may do so.

Your control over your data

• Access: We let you access and update most of the data that we have about you. Most of this can be done in the profile section of the app. If you need to access, update, or delete any other data that we may have, you can contact us through our support channels. Note that we may ask you to verify your identity or provide additional information before we can provide access to your data.
• Contact data: You can change your contacts sharing setting at any time in the settings or through your device permissions.
• Object: You have the right to object to our use of your data. For data without which we cannot provide the Service, you can delete your account to stop us from processing your data.
• Correct: You can also correct your data should you find information incorrect.
• Delete: You can easily delete data in app such as any messages sent (including media like images and videos) or friends you've added. If you want to delete your location history, you can do this by deleting your account. As some service rely on location history, it is not possible to reset your location data.
• Account deletion: We don't like seeing you go, but if for some reason you want to delete your account you can always reach out through our support channels to request your account's deletion.
• Account un-deletion: If you've asked us to delete your account and then changed your mind and want it back, you have up to 30 days to restore your account before we delete your data from our servers. During this period, your account will not be visible to other users.
• Data portability: You have the right to obtain, in a structured and machine-readable form (something that your computer can decipher), the data that you provide us directly on the basis of your consent or on the basis of the contract.
Define handling of your data after your death: You have the right to give instructions regarding whether Muse should communicate this data (or not) to a previously designated third party.
• Lodge a complaint: If you believe the processing of your data infringes on your rights or data protection regulation, you have the right to file a complaint with your local supervisory authority.

Please reach out at any time. We'll try our best to get back to you fast, but we're only human, so if your request is complex or if you make too many, we may need some time to answer.

Data transfers outside of the European Union

Similar to our transfer of your data to third parties, your data can be transferred and be accessible to third parties and users outside of the European Union. This can include countries that may not have the same level of protection of your data as those within the EU. Whenever we share your data outside the EU with third parties we make sure adequate mechanisms are in place to protect your data.

Any transfers of data originating from within the European Economic Area, the United Kingdom, and Switzerland to countries outside the EEA, UK, or Switzerland will normally be made on the basis of:

• The data privacy framework when the providers are located in the United States and appear on the department of commerce's list.
• The model clauses approved by the European Commission for transfers from EU controllers to non-EU controllers, which may be found at the Commission's website. We do not retain the data we collect longer than is reasonably necessary to fulfill the purposes for which we collect the data in line with our legal obligations

We're always happy to answer any questions you may have about data sharing to countries outside the EU, so feel free to reach out through our support channels should you ever have any questions.

Future revisions

Times change, and so will this Privacy Policy. We'll update it to take into account any technical, economic, regulatory, or legal developments in order to comply with any changes in applicable laws and regulations, or data practices. When we do, we'll make sure to let you know.

That's it for now

Always feel free to reach out through our support channels or to our data team at contact@muse-labs.xyz – we love reading emails so don't be shy.

Data processing Chart

Here is the data processing chart that outlines the purposes of data processing, the data processed, the legal grounds for processing, and the retention period for each type of data.

Purpose of the processing	Data processed	Legal ground for the processing	Retention period
Creating your account and identifying you when you log in.	Mandatory profile data (name, age, phone number).	Performance of the contract between you and Muse.	Duration of your use of the service or until you request the deletion of your account.
Providing you with the Service (allowing you to publish content, including by specifying your location and receiving AI fit-checks).	Content related data.	Performance of the contract between you and Muse.	Duration of your use of the service or until you request the deletion of your account or data.
• Measure your use of our Service, which features you like the most, which you like the least, calculate statistics on the use of the Service and analyze them. • Design and develop new features for Muse and carry out tests before launching them. • Understand and solve any technical problems you may encounter. • Manage our internal communication and marketing activities, such as animating the Muse community, or carrying out internal statistical studies. • Measure the quality of the answers we give you when you contact our support team. • Improve the user experience, the technical operation of the Service and the way users can communicate on the Service.	• Usage data, Communications with Muse • Data related to devices and equipment used.	Legitimate interest to provide functional Service.	2 years from collection date.
Addressing complaints and reports from users and moderation of content in accordance with our Terms of Service.	• Content Data • Data about your activity on Muse.	Legitimate interest to provide safe Service.	Duration of the use of the service augmented by 5 years.
Allowing you to publish content on the Service, viewable through the feed, and receive AI fit-checks.	• Data sent by your phone's camera • Photos stored on your phone • Content creations • Location data.	Performance of the contract between you and Muse.	Duration of the use of the service or until you request the deletion of the data.
Moderation of content in accordance with the law (prevention of illegal activities, fraud, cyber harassment, ...) and our Terms of Service.	• Content Data, • Data about your activity on Muse.	Compliance with our legal obligations.	1 year from collection for metadata. Up to 5 years (statutory limitation) for data retained for dispute prevention purposes.
Connecting you with your friends.	Contacts data.	Performance of the contract between You and Muse.	Duration of use of the Service.
Sending you text messages to connect you with friends and communicate with you.	Contacts data, including phone number.	Legitimate interest.	Duration of use of the Service.
Allowing you to make purchases, including subscriptions.	Transaction data transmitted by the Store.	Performance of our contract with you.	Time required to complete the transaction augmented by 10 years for accountancy obligations.

List of data processors

We work with the following data processors to provide our Service:

Data Processor	Purpose
Google Analytics	Analytics and usage tracking
GCP (Google Cloud Platform)	Cloud infrastructure and hosting
GitHub	Code repository and version control
PhotoRoom	Image processing and editing
RevenueCat	Subscription and payment management

We may add or remove data processors from time to time. We will update this list accordingly.

Contact us

If you have any questions about this Privacy Policy, please contact us at contact@muse-labs.xyz.