Draft — being reviewed by a lawyer before launch. · draft-2026-10-04

Privacy Policy

Who we are. Jimp is a Canadian app that helps you style the clothes you own, share outfits, and buy and sell clothes. The founder of Jimp is responsible for protecting personal information and can be reached at support@jimpapp.com.

1. What we collect

• Account: email, username, display name, photo, date of birth, country and province, language.
• Your closet: photos of your clothes, the cut-out "stickers" we make from them, tags (category, colour, style), prices you enter, what you wear and when.
• Measurements (optional): height, chest, waist, hips, inseam, shoe size and usual sizes. Private: used only to give you size tips. Never shown to anyone else.
• What you do in the app: outfits you save, skip or wear; reactions, comments, follows, messages; searches; which features you use and how often (to decide what to build and what belongs in Pro).
• Daily 10 picks: which of two outfits you'd wear, how long you took, and quality checks on the picks.
• Ask Jimp: your questions, the tools the assistant used, its answers, and whether you confirmed a suggested action — only if you allow it (see section 4).
• Activity status: when you were last in the app, if "Show when you're active" is on. Only people you chat with or who follow you back see a green dot, and only while you're both allowing it.
• Shopping and selling: saved items, price alerts, saved searches, orders, shipping addresses, reviews, "Did it match the measurements?" answers.
• Seller accounts: shop name, contact email, country; for business sellers also legal name, address and tax number. Bank details go straight to Stripe — we never see them.
• Try it on (only if you use it): one photo of you. It's sent to the try-on provider and deleted as soon as the result is made. The result is kept only if you save it.
• Device and safety: app version, phone model, crash reports (no names or emails), and reports you make.

2. Why we use it

• To run Jimp for you: your closet, outfit suggestions, Ask Jimp, planner, size tips, feed, messages, marketplace and alerts.
• To keep Jimp safe: reports, blocking, fraud checks, the word filter, seller checks, and following the law.
• To improve Jimp's own style models — only with your permission (section 4).
• To decide which features are free and which are Pro, from how often features are used (counted per person per day).
• To follow seller-identity laws (section 7).

3. Outside AI companies

Before the first time any photo or text is sent to an outside AI company, Jimp asks you with one clear screen. "Not now" keeps the app working with AI features off. You can change it in Settings → Privacy → AI features.

• OpenAI — photos you add, what you type to Ask Jimp — to tag your pieces, explain outfits, answer your questions, write listing drafts
• Poof — photos of your clothes — to cut a piece out of its background when your phone can't
• FASHN (Try it on, only if you use it, adults only) — one photo of you and a product photo — to show the piece on you; your photo is deleted straight after

4. Your choices about training

• Use my picks to improve Jimp (Daily 10 picks, Ask Jimp questions): on for adults unless you switch it off; off for under-18s unless they switch it on themselves.
• Use my activity to improve Jimp's AI and Use my photos to train Jimp's AI (faces are cropped out first by automatic face detection, which can miss a face): separate switches, off and locked for under-18s, and off by default in Quebec, the EU/EEA, the UK and Switzerland.
• Turning a switch off removes your data from all future training. Your own suggestions always use your own data.
• Demo and test accounts are never used for training.

5. Who else sees your data

• People you choose to share with (posts, stories, Fit Checks, messages, a public closet).
• Service providers who run Jimp for us: Supabase (database and storage), Stripe (payments and seller payouts), RevenueCat and Apple (Pro subscriptions), Resend (emails), Expo (push notifications), Sentry (crash reports), Canada Post (shipping labels), the AI companies above, and affiliate networks Awin and Skimlinks (when you tap a shop link).
• Buyers see a seller's shop name, "Business seller" or "Private seller", and for business sellers the details the law requires (section 7).
• We don't sell your data and don't use it for third-party advertising.

6. Young people

Jimp is for ages 13 and up (14 in Quebec; your country's digital consent age in Europe). For under-18s:

• Their picks and questions aren't used for training unless they switch it on.
• Try it on is hidden.
• Swimwear can't be posted publicly and stays in their own closet.
• The marketplace stays 18+ as today.

7. Sellers and the law

Sellers of new goods, and high-volume sellers, must give us identity and contact details that consumer laws require (for example the US INFORM Consumers Act and the EU Digital Services Act rules for traders). We check bank details through Stripe, ask sellers to re-confirm their details once a year, and show buyers the details the law requires.

8. How long we keep it

• Your account data: until you delete your account (Settings → Privacy → Delete account), then within 30 days.
• Orders and payment records: as long as tax law requires (usually 6–7 years).
• Daily 10 quality marks: kept with the picks (never edited), deleted with your account.
• Try it on photos of you: deleted as soon as the result is made.
• Crash reports: 90 days.

9. Your rights

You can see, correct, download or delete your data, and withdraw consent, any time: Settings → Privacy, or email support@jimpapp.com. Depending on where you live (Canada, Quebec, EU/EEA, UK, California, Brazil) you have further rights; we'll answer within 30 days.

10. Automated decisions

Outfit suggestions, "goes with your closet" badges and scores are made automatically by software. They don't have legal effects on you. You can ask us how a suggestion was made at support@jimpapp.com.

11. Affiliate links

When you tap a product link, we record that you tapped it (who, which product, from where) so creators can be paid. The link opens the store through an affiliate network (such as Awin or Skimlinks), which may set its own cookie in your browser so the store can credit the sale. The app itself doesn't put tracking cookies on your device.

12. Deleting your data

Settings → Privacy → Delete account removes your account and data as described above. You can also delete single photos, posts, comments and closet items at any time.

13. Security

Your data is encrypted in transit and at rest, access is limited to people who need it, and chat photos and label files are private. If a breach creates a risk of serious harm, we'll tell you and the regulators as the law requires.

14. Website

jimpapp.com uses one kind of optional cookie: from our affiliate partner Skimlinks, which turns store links on the site into affiliate links and lets stores know when a purchase came from Jimp. Skimlinks can see which pages you visit on jimpapp.com, which links you tap, and your browser and device details. These cookies stay off until you tap "Allow" in the cookie bar; you can change your choice any time with "Cookie settings" at the bottom of every page. Your choice is saved in your browser only. If you join the waitlist we keep your email and language only to tell you when Jimp opens; ask us to remove it any time.

15. Changes

We'll tell you in the app before important changes take effect.

16. If you live outside Canada

DRAFT — needs lawyer review. Jimp's first countries are Canada, the United States, the United Kingdom, Australia, Ireland and New Zealand.

Where your AI-training switches start

Both switches start OFF in the European Union / EEA, the United Kingdom, Switzerland and Quebec, and anywhere Jimp hasn't launched yet. They start ON (inside the ⓘ sheet at sign-up) in the rest of Canada, the United States, Australia and New Zealand. Under 18: always off and locked, everywhere.

European Union, EEA and Switzerland (GDPR, Swiss FADP)

• Controller: [COMPANY NAME AND ADDRESS — to fill in]. EU representative (GDPR Article 27): [to appoint]. Swiss representative: [to appoint if needed].
• Why we're allowed to use your data (legal bases): to run your account and the features you ask for (contract); to keep Jimp safe, stop fraud and fix bugs (legitimate interests); to improve Jimp's AI (your consent — off unless you switch it on); to keep tax and payment records (legal obligation).
• Minimum age: the age your country sets for agreeing to online services (13 to 16 — for example 16 in Germany and Ireland, 15 in France, 14 in Italy and Spain, 13 in Sweden). Younger people can't create an account.
• Your rights: see your data, correct it, delete it, get a copy to take elsewhere, restrict or object to how we use it, and withdraw consent at any time. We don't make decisions with legal or similarly serious effects by software alone. Write to support@jimpapp.com; we answer within one month. You can also complain to your local data protection authority (in Switzerland, the FDPIC).
• Transfers: some providers are in the United States. We use the EU–US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses. [Lawyer: confirm the mechanism for each provider.]

United Kingdom (UK GDPR, Data Protection Act 2018)

• Everything in the section above applies, with the UK versions of the rules. UK representative: [to appoint].
• Children: we follow the Age Appropriate Design Code — high-privacy settings by default for under-18s.
• Complaints: the Information Commissioner's Office (ico.org.uk).
• Transfers: the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge. [Lawyer: confirm.]

United States — California (CCPA / CPRA) and other state privacy laws

• What we collect (last 12 months): identifiers (email, username); account and order records; commercial information (listings, orders); internet activity in the app (likes, saves, skips); photos you upload; approximate location for weather (not stored); inferences (your style profile). Sources: you, your device, and the services listed above.
• We do not sell your personal information and we do not share it for cross-context behavioural advertising. We don't use sensitive personal information to infer things about you.
• Your rights: know what we collect, get a copy, correct it, delete it, and not be treated differently for using these rights. You can use an authorised agent. Write to support@jimpapp.com; we verify your identity and answer within 45 days.
• How long: as described in "How long we keep it".

Brazil (LGPD)

• Legal bases (Article 7): contract, legitimate interests, consent (AI training) and legal obligation, as described above.
• Your rights (Article 18): confirmation that we process your data, access, correction, anonymisation, blocking or deletion, portability, information about who we share it with, and withdrawing consent. You can complain to the ANPD.
• Data protection officer (encarregado): [to appoint]. International transfers use standard contractual clauses (Article 33).

Australia and New Zealand

We follow the Australian Privacy Principles (Privacy Act 1988) and the New Zealand Privacy Act 2020. You can complain to the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner.

Contact: support@jimpapp.com