GDFT

Legal

Privacy Policy

Last updated: July 13, 2026

01 — Who we are

GDFT (“Good Fit”, “we”, “us”) provides a mobile application and web platform that lets you turn mirror selfies into a personal style archive, and optionally publish looks to a public creator profile. This policy explains what data we collect, why, and the choices you have. It applies to the GDFT iOS app and the websites at gdft.co.

For any privacy question or request, contact us at privacy@gdft.co.

02 — Data we collect

Account information. When you create an account we collect your email address, username, and password credentials (handled by our authentication provider; we never store plaintext passwords).

Photos and looks. The photos you capture or upload — your mirror selfies — along with metadata you add such as titles, descriptions, and tags. Photos remain private to your account unless you explicitly publish a look to your public profile.

Style data. Information derived from your looks, such as detected garments, colors, styles, and trends. This is the “style archive” the product is built around, and it belongs to you.

Profile information. If you publish a creator profile: your display name, bio, avatar, social links, and shopping links.

Usage data. Standard analytics such as pages visited, referrers, approximate location (country/region level), device type, and interactions like product clicks. We use this to understand and improve the product.

03 — How we use your data

We use the data described above to:

— Provide the core service: storing your looks, building your style archive, and serving your public profile if you publish one.
— Power intelligent features, such as style analysis and search across your looks.
— Surface relevant products on creator profiles, including affiliate-linked products.
— Measure and improve performance, reliability, and usability.
— Communicate with you about your account and important changes to the service.

We do not sell your personal data.

04 — Public profiles

Publishing a look is an explicit action. Anything you publish — looks, profile details, style descriptions — is publicly visible to anyone with your profile link, and public look images are served through our content delivery network for performance. Unpublishing a look removes it from your public profile and deletes the publicly served copy.

05 — Where your data lives

Your data is stored with our infrastructure providers: Supabase (database, authentication, and private photo storage) and Cloudflare (hosting and content delivery for published images). Data is encrypted in transit. We retain your data for as long as your account exists; see section 08 for deletion.

06 — Third parties

Analytics. We use Google Analytics on our web platform to understand aggregate usage. Google may set cookies for this purpose.

Affiliate links. Product links on creator profiles may be affiliate links operated through Skimlinks. When you click one, the click is routed through Skimlinks and the destination merchant may compensate us or the creator. Skimlinks may process click data under its own privacy policy.

We do not permit third parties to use your photos or style data for training AI models, and we block known AI crawlers from accessing published profiles.

07 — Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app; for anything else, email privacy@gdft.co and we will respond within 30 days.

08 — Deleting your data

You can delete individual looks at any time, which removes them from our storage and, if published, from the CDN. You can delete your entire account in the app settings; this permanently removes your account, photos, style archive, and profile within 30 days, except where retention is legally required.

09 — Children

GDFT is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

10 — Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the app or by email before they take effect. The date at the top reflects the latest revision.