1. Types of Information Collected
Sole collects limited and necessary information to deliver the virtual hat try-on service, including:
- Account Information: Email address, username (optional: display name) when creating an account, used only for identity verification and service communication.
- Image Data: Portrait photos uploaded by you for virtual try-on, including facial/head shape features extracted (processed locally as much as possible to protect privacy).
- Usage Data: Non-identifiable data such as hat styles you interact with, app session duration, device model, and screen size (for optimizing try-on experience).
- Technical Data: IP address (only for regional service optimization), app version, and crash logs (for fixing technical issues).
2. Purpose of Information Use
We use your information solely to provide and improve the Sole service, with no unrelated commercial use:
- To enable core virtual try-on functionality (adapting hat models to your head/facial features accurately).
- To personalize your experience (recommending hat styles based on your try-on history and preferences).
- To maintain app security and stability (detecting and preventing abnormal usage, fixing bugs).
- To respond to your inquiries and provide customer support (via the contact email you provided).
- To optimize service performance (using aggregated, non-identifiable data to improve app usability).
3. Third-Party Service Data Processing
Sole may collaborate with trusted third-party providers to support service operation, and all data processing complies with privacy laws:
- Cloud Storage Providers: Encrypted storage of uploaded portrait images (data is encrypted in transit and at rest, only accessible to authorized Sole personnel).
- Analytics Tools: Collect aggregated usage data (e.g., popular hat styles) to improve user experience, with no personal identifiers shared.
- Payment Processors: For premium feature payments (payment information is processed directly by the processor, not stored by Sole).
All third parties are bound by strict data protection agreements and are prohibited from using your data for any purpose other than providing services to Sole.
4. Information Sharing Scenarios
We will never sell, rent, or disclose your personal information to third parties for commercial purposes. Information sharing only occurs in the following cases:
- With your explicit consent (e.g., sharing your try-on results to social media platforms).
- To comply with legal obligations (e.g., responding to court orders, regulatory inquiries, or protecting public safety).
- To protect Sole's legitimate rights and interests (e.g., preventing fraud, intellectual property infringement).
- In the event of corporate restructuring (e.g., merger, acquisition), your data will be transferred to the successor entity with the same privacy protection standards.
5. Security Measures
We adopt industry-leading security measures to protect your data from unauthorized access or leakage:
- End-to-end encryption for all uploaded image data (only decrypted on your device and authorized Sole servers).
- Password hashing for account authentication (no plaintext passwords stored in our systems).
- Regular security audits and vulnerability scans to identify and fix potential risks.
- Strict access control (only employees with job necessity can access personal data, and access is logged).
- Automatic deletion of uploaded images after 12 months of inactivity (you can also request immediate deletion at any time).
Note: While we take all reasonable security measures, no internet transmission or storage is 100% secure. We will notify you promptly if a data breach occurs and take remedial measures.
6. User Data Rights
In accordance with global privacy regulations (GDPR, CCPA, etc.), you have the following rights regarding your personal data:
- Right to Access: Request a complete copy of the data we hold about you (including uploaded images and account information).
- Right to Correction: Modify inaccurate or incomplete personal information (e.g., update email address).
- Right to Erasure: Request permanent deletion of your account and all associated data (processed within 7 business days).
- Right to Data Portability: Request your data in a machine-readable format (e.g., JSON/CSV) for transfer to other services.
- Right to Withdraw Consent: Revoke consent for non-essential data collection at any time (without affecting core service usage).
To exercise these rights, please send a request to our privacy team via the contact email below.
7. Children's Privacy Protection
Sole is not intended for use by children under the age of 13, and we do not knowingly collect personal information from minors under 13:
- If we discover that we have collected data from a child under 13 without parental consent, we will delete the data immediately.
- Parents/guardians who believe their child has provided personal information to Sole may contact us to request deletion.
- We do not display targeted advertising to users under 18, and all data collection for minor users (13-17) requires parental consent.
8. Policy Update Mechanism
We may update this Privacy Policy to adapt to legal changes or service upgrades:
- Updated policies will be posted in the Sole app with a new effective date (we will notify you of material changes via in-app message or email).
- Your continued use of Sole after the policy update constitutes acceptance of the revised terms.
- We will retain the historical version of the policy in the app for your reference (accessible in "Settings > Privacy").
We recommend reviewing this policy periodically to stay informed about how we protect your privacy.