Privacy Policy

1. Introduction & Scope

1.1 Introduction

Welcome to Wihaa (“Wihaa”, “we”, “us”, or “our”). We respect your privacy and are committed to protecting the information that you share with us. This Privacy Policy explains how we collect, use, store, process, disclose, and protect information when you access or use our: websites; mobile applications; digital wardrobe services; artificial intelligence features; social features; marketplace services; and other related products and services (collectively, the “Services”).

1.2 Purpose of this Privacy Policy

This Privacy Policy explains: what information we collect; how we use that information; when we share information; how we protect information; and the choices and rights available to users regarding their information.

1.3 Scope of Application

This Privacy Policy applies to: visitors to our Services; registered users; developers; and other persons who interact with our Services. This Privacy Policy applies regardless of whether the Services are accessed through: websites; mobile applications; tablets; wearable devices; APIs; or other supported technologies.

1.4 Relationship with Other Policies

This Privacy Policy should be read together with our: Terms & Conditions; Intellectual Property & Confidentiality Policy; Cookie Policy; and other policies or notices published by Wihaa from time to time. In the event of any inconsistency, the policy specifically governing a particular subject matter shall prevail to the extent of such inconsistency.

1.5 Contact Regarding Privacy Matters

Questions, concerns, and requests relating to this Privacy Policy or our privacy practices may be submitted through the contact details published by Wihaa from time to time.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

• “Account Information” — Information provided when creating, maintaining, or managing an account, including: name; username; email address; mobile number; profile information; login credentials; and account preferences.
• “Personal Information” — Any information that identifies, relates to, describes, or can reasonably be associated with an identified or identifiable individual.
• “Sensitive Personal Information” — Information that may receive additional protection under applicable law, including, where applicable: financial information; precise location information; authentication credentials; and other categories designated by applicable law.
• “Processing” — Any operation performed on information, whether by automated or non-automated means, including: collection; recording; organization; storage; adaptation; analysis; retrieval; disclosure; transfer; anonymization; deletion; or destruction.
• “Consent”— A freely given, specific, informed, and unambiguous indication of a user’s agreement to the processing of information, where such consent is required by applicable law.
• “Wardrobe Data”— Information relating to a user’s clothing, accessories, and fashion preferences, including: wardrobe photographs; garment information; outfit history; preferences; tags; saved looks; recommendations; style information; and associated metadata.
• “Digital Closet” — The virtual wardrobe maintained by a user through the Services, including Wardrobe Data and related information.
• “Body Measurement Information”— Information relating to a user’s physical measurements, sizing information, fit preferences, or related information used for: sizing recommendations; personalization; or other fashion-related features.
• “De-identified Data” — Information that cannot reasonably be used to identify an individual and from which identifying elements have been removed.
• “Cookies and Similar Technologies” — Cookies, pixels, tags, software development kits, device identifiers, and similar technologies used to recognize devices, analyse usage, and improve Services.
• “Third-Party Services” — Services, applications, websites, technologies, providers, or platforms that are not owned or controlled by Wihaa but may interact with or support the Services.
• “Artificial Intelligence” or “AI” — Technologies including: machine learning; computer vision; image recognition; recommendation engines; generative artificial intelligence; and automated processing technologies used in connection with the Services.
• “AI Models” — Algorithms, systems, and technologies used to analyse information, generate recommendations, categorize items, improve features, or support other Services.
• “Device Information” — Information relating to a device used to access the Services, including: device identifiers; operating systems; browser information; application versions; network information; and technical diagnostics.
• “Usage Information” — Information relating to interactions with the Services, including: pages viewed; features used; searches performed; clicks; session information; timestamps; and usage patterns.
• “Services” — The websites, applications, digital wardrobe services, marketplace services, APIs, social features, artificial intelligence services, and other products and services provided by Wihaa.
• “User,” “You,” or “Your” — Any individual, entity, organization, business, or other person who accesses or uses the Services.
• “Precise Location Information”— Information that can identify a user’s precise geographic location, including information derived from: GPS; device settings; Wi-Fi networks; Bluetooth technologies; or other location technologies.
• “Automated Decision-Making” — Any decision, recommendation, prediction, ranking, or output generated substantially through automated technologies, algorithms, or artificial intelligence systems without significant human involvement.

3. Information We Collect

The information that we collect depends on how you interact with the Services, the features you use, the permissions you grant, and the choices you make. We may collect information from the following sources: directly from you; automatically through your use of the Services; from third parties; from integrations and connected services; and from information generated through your use of the Services.

3.1 Information You Provide Directly

• Account Information: name; username; email address; mobile number; password and authentication credentials; profile photographs; gender preferences; date of birth; language preferences; and account settings.
• Wardrobe Information: wardrobe photographs; garment information; clothing categories; outfit history; wardrobe tags; saved looks; purchase details; style notes; and other information that you choose to upload.
• Body Measurement Information: where you choose to provide it — body measurements; sizing information; fit preferences; body profile information; and related information used for personalization.
• Communications: information contained in customer support requests; emails; messages; surveys; feedback; reviews; comments; and other communications with us.
• Payment and Subscription Information: subscriptions; billing addresses; transaction records; invoices; payment confirmations; and payment status information. Payment card information may be collected and processed directly by third-party payment service providers and may not be stored by Wihaa.

3.2 Photographs, Images and Camera Access

Subject to your permissions, we may collect: photographs uploaded by you; camera images; image library information; wardrobe photographs and related metadata.

3.3 Information Collected Automatically

When you use the Services, we may automatically collect:

• Device Information: device identifiers; operating system information; browser information; application version information; network information; IP address; crash reports; and diagnostic information.
• Cookies and Similar Technologies: information collected through cookies; pixels; tags; software development kits; analytics technologies; and similar technologies.

3.4 Location Information

Subject to your permissions and applicable law, we may collect: approximate location information; country and region information; time zone information; and precise location information.

3.5 Connected Accounts and Integrations

Where you authorize integrations, we may collect information from: email providers; calendar providers; other connected services. The information collected depends on: the permissions granted by you; the settings of the connected service; and the functionality of the integration.

3.6 Information Generated Through the Services

We may generate or infer information such as: recommendations; wardrobe insights; style preferences; outfit suggestions; and personalization information.

3.7 Information We Do Not Intentionally Collect

Unless specifically required for a feature, legal obligation, or with your explicit consent, we do not intentionally collect: government identification information; payment card numbers; sensitive health records; or other categories of sensitive information that are not necessary for providing the Services.

4. How We Use Information

We use information for the purposes described below, subject to applicable law and, where required, your consent.

4.1 Providing and Operating the Services

We use information to: create and manage accounts; provide and operate the Services; authenticate users; enable digital wardrobe functionality; provide subscriptions and paid services; process transactions; and otherwise provide requested features and services.

4.2 Personalization

We use information to: personalize user experiences; organize wardrobes; provide recommendations; customize content; improve search results; tailor features and interfaces; and provide individualized experiences.

4.3 Customer Support and Communications

We use information to: respond to inquiries; provide support; investigate issues; send service communications; provide account notifications; and communicate regarding the Services.

4.4 Security and Fraud Prevention

We use information to: protect users; detect fraud; prevent misuse; investigate security incidents; enforce our policies; protect our systems; and comply with legal obligations.

4.5 Analytics and Service Improvement

We use information to: understand how the Services are used; improve features; develop new products; perform testing; monitor performance; conduct research; and improve user experiences.

4.6 Integrations and Connected Services

We use information to: enable integrations; import information; synchronize connected services; facilitate account linking; and provide integration-related functionality.

4.7 Product Research and Innovation

We may use information to: develop new technologies; conduct experiments; evaluate products; improve existing services; train and evaluate systems; and support innovation initiatives.

4.8 Legal and Regulatory Compliance

We may use information to: comply with laws; respond to legal requests; protect legal rights; resolve disputes; enforce agreements; and satisfy regulatory obligations.

4.9 Corporate Transactions

Information may be used in connection with: mergers; acquisitions; investments; restructuring; financing transactions; asset sales; or other corporate transactions.

4.10 Consent-Based Uses

Where required by applicable law, we will seek your consent before using information for certain purposes. You may withdraw certain consents at any time, subject to legal, contractual, and technical limitations.

4.11 Other Compatible Purposes

We may use information for other purposes that are: compatible with the purposes described in this Privacy Policy; reasonably expected by users; or otherwise permitted by applicable law.

5. Wardrobe Photos, Images & AI Processing

Because the Services are centred around digital wardrobe management and artificial intelligence features, the processing of photographs and related information is an important part of the Services.

5.1 Collection of Wardrobe Photos and Images

Subject to your permissions and choices, we may collect and process: wardrobe photographs; clothing images; outfit photographs; profile images; screenshots and imported images; photographs from connected services; and related image metadata.

5.2 Purpose of Image Processing

Images may be processed to: identify garments and accessories; categorize wardrobe items; generate metadata and tags; organize digital closets; create outfit suggestions; improve recommendations; support virtual try-on experiences; provide sizing and fit recommendations; generate wardrobe insights; improve search functionality; and provide and improve the Services.

5.3 Artificial Intelligence and Image Recognition

The Services may use: computer vision; machine learning; image recognition technologies; generative artificial intelligence; recommendation engines; and other automated technologies to analyse and process images and related information.

5.4 AI Training and Model Improvement

Subject to applicable law and user choices, we may use: wardrobe photographs; image metadata; garment information; recommendations; user interactions; and related information to develop, train, evaluate, improve, and test artificial intelligence systems and related technologies. Where required by applicable law, we will obtain additional permissions or provide opt-out choices.

5.5 Synthetic Data and Model Development

We may create: anonymized datasets; aggregated datasets; synthetic datasets; and derived information for research, innovation, testing, analytics, and model improvement purposes. Such information is intended not to identify individual users.

5.6 Recommendations Across Users

Information derived from wardrobe images and user interactions may be used to improve: recommendations; categorization systems; styling suggestions; search capabilities; and overall platform intelligence for all users of the Services. This does not mean that a user’s private wardrobe photographs are intentionally disclosed to other users.

5.7 User Choices and Controls

Where available, users may be provided with options to: upload or remove images; manage permissions; manage AI preferences; opt out of certain AI processing activities; and delete wardrobe content. Certain features may become unavailable if specific permissions are withdrawn.

5.8 Deletion of Images

Users may request deletion of photographs and wardrobe content through available account settings or by contacting us. Upon deletion requests, images may be removed from active systems within a reasonable period, subject to: backup procedures; legal obligations; fraud prevention requirements; dispute resolution requirements; and other legitimate business purposes.

5.9 Deleted Images and AI Training

As a general practice, deleted wardrobe photographs are not intended to be retained for future AI training purposes unless: the user has expressly consented; applicable law permits such retention; or the information has already been de-identified, aggregated, or incorporated into trained models in a manner that no longer identifies an individual user.

5.10 Limitations of Artificial Intelligence

Artificial intelligence technologies are probabilistic and may: misclassify garments; generate inaccurate recommendations; incorrectly identify attributes; provide incomplete information; or produce unexpected results. Users should exercise independent judgment when relying on AI-generated outputs.

5.11 User Responsibility for Uploaded Images

Users represent and warrant that they have all necessary rights, permissions, and authority to upload, share, and process photographs and images through the Services. Users shall not upload images that: infringe intellectual property rights; violate privacy rights; contain unlawful material; or are uploaded without appropriate authorization or consent.

5.12 Third-Party Images and Consent

If a user uploads photographs containing another person’s image, information, likeness, or personal information, the user represents that they have obtained all necessary permissions, authorizations, and consents required by applicable law. Wihaa is not responsible for unauthorized uploads made by users.

5.13 Public Sharing of Images

Where users choose to share images publicly or through social features, such information may become visible to other users and may be copied, reshared, or further distributed by third parties. Users should exercise caution before publicly sharing wardrobe content or photographs.

6. Sharing & Disclosure of Information

We may share information in the circumstances described below and in accordance with applicable law. We do not sell users’ personal information to data brokers.

6.1 Service Providers

We may share information with third-party service providers that assist us in operating the Services, including: cloud hosting providers; payment processors; analytics providers; communication providers; customer support providers; security providers; infrastructure providers; professional advisors; and other service providers. Such providers are permitted to use information only for authorized purposes and subject to appropriate contractual obligations.

6.2 Artificial Intelligence and Technology Providers

We may share information with third-party technology providers that support: artificial intelligence services; image recognition technologies; recommendation systems; search functionality; translation services; and other technology services. Where required by law, additional disclosures, permissions, or consent mechanisms may be provided.

6.3 Affiliates and Group Companies

We may share information with: affiliates; subsidiaries; parent companies; and companies under common control for purposes consistent with this Privacy Policy, including: service administration; business operations; analytics; security; customer support; and legal compliance.

6.4 Connected Services and Integrations

Where users choose to connect third-party services, we may share information with: social login providers; email providers; calendar providers; logistics providers; and other authorized integrations. The scope of information shared depends on: user permissions; integration settings; and the functionality requested by the user.

6.5 Legal and Regulatory Disclosures

We may disclose information if we believe disclosure is necessary to: comply with applicable law; respond to lawful requests; comply with court orders; comply with regulatory obligations; protect rights and property; investigate fraud; prevent misuse; protect users or the public; or enforce agreements and policies.

6.6 Corporate Transactions

Information may be shared or transferred in connection with: mergers; acquisitions; financing transactions; investments; asset sales; restructuring; bankruptcy proceedings; or other corporate transactions. Any successor entity may continue to process information in accordance with this Privacy Policy or a subsequently adopted privacy policy.

6.7 Professional Advisors

We may share information with: auditors; legal advisors; accountants; consultants; insurers; and other professional advisors where necessary for legitimate business purposes or legal obligations.

6.8 Government Authorities and Regulators

We may disclose information to: government authorities; regulators; law enforcement agencies; courts; tax authorities; and other competent authorities where required or permitted by applicable law.

6.9 International Transfers

Information may be shared with recipients located in different jurisdictions and countries, subject to: applicable law; contractual protections; organizational safeguards; and other appropriate measures.

6.10 No Sale to Data Brokers

Wihaa does not sell personal information to data brokers or engage in the business of selling personal information as a standalone commercial product.

6.11 Information Shared with Consent

In addition to the circumstances described above, we may share information with your consent or at your direction.

7. Cookies & Analytics Technologies

7.1 Use of Cookies and Similar Technologies

Wihaa and its service providers may use: cookies; pixels; tags; web beacons; software development kits (SDKs); local storage technologies; device identifiers; and similar technologies (collectively, “Cookies and Similar Technologies”) to operate, secure, improve, and personalize the Services.

7.2 What Are Cookies?

Cookies are small text files or similar technologies that may be stored on your browser, device, or application and used to recognize your device, remember preferences, and understand how the Services are used.

7.3 Types of Cookies We May Use

• Essential Cookies: enable core functionality; maintain security; authenticate users; remember preferences; and provide requested services. Certain essential cookies may be necessary for the Services to function properly.
• Performance and Analytics Cookies: understand how users interact with the Services; analyze usage patterns; monitor performance; improve functionality; identify errors; and develop new features.
• Functional Cookies: remember user preferences; personalize experiences; save settings; retain language selections; and improve usability.
• Advertising and Marketing Cookies: subject to applicable law and user choices — deliver relevant advertisements; personalize marketing; measure campaign effectiveness; limit repetitive advertisements; and understand marketing performance.
• Social Media and Integration Cookies: enable social features; facilitate account linking; support sharing functionality; and improve connected services.

7.4 Information Collected Through Cookies

Cookies and Similar Technologies may collect information including: device identifiers; browser information; operating system information; IP address; pages viewed; searches performed; timestamps; interactions with the Services; preferences; and usage information.

7.5 Analytics Technologies

We may use analytics providers and technologies to: understand usage patterns; measure engagement; improve user experiences; evaluate feature performance; conduct testing; generate statistics; and support research and innovation. Analytics information may be collected directly or through third-party providers.

7.6 Advertising Technologies

Subject to applicable law, advertising technologies may be used to: personalize recommendations; display advertisements; measure campaign performance; understand user interests; and improve marketing effectiveness.

7.7 Device Identifiers and Mobile Technologies

Mobile applications may use: device identifiers; advertising identifiers; application identifiers; SDKs; and similar technologies for purposes described in this Privacy Policy.

7.8 AI and Personalization Technologies

Information collected through Cookies and Similar Technologies may be used to: personalize experiences; improve recommendations; enhance search functionality; optimize interfaces; improve artificial intelligence systems; and support analytics and research.

7.9 Cookie Choices and Controls

Depending on your jurisdiction and device settings, you may have the ability to: accept or reject certain cookies; modify browser settings; delete cookies; disable certain technologies; manage advertising preferences; and withdraw consent where applicable. Please note that disabling certain technologies may affect the availability or functionality of the Services.

7.10 Browser and Device Settings

Most browsers and devices allow users to: manage cookies; delete stored information; block certain technologies; and modify privacy settings. Such settings are generally available through browser or device controls.

7.11 Do Not Track Signals

Certain browsers may provide “Do Not Track” signals. Because there is currently no universally accepted standard for responding to such signals, Wihaa may not respond to all Do Not Track requests unless required by applicable law.

7.12 Third-Party Technologies

Certain Cookies and Similar Technologies may be operated by third parties, including: analytics providers; advertising providers; social media platforms; integration partners; and service providers. The use of such technologies may also be governed by the privacy policies and practices of those third parties.

7.13 Future Technologies

Wihaa may use new tracking, analytics, personalization, and measurement technologies that are developed in the future, subject to applicable law and appropriate disclosures.

7.14 Changes to Cookie Practices

We may modify our use of Cookies and Similar Technologies from time to time to reflect: technological developments; legal requirements; business needs; or improvements to the Services.

8. Data Storage, Security & International Transfers

8.1 Data Storage

Information may be stored and processed: on our systems; by cloud service providers; by infrastructure providers; by authorized service providers; and in other locations where our service providers operate. The location of storage may vary depending upon: the Services used; the user’s location; technical requirements; business requirements; and applicable legal obligations.

8.2 International Data Transfers

Because Wihaa may provide Services globally, information may be transferred to, stored in, or processed in countries other than the country in which the information was originally collected. Such transfers may occur: between affiliates; between service providers; between infrastructure providers; between enterprise customers; and in connection with authorized integrations.

8.3 Safeguards for International Transfers

Where required by applicable law, Wihaa may implement safeguards such as: contractual protections; data transfer agreements; organizational safeguards; technical safeguards; industry-standard security measures; and other lawful transfer mechanisms.

8.4 Information Security Program

Wihaa maintains administrative, technical, and organizational measures designed to protect information against: unauthorized access; accidental loss; misuse; unlawful disclosure; alteration; destruction; and other unauthorized processing activities.

8.5 Security Measures

Security measures may include: encryption technologies; access controls; authentication procedures; role-based permissions; monitoring systems; logging and audit mechanisms; vulnerability assessments; backup procedures; and other security measures appropriate to the nature of the information.

8.6 Account Security Responsibilities

Users are responsible for: maintaining the confidentiality of credentials; safeguarding passwords; protecting authentication methods; restricting unauthorized access to devices; and promptly notifying Wihaa of suspected unauthorized use.

8.7 Data Minimization

Wihaa endeavours to collect and retain information that is reasonably necessary for: providing the Services; improving the Services; complying with legal obligations; and other legitimate business purposes.

8.8 Data Retention and Archiving

Information may be retained: during the active use of the Services; for backup purposes; for legal obligations; for dispute resolution; for fraud prevention; for enforcement of agreements; and for legitimate business purposes. Further details regarding retention are described in the Data Retention and Deletion section of this Privacy Policy.

8.9 Data Breach Response

Wihaa maintains processes intended to: identify security incidents; investigate incidents; mitigate risks; restore systems; and provide notifications where required by applicable law. The timing and nature of notifications may depend upon: applicable law; the nature of the incident; and regulatory requirements.

8.10 Third-Party Service Providers

Although Wihaa takes reasonable steps in selecting service providers, information processed by third parties may also be subject to: their security practices; their contractual obligations; and applicable legal requirements.

8.11 No Absolute Security Guarantee

No method of electronic transmission, storage, or processing is completely secure. Accordingly, Wihaa cannot guarantee that information will always remain free from: unauthorized access; loss; misuse; security breaches; cyberattacks; or other security incidents.

8.12 Business Continuity and Disaster Recovery

Wihaa may maintain: backup systems; disaster recovery processes; redundancy measures; and business continuity procedures to support the availability and resilience of the Services.

8.13 De-identified and Aggregated Information

Wihaa may retain de-identified or aggregated information for: analytics; research; innovation; benchmarking; market intelligence; product development; and lawful business purposes. Such information is intended not to identify individual users.

8.14 Government Requests and Legal Preservation

Wihaa may preserve or disclose information where necessary to: comply with legal obligations; respond to lawful requests; protect legal rights; prevent fraud; protect users or the public; or satisfy regulatory requirements.

8.15 Future Technologies and Infrastructure

As technology evolves, Wihaa may adopt: new infrastructure providers; new hosting technologies; new security technologies; distributed computing technologies; artificial intelligence systems; and other technological solutions, subject to applicable law and appropriate safeguards.

8.16 Security Incident Cooperation

Users agree to reasonably cooperate with Wihaa in connection with: security investigations; account compromise remediation; fraud investigations; and recovery efforts, where such cooperation is necessary to protect users, the Services, or other affected parties.

9. User Rights & Choices

Depending on your location, applicable law, and the nature of the information involved, you may have certain rights and choices regarding your information. Certain rights may be limited or subject to legal exceptions, security requirements, technical limitations, or the rights of other persons.

9.1 Right to Access

You may request access to information that Wihaa holds about you, including information relating to: your account; wardrobe information; preferences; uploaded content; subscription information; and other information associated with your use of the Services.

9.2 Right to Correct or Update Information

You may: update information; correct inaccurate information; modify profile details; and request correction of certain information maintained by Wihaa. Certain information may only be modified through account settings or verification procedures.

9.3 Right to Delete Information

You may request deletion of: your account; wardrobe content; photographs; profile information; and certain other information. Deletion requests may be subject to: legal obligations; fraud prevention requirements; dispute resolution requirements; security requirements; backup procedures; and legitimate business purposes.

9.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out before the withdrawal. Withdrawal of certain consents may affect the availability or functionality of certain Services.

9.5 Right to Object or Restrict Processing

Where permitted by applicable law, you may request that Wihaa: restrict certain processing activities; cease certain uses of information; or object to specific processing activities. Wihaa may continue processing where permitted or required by law.

9.6 Right to Data Portability

Where applicable, you may request a copy of certain information in a structured, commonly used, and machine-readable format, subject to: technical feasibility; legal limitations; and protection of the rights of other persons.

9.7 Marketing Preferences

You may: opt out of marketing communications; manage communication preferences; unsubscribe from promotional emails; and modify notification settings. Service-related communications may still be sent where necessary for account administration or legal purposes.

9.8 Cookie and Advertising Choices

You may have the ability to: manage cookie preferences; withdraw advertising consent; modify browser settings; manage device permissions; and exercise other choices made available under applicable law.

9.9 AI and Personalization Controls

Where available, users may: manage personalization settings; adjust recommendation preferences; opt out of certain AI-related processing; manage automated features; and control certain artificial intelligence functionalities. Certain Services may become limited if specific AI features are disabled.

9.10 Public Content Controls

Users may manage: profile visibility; public wardrobes; social sharing settings; community interactions; and creator content visibility, subject to the technical capabilities of the Services.

9.11 Account Closure

Users may request closure of their accounts in accordance with the Terms & Conditions and applicable law. Certain information may continue to be retained following account closure for: legal obligations; fraud prevention; security purposes; dispute resolution; and legitimate business purposes.

9.12 Rights Relating to De-identified and Aggregated Information

Certain rights may not apply to: de-identified information; aggregated information; anonymized information; or information that can no longer reasonably identify an individual.

9.13 Verification of Requests

Before fulfilling certain requests, Wihaa may: verify identity; request additional information; require authentication; or take reasonable steps to confirm authority to act on behalf of another person.

9.14 Non-Discrimination

Wihaa will not unlawfully discriminate against users for exercising privacy rights available under applicable law. However, certain features or Services may become unavailable if specific information or permissions are withdrawn.

9.15 How to Exercise Your Rights

Users may exercise available rights by: using account settings; contacting customer support; using designated privacy tools; or contacting Wihaa through the details provided in this Privacy Policy.

9.16 Response Time

Wihaa will endeavour to respond to privacy requests within the timeframes required by applicable law. In certain circumstances, additional time may be required due to: complexity of the request; verification requirements; technical limitations; or legal obligations.

9.17 Jurisdiction-Specific Rights

Certain jurisdictions may provide additional rights that supplement the rights described in this Privacy Policy. Where required by applicable law, Wihaa will honour such rights in accordance with applicable legal requirements.

10. Data Retention & Deletion

10.1 General Retention Principles

Wihaa retains information only for as long as reasonably necessary to: provide the Services; maintain user accounts; fulfill contractual obligations; improve and develop the Services; comply with legal obligations; resolve disputes; enforce agreements; prevent fraud and misuse; and protect users and the Services. Retention periods may vary depending upon the type of information and the purposes for which it was collected.

10.2 Account Information

Account information may be retained: while the account remains active; during periods of inactivity; following account closure where necessary for legal, security, or operational purposes; and for other legitimate business purposes permitted by law.

10.3 Wardrobe Information and Photographs

Wardrobe information, photographs, uploaded images, and related metadata may be retained: while the user maintains the content on the Services; until the user deletes the content; until account deletion; or for limited periods following deletion requests to complete processing, backups, legal obligations, or security activities.

10.4 Deleted Images and AI Training

As a general practice, deleted wardrobe photographs are not intended to be retained for future artificial intelligence training purposes unless: the user has expressly consented; applicable law permits such retention; or the information has already been de-identified, aggregated, or incorporated into trained models in a manner that no longer identifies an individual user.

10.5 AI-Generated Information and Metadata

Wihaa may retain: garment classifications; tags; recommendations; anonymized metadata; system-generated insights; and de-identified outputs for: improving the Services; developing technologies; analytics; research; fraud prevention; and legitimate business purposes.

10.6 Communications and Customer Support Information

Communications, support records, and feedback may be retained for: customer service; dispute resolution; training; quality assurance; legal compliance; and security purposes.

10.7 Payment and Transaction Information

Transaction information may be retained for: accounting purposes; tax compliance; fraud prevention; dispute resolution; legal obligations; and financial recordkeeping requirements. Payment card information may be retained by payment service providers in accordance with their own legal and regulatory obligations.

10.8 Social and Community Information

Posts, comments, messages, and public content may remain available: until deleted by the user; until account closure; until removal under platform policies; or for limited periods necessary for backup, security, legal, or dispute resolution purposes. Certain interactions by other users may remain visible even after original content is deleted.

10.9 Data Retention Following Account Closure

Following account closure, information may be retained for reasonable periods to: comply with legal obligations; investigate fraud; prevent abuse; protect legal rights; enforce agreements; complete outstanding transactions; and maintain system integrity.

10.10 Dormant Accounts

Wihaa may establish policies regarding dormant or inactive accounts. Subject to applicable law and reasonable notice where required, Wihaa may: archive information; limit access to inactive accounts; delete dormant accounts; or remove certain information associated with inactive accounts.

10.11 Backups and Residual Copies

Deleted information may continue to exist for limited periods in: backups; disaster recovery systems; archived systems; and technical logs. Such information will generally remain subject to appropriate security measures.

10.12 De-identified and Aggregated Information

Wihaa may retain: de-identified information; anonymized information; aggregated information; analytics; and market intelligence data for research, innovation, benchmarking, analytics, and lawful business purposes. Such information is intended not to identify individual users and may continue to be retained after deletion of individual accounts.

10.13 Legal Holds and Investigations

Wihaa may preserve information where reasonably necessary to: comply with legal obligations; respond to lawful requests; investigate violations; resolve disputes; protect legal rights; prevent fraud; or support security investigations.

10.14 User Requests for Deletion

Users may request deletion of information through: account settings; privacy tools; customer support; or other methods made available by Wihaa. Certain requests may be denied, limited, or delayed where permitted by applicable law.

10.15 Deletion Completion

Deletion may not occur immediately and may require reasonable time due to: technical processes; backup systems; legal requirements; security obligations; fraud prevention activities; and operational constraints.

10.16 Future Technologies and Retention Practices

As technology and legal requirements evolve, Wihaa may revise retention practices and retention periods, subject to: applicable law; contractual obligations; and updates to this Privacy Policy.

11. Changes to this Privacy Policy & Notifications

11.1 Right to Modify this Privacy Policy

Wihaa may modify, update, amend, or replace this Privacy Policy from time to time to reflect: changes in the Services; new products or features; technological developments; changes in business practices; legal and regulatory requirements; security considerations; or other legitimate business reasons.

11.2 Effective Date of Changes

Any changes to this Privacy Policy shall become effective on the date specified in the updated version unless otherwise required by applicable law. The “Last Updated” date at the top of this Privacy Policy will indicate when the most recent changes became effective.

11.3 Notice of Material Changes

Where required by applicable law or where changes materially affect users’ rights or obligations, Wihaa may provide notice through one or more of the following methods: email communications; in-app notifications; website notices; account messages; push notifications; or other reasonable methods of communication.

11.4 Non-Material Changes

Administrative, clarifying, operational, or non-material changes may become effective immediately upon publication of the updated Privacy Policy.

11.5 Continued Use of the Services

To the extent permitted by applicable law, continued access to or use of the Services after the effective date of an updated Privacy Policy may constitute acknowledgment of the revised Privacy Policy. Where applicable law requires express consent for certain changes, Wihaa will seek such consent.

11.6 User Responsibility to Review Updates

Users are encouraged to periodically review this Privacy Policy to remain informed regarding: information practices; privacy choices; available rights; and updates to the Services.

11.7 Changes Requiring Consent

Certain changes involving: new processing activities; new categories of information; material changes to data sharing practices; or other circumstances requiring consent under applicable law may be implemented only after obtaining any legally required permissions or consents.

11.8 Regulatory and Legal Changes

Wihaa may modify this Privacy Policy to comply with: new laws; judicial decisions; regulatory guidance; industry standards; or governmental requirements. Such changes may become effective as required by applicable law.

11.9 New Features and Services

As the Services evolve, Wihaa may introduce: new products; artificial intelligence features; integrations; marketplace services; social features; enterprise services; or other technologies. Additional privacy notices, disclosures, or supplemental policies may apply to specific features or services.

11.10 International Users

Different jurisdictions may impose different legal requirements. Wihaa may provide: supplemental notices; jurisdiction-specific disclosures; regional privacy terms; or additional rights and choices to users located in particular countries or regions.

11.11 Archived Versions

Wihaa may maintain previous versions of this Privacy Policy for: historical reference; compliance purposes; dispute resolution; audit purposes; or legal obligations.

11.12 Contact Regarding Changes

Users with questions regarding updates to this Privacy Policy may contact Wihaa using the contact information provided in this Privacy Policy.

11.13 Future Privacy Frameworks

As privacy laws, technologies, and industry standards continue to evolve, Wihaa may adopt additional: privacy tools; consent mechanisms; transparency features; user controls; and governance practices to improve privacy protection and regulatory compliance.

12. Contact Information & Privacy Requests

12.1 Contact Us

If you have any questions, concerns, requests, or feedback regarding this Privacy Policy or our privacy practices, you may contact Wihaa through the contact details published on our official website or within the Services. The following contact channels may be made available: customer support; privacy support; grievance redressal; legal notices; and general business inquiries. You can also email us at support@wihaawardrobe.com.

12.2 Privacy Requests

Subject to applicable law, users may submit requests relating to: access to personal information; correction or updating of information; deletion of information; withdrawal of consent; restriction or objection to processing; data portability; account closure; AI and personalization preferences; and other privacy rights available under applicable law. Requests may be submitted through: account settings; designated privacy tools; customer support; or the contact methods provided by Wihaa.

12.3 Identity Verification

To protect user privacy and security, Wihaa may require reasonable verification of identity before processing certain requests. Verification may include: account authentication; confirmation of registered contact details; additional supporting information; or other reasonable verification procedures. Failure to complete verification may result in the request being delayed, limited, or declined where permitted by law.

12.4 Authorized Representatives

Where permitted by applicable law, requests may be submitted by: authorized representatives; parents or legal guardians; family account administrators; corporate representatives; or other persons legally authorized to act on behalf of a user. Wihaa may require reasonable evidence of such authority before acting on the request.

12.5 Response Time

Wihaa will endeavour to acknowledge and respond to privacy requests within the timeframes required by applicable law. The response time may vary depending on: the complexity of the request; verification requirements; technical feasibility; legal obligations; and the volume of requests received. Where permitted by law, Wihaa may extend the response period and will notify the requester where appropriate.

12.6 Grievance Redressal

Users who believe that their privacy rights have been affected may submit a grievance through the designated grievance redressal mechanism. Wihaa will make reasonable efforts to: acknowledge grievances; investigate the issues raised; communicate the outcome; and take appropriate corrective action where necessary.

12.7 Regulatory Authorities

Where applicable law provides such rights, users may also contact or lodge complaints with the relevant: data protection authority; privacy regulator; consumer protection authority; or other competent governmental authority. Nothing in this Privacy Policy limits any rights available under applicable law.

12.8 Updates to Contact Information

Wihaa may update its contact details, support channels, grievance mechanisms, or designated privacy contacts from time to time. The most current contact information will be made available through the official website or the Services.

12.9 Language and Communication

Privacy requests and communications may be accepted in one or more languages supported by Wihaa. Responses will ordinarily be provided in a language reasonably selected by Wihaa or otherwise required by applicable law.

12.10 Electronic Communications

By using the Services, users agree that Wihaa may communicate regarding privacy matters through electronic means, including: email; in-app notifications; account messages; website notices; or other electronic communication channels, where permitted by applicable law.

12.11 No Waiver of Legal Rights

The availability of contact channels or grievance mechanisms under this Privacy Policy does not waive, limit, or otherwise affect any statutory rights or remedies available to users under applicable law.

12.12 Future Privacy Governance

As the Services evolve, Wihaa may establish additional: privacy support channels; regional privacy offices; data protection officers; grievance officers; compliance teams; or jurisdiction-specific contact mechanisms to support users and comply with applicable legal requirements.