Privacy policy

1. Who we are

Fit Finder is run by SocialClimb Marketing LTD, trading as Fit Finder, a company registered in England and Wales (company number 16858678). Registered office: 67 Illingworth, Windsor, SL4 4UP, United Kingdom. In this policy “we”, “us” and “our” mean that company.

We are the controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact us about privacy, including to use your rights (section 15), at privacy@getfitfinder.co.

2. The short version

• The app works on iPhone and Android. You sign in with Sign in with Apple (on iPhone), with Google, or with your email address and a one-time code we email to you.
• To search, you pick a photo or screenshot. The photo you pick is uploaded. Our AI spots the clothing in it, you tap the piece you want (or draw round it), and we cut that piece out on our server. We keep the photo and the cut-out with your find for up to 60 days so you can see what you searched for, or until you delete the find, the photo or your account. A photo you don’t search with is deleted after one hour. Photos are not included in our backups, and they are never used to identify anyone.
• Anthropic’s Claude AI looks at the photo to spot the clothing, and at the cut-out piece to identify the garment and search the web for shops selling it. If that search fails or finds nothing usable, a shopping search service (SerpApi) receives a text description of the item, never your photo.
• There is no free plan. Everyone gets one free find, whose results are locked: you see how many matches were found, the lowest price and how much you could save, but not the shops or links. You can make your free find and buy Fit Finder Pro before signing in.
• We do not sell your data and we do not show ads. Some shop links may be affiliate links: if you buy, we may earn a commission from the shop. It never changes the price you pay or the order we show shops in.
• With Fit Finder Pro you can get an alert when a saved item drops in price or is back in stock. Without Pro, we watch the top 3 matches of your latest locked find and can tell you when one changes. You can turn this off.
• Product analytics, push notifications, alert emails and offers from Fit Finder are optional and off unless you turn them on.
• You can remove a photo, download your account data or delete your account from inside the app.

3. Your account

We use your email address to create your account and sign you in. Accounts are managed by Google Firebase Authentication, and the one-time sign-in code is sent through our email provider, Resend. A code expires after 10 minutes, and we store it only in a scrambled (hashed) form.

If you use Sign in with Apple, we receive an account identifier and the email address Apple shares with us (which may be a private relay address if you choose to hide your email). We do not ask Apple for your name. If you use Google, we receive your Google account identifier and email address, and our sign-in provider (Firebase) also stores the name and profile picture link on your Google account; we do not use them. When your account is erased we also ask Apple to revoke Fit Finder's access to your Apple account.

To protect sign-in from abuse we limit how many codes can be requested and tried per email address and per network (IP) address. These limits are held in memory for at most 24 hours and are not used to profile you.

Before you sign in. You can make your free find and buy Fit Finder Pro without an account. The app then uses an anonymous session with its own random identifier. It is linked to your free find and its results, the watch on your free find (section 6), your photos and any subscription you buy before signing in (through the billing reference in section 7), but not to an email address or name. With Fit Finder Pro you do not need to sign in at all: the session can also hold your saved items, price and stock alerts, notification settings and share links. If you sign in later, we move the session’s searches, photos, subscription, saved items, alerts and share links to your account (if the account already saved the same item, it keeps its own copy). If an anonymous session is not used for 30 days, its data is deleted automatically, but not while it holds a subscription that has not ended (including a free trial or a store grace period).

Why: to provide the account you asked for (contract) and to keep accounts secure (legitimate interests).

4. Photos you search with

You choose a photo or screenshot, and that photo is uploaded as you picked it. The first time you do this, the app tells you how your photo is used; by picking a photo you confirm that you have the right to use it. We do not run face recognition and we never use your photo to identify anyone. (Older versions of the app let you frame the piece on your device and upload only that crop; they still work the same way.)

On our server the photo is re-encoded once, which removes hidden data such as location metadata. We keep one copy, plus the cut-out of the piece you chose. If a find keeps them (see below), after the first hour we replace each with a smaller copy (at most 640 pixels on its longest side) and delete the original.

Spotting the clothing. When you pick a photo, we send a smaller copy (at most 1600 pixels on its longest side) to Anthropic’s Claude AI with instructions to find up to three pieces of clothing, give each a short label and category, and ignore people. We keep its answer only as long as the photo. Spotting does not use one of your finds.

For one hour after upload the photo can be used to run, retry or refine a search. After that, a photo, the clothing spotted in it and the cut-out are kept only if a find uses them, for up to 60 days after upload, so the find can show you what you searched for. A kept photo is only shown back to you; it is never used for another search. It is deleted sooner if you delete the find or the photo, delete your account, or if we need the storage (oldest first). A photo no find uses is deleted one hour after upload. An automatic clean-up runs every minute. Removing a photo does not remove the search results.

Why: to run the search you asked for (contract).

5. How a search works

Identifying the garment. We send the cut-out of the piece you chose to Anthropic’s Claude AI with instructions to describe only that piece (its category, colours, details and any visible brand or label) and to search the web for shop product pages selling it. Claude writes the web search words itself from the cut-out. Anthropic runs those web searches with a fixed UK location that is the same for everyone, never your location. Your email address and account ID are not sent. Anthropic runs these searches through search providers that act as its own subprocessors; they receive the search words, not your photo. Web search is part of Anthropic's API service and is covered by the same commercial terms and data processing addendum.

AI can be wrong. A brand, model or “similar” label is a search hint, not a promise that a result is the same item.

Backup shopping search. If Claude’s search fails or finds no usable shop, the search runs once more: Claude describes the cut-out again, and a text description of the item (for example “navy wool crew-neck jumper”), your market and any filters you chose are sent to SerpApi, which runs a Google Shopping search. SerpApi never receives your photo, email address or account ID.

Checking shop pages. When you search, our page reader, FitFinderBot, may open each suggested shop’s own product page and its product image, to check the current price, whether it is in stock and how the item looks. The shop sees a request from our server, not from you, and no information about you is sent. For alerts (section 6), FitFinderBot reads those product pages again later. It follows each shop’s robots.txt rules and sends no cookies or information about you. How it works is explained at https://getfitfinder.co/bot.

What we keep. A search record includes the reference to your photo and cut-out, the item description, your market and filters, progress, the results and when they were seen. Results are shown for up to 24 hours, because prices change. We keep a finished search for up to 24 months after your last activity on that search (when it was started, retried or last updated), then delete it. After that we keep only anonymous totals, such as numbers of searches, that cannot identify you.

Allowance. We count searches to apply the Fit Finder Pro weekly allowance (see the terms of use). Your one free find does not count towards it.

One free find each. To make sure each person gets only one free find, we keep a scrambled (hashed) marker of the session or account that used it for 365 days, and a count of an anonymous session’s photo uploads for 30 days. To limit free finds from one network, we also keep a scrambled form of your network (IP) address, made with a key that changes every day, for up to 2 days. We use these only to apply the free-find limits. The marker and the upload count are deleted with your account; the scrambled address expires on its own.

Locked results. Whether results are shown in full or locked depends only on whether your account or anonymous session has an active Pro subscription when you look at them, which our server checks against our subscription records each time. Locked results show the number of matches and shops, the lowest price, the savings and blurred product images, and leave out shop and product names, exact prices and links. If your subscription ends, the results of your earlier searches are locked again; saved items stay available.

Why: to run the search you asked for and apply your plan (contract).

6. Saved items, alerts and notifications

If you save an item, we keep a snapshot of the listing (name, price if shown, shop, link and when it was seen) until you remove it or delete your account. For a shop we have not checked, the saved shop link stops working 30 days after the item was found; the item stays saved.

Price and stock alerts (Fit Finder Pro). With Fit Finder Pro you can turn on an alert for a saved item. We then read the shop’s product page straight away to note its price, and again about once a day, or about once an hour while the item is out of stock. We tell you when the price is at least 5% and at least £1 lower than when you turned the alert on (and, after an alert, that much lower again), or when an item that was out of stock is back. Each item alerts at most once every 72 hours. If an item has been out of stock for 120 days, we pause its alert. If a shop’s page no longer shows the item (it sends us to the shop’s home or a list of products, or the item has gone from the page), we stop checking it after a few checks and the alert shows as paused. You can have up to 50 alerts.

For each alert we keep the item’s shop link, the prices we read and when, whether it was in stock, the result of recent checks and up to 20 past alerts, and, for back-in-stock alerts, the item and shop name used in alert emails. This is deleted when you turn the alert off, remove the item or delete your account. So that turning an alert off and on again does not repeat an alert, we keep the lowest price we alerted you about for 180 days after you turn it off, unless you remove the item.

If you do not have Fit Finder Pro. When you look at the locked results of a find, we watch its top 3 matches in the same way, so we can tell you if one gets cheaper or is back in stock. This happens automatically. We watch only your latest locked find, for up to 60 days after you made it. We only check it while you are using the app: if you haven’t opened Fit Finder for 14 days, we stop checking until you come back. To do this we keep the day (not the time) you last used the app, with the watch. If your free trial ended without a subscription and you haven’t used the app for 14 days, we keep watching only the top match, about once a week, until 60 days after the find, and send you at most one notification about it; we record the date the trial ended (from our billing records) with the watch. The watch ends when you turn it off on that find (it then stays off for that find), when a newer locked find replaces it, when the find is deleted, or 60 days after the find. We keep the shop links and prices we read for those 3 matches, whether they are in stock and their recent changes, plus a list of up to 50 finds whose watch has ended and why. Alerts about a locked find do not show the shop or product; they stay locked.

If your Pro subscription has ended, saved items that still have an alert on are checked about once a day. You can get one back-in-stock alert from them every 30 days; their price drops are not alerted.

Alerts to accounts without Pro are sent as a push notification at most once a week. Others are shown only in the app. They are never emailed. We keep the time of the last one so we can apply these limits. If you have not signed in, the watch belongs to the app’s anonymous session; when you sign in, the watch and your offers choice (below) move to your account.

Push notifications. Alerts are sent as push notifications only if you allow notifications, in the app (which asks first, using its notifications notice) and in your device settings. We then store your device’s push token, whether it is an iPhone or Android device and when it was registered, plus your notification choices. A push token is deleted after 60 days if the app does not renew it, when you turn notifications off in the app, and when you delete your account. Alerts are delivered through Apple Push Notification service (on iPhone) or Google Firebase Cloud Messaging (on Android). An alert can name the item (or, for a locked find, only the kind of piece, for example “your jacket find”) and how much the price dropped, but never the shop or a link; open the app to see the details. Changes found in one check are grouped into one notification. Without Fit Finder Pro you get at most 3 alert notifications a day (UK time). With Fit Finder Pro you get at most 5 in any hour, and at most one alert per item every 72 hours. Notifications over a limit wait and are sent later, grouped with newer ones; after 72 hours they are only shown in the app. We keep the times of the alert notifications we sent you in the last 2 days to apply these limits. Without notifications, alerts are shown in the app, and emailed if you chose alert emails.

Quiet hours. Unless you set your own quiet hours, we hold price-drop notifications between 10pm and 8am UK time and send them at 8am. Back-in-stock notifications still come straight away, because those items can sell out quickly. If you set your own quiet hours, they apply to all alerts.

Alert emails (Fit Finder Pro). You can also choose to get price and stock alerts by email. This is off unless you turn it on. We email you when a push notification cannot be sent, for example when notifications are off or during quiet hours. Emails go only to your sign-in email address. They show the new price, and back-in-stock emails also name the item and the shop. Every alert email has an unsubscribe link: open it and confirm, or use your email app’s unsubscribe button, and alert emails stop. You can also turn them off in the app. We keep your choice and when you made it, and a random code for the unsubscribe link, until you delete your account.

Offers from Fit Finder. Separately, you can choose to hear about offers and promotions from Fit Finder, such as a discount on Pro. This is off unless you turn it on, and you do not need it for alerts. We keep your choice and when you made it. We do not send offers yet. When we do, they will go only to people who have turned this on, and every message will tell you how to stop them.

Free trial reminder. We remind you once, by push notification or email, before a free trial turns into a paid subscription. This is a service message about your subscription, not marketing, so we send it even if you have opted out of marketing. You can turn it off with the “Trial and billing” switch in the app’s notification settings. It goes to your sign-in email address or to a device push token you allowed; a push reminder is delivered through Apple Push Notification service on iPhone or Google Firebase Cloud Messaging on Android. We keep a record of the reminder until 30 days after the trial ends.

Your alerts, notification choices and offers choice are included in your data export. For a locked find, the export leaves out the shop links, as described in section 15. To turn things off:

• an alert on a saved item: turn it off on the item, or remove the item;
• price-drop or back-in-stock notifications: use their switches in the app’s notification settings;
• the watch on a locked find: turn it off on that find;
• all push notifications: turn notifications off in the app, which also deletes your push tokens, or in your device settings;
• alert emails: use the unsubscribe link in any alert email, or the switch in the app;
• offers from Fit Finder: use the switch in the app;
• the free trial reminder: use the “Trial and billing” switch.

Why: to provide the features you choose, including alerts you turn on, and to remind you before a trial is charged (contract); watching a locked find for an account without Pro, which you can turn off, on the basis of our legitimate interests in showing you real changes to a find you made; push notifications, alert emails and offers only with your consent.

7. Subscriptions

Payments are taken by Apple (App Store) or Google (Google Play). We never see your card details.

We use RevenueCat to confirm your subscription with the App Store or Google Play, on both iPhone and Android. RevenueCat receives a random billing reference we create, not your email address, plus the purchase details the store provides (product, dates, renewal, refund and trial status). Before you sign in, RevenueCat may use a temporary anonymous ID of its own. If you buy before signing in, we create the billing reference for the app’s anonymous session. When you sign in, the subscription moves to your account: usually it keeps the same billing reference, and if your account already has its own, the store purchase is transferred to it through RevenueCat and stops applying to the anonymous session. One purchase never applies to two accounts.

We keep your subscription status and purchase history so we can give you the right allowance and handle renewals and refunds, until you delete your account.

Why: to provide your subscription (contract) and to keep financial records where the law requires (legal obligation). Financial records that UK tax law requires us to keep, such as records of sales and refunds (including the sales reports Apple and Google send us), are kept for 6 years.

8. Optional product analytics

Analytics is off unless you turn it on in the app; the app asks first, using its analytics notice (version 1). If you do, the app sends records of how you use features to our own server: for example app opened, search started or finished, results and saved items viewed, purchase-screen actions and permitted quiz choices. Each record has a time, a random reference for that app session, the app platform and version, and any feature test you are part of.

These records never include your email address, account ID, device or advertising ID, IP address, location, photo, typed text, search words, links or prices. We keep them for 180 days.

We also keep a record of which weeks you were active, so we can see whether people come back. It is linked to your account through a scrambled (keyed hash) identifier. Turning analytics off stops sending straight away and deletes that activity record.

We do not use third-party analytics or advertising tools in the app. We use one outside service, Sentry, only to receive error reports from the app (see section 9).

Result quality. We do not currently record which results you open, save or remove for ranking. If we switch this on, it will have no account, device or photo information, you will be able to turn it off, and we will update this policy first.

Why: analytics only with your consent; result quality on the basis of our legitimate interests in improving results.

9. Support and security

If you email hello@getfitfinder.co or privacy@getfitfinder.co, we keep the email and our reply for 12 months, then delete or anonymise them.

Our server logs are designed to record codes, counts and timings only, not email addresses, sign-in codes or tokens. Our web server does not keep access logs of your IP address. System logs are kept on the server for about two months (they are overwritten once they reach a fixed size limit).

Report a problem. If you send feedback from the app, we keep your message, the category you chose, the app version and platform, the search it is about (if you sent it from a result), and whether you said we may email you about it. It is linked to your account so we can look into it and, if you allowed it, reply. We keep it for 12 months. It is deleted with your account and included in your data export. Please don’t include personal details we don’t need.

Error reports. If the app hits a software error, it can send a short technical report to Sentry, which we use to find and fix bugs. A report contains only the type of error, where in the app’s code it happened, the app version and build, and whether it is a test or store build. Reports do not include your email address, account ID, photos, search words, links, prices or what you were doing in the app, and they are not used for advertising or to track you. Sentry is set not to store your IP address. We can switch these reports off at any time. Sentry stores them in the EU (Germany) for 30 days.

Why: running a secure, reliable service and fixing problems (legitimate interests); replying to feedback you send (legitimate interests).

10. What we do not do

• We do not sell or rent your personal information.
• We do not show ads or use your information for ad targeting, and we do not track you across other companies’ apps or websites.
• Some shop links may be affiliate links through a network such as Awin. Such a link carries a reference so the shop can credit us if you buy, and the shop or the network may set its own cookies on the shop’s website under its own privacy policy. We do not give the network your name, email address, photos or searches. Commission never changes the price you pay or the order we show shops in.
• We do not use face recognition.
• We do not use your photos to train AI models, and Anthropic’s commercial terms do not allow it to train its models on what we send it. Anthropic deletes what we send and what it returns within 30 days, unless it needs to keep it longer to enforce its usage policy (up to 2 years for content it flags) or to meet a legal requirement.
• We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. The AI only describes clothing to search for.

11. Who we share information with

These service providers act on our instructions under data processing agreements that limit how they can use your information. SerpApi receives no personal information, only a text description of an item.

• Hetzner Online (Germany, EU): hosts our server and its encrypted backups.
• Google Firebase Authentication (USA and other countries): manages accounts and sign-in. Receives your email address and account ID.
• Resend (USA): sends sign-in and account-deletion code emails, the free trial reminder email and, if you turn them on, price and stock alert emails, from the United States. Receives your email address and the email.
• Anthropic (Ireland and USA): Claude AI identifies the garment and searches the web for shops. Receives a smaller copy of the photo you pick (to spot the clothing), the cut-out of the piece you chose, our instructions and the AI-written search words. No email address or account ID.
• SerpApi (USA): runs the backup Google Shopping search. Receives a text description of the item, your market and filters only.
• RevenueCat (USA): checks subscription status for App Store and Google Play purchases. Receives your billing reference and store purchase details.
• Google Firebase Cloud Messaging (USA and other countries): delivers push notifications to Android devices, only if you allow notifications. Receives the device push token and the notification.
• Sentry (Functional Software, Inc., USA; reports stored in the EU, Germany): receives technical error reports from the app, with no email address or account ID, and is set not to store IP addresses.
• Apple and Google: app stores and payments (the App Store and Google Play, including Google Play billing), and, for Apple, push notification delivery to iPhones (Apple Push Notification service), under their own privacy policies.

The search providers named in the app’s photo permission screen are the ones that will receive your photo. We do not currently use Google Gemini, Google Lens, SearchApi.io or any other image service. If we add a provider that receives your photo, we will update this policy and the in-app permission first.

We may also disclose information if the law requires it, or to protect people’s safety or our legal rights. If Fit Finder is sold or reorganised, your information may pass to the new owner under this policy.

12. International transfers

Our server and backups are in Germany, which the UK recognises as providing adequate protection. Some providers above are in the United States. Where information goes outside the UK, we rely on the UK–US data bridge for providers certified under it, or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. For Google (Firebase), Resend and Sentry we rely on the UK–US data bridge, as all three are certified under it. For Anthropic (which contracts with us through Anthropic Ireland) and RevenueCat we rely on the EU Standard Contractual Clauses with the UK Addendum included in our agreements with them. You can ask us for a copy of the relevant safeguards.

13. How long we keep information

• Photo, spotted clothing and cut-out used by a find: up to 60 days after upload (sooner if you delete the find, the photo or your account), then deleted within about a minute. Not used by a find: 1 hour. Not included in backups.
• Sign-in code: 10 minutes.
• Search results shown in the app: up to 24 hours.
• Search history: up to 24 months after your last activity on that search, then deleted; we keep only anonymous totals that cannot identify you.
• Anonymous sessions: deleted after 30 days without use, but not while they hold a subscription that has not ended.
• Free-find marker: 365 days, or until you delete your account. Scrambled network address for free-find limits: up to 2 days.
• Free trial reminder record: until 30 days after the trial ends.
• Push tokens: until 60 days after the app last renewed them, or until you turn notifications off in the app or delete your account.
• Alerts on saved items: until you turn the alert off, remove the item or delete your account. The lowest price we alerted you about: 180 days after you turn the alert off, unless you remove the item.
• Watch on a locked find, with the day you last used the app and, if it applies, the date your trial ended: until it ends (you turn it off, a newer find replaces it, the find is deleted, or 60 days after the find), or until you delete your account or the anonymous session is deleted. Times of alert notifications sent: 2 days. The list of ended watches (up to 50) and the time of the last alert: until you delete your account.
• Alert email choice, offers choice and the unsubscribe code: until you delete your account.
• Saved items: until you remove them or delete your account.
• Optional analytics records: 180 days, not linked to your account. Weekly activity record: until you turn analytics off or delete your account (it keeps at most the latest 104 weeks).
• Result-quality records: 90 days, not linked to you.
• Account, subscription and purchase records: until you delete your account (after the 72-hour cancellation window).
• Financial records required by UK tax law (sales and refunds): 6 years.
• Support emails and our replies: 12 months, then deleted or anonymised.
• Feedback sent from the app: 12 months, then deleted.
• Error reports: 30 days, held by Sentry.
• Encrypted backups (photos excluded): 7 days.
• Deletion records: a list of recent deletion requests is kept for 2 days longer than our backups (9 days with 7-day backups), so a restored backup cannot bring deleted data back.

14. Deleting your account

In the app, go to You → Review account deletion. If you cannot use the app, request deletion at https://api.getfitfinder.co/account/delete, using a code sent to your email address.

When you ask, we immediately remove your photos, stop running searches and revoke any share links. You then have 72 hours to cancel, in case the request was a mistake. After that, your account and its data are erased, including your Firebase sign-in account, and this cannot be undone. When your account is erased we also ask RevenueCat to delete its customer record for you. We do this on a best-effort basis, because it depends on RevenueCat’s service. Apple and Google keep their own purchase records under their own policies.

We keep only a scrambled marker that an account was deleted, with no email address or account ID, and anonymous totals of searches and costs with no link to you.

Deleting your account does not cancel a store subscription. Cancel it in your App Store or Google Play subscription settings.

15. Your rights

Under UK data protection law you have the right to:

• access your information: you can prepare a copy of your account data in the You tab of the app, or ask us. While you do not have an active Fit Finder Pro subscription, the copy from the app is partial: it leaves out the shop offers in your search results (shop and product names, prices and links) and says what it left out and how many; your searches, saved items and other data are included in full. A complete copy, including those offers, is free on request: email privacy@getfitfinder.co, and once we have confirmed it is you, we will send it within one month;
• correct inaccurate information;
• erase your information (see section 14);
• restrict or object to some processing, including processing based on legitimate interests;
• data portability;
• withdraw consent at any time where we rely on it (analytics, notifications, alert emails, offers), without affecting earlier processing.

To use your rights, email privacy@getfitfinder.co. We may need to confirm it is you. We will reply within one month. If you are unhappy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to help first.

16. Children

Fit Finder is not intended for children under 15. You must be at least 15 to use it. We do not knowingly collect information from children under 15. If you think a child under 15 has given us information, contact us and we will delete it.

17. Security and changes

Information is encrypted in transit (HTTPS) and backups are encrypted. Access to the server is restricted. Sign-in codes and internal identifiers are stored hashed. No system is perfectly secure; if a breach affects you, we will tell you and the ICO where the law requires.

If we change this policy we will update the date and version at the top. If a change materially affects how we use your information, we will tell you in the app before it takes effect. This policy is published at https://getfitfinder.co/app/privacy.