SPEQULO

1. Who We Are

Spequlo is a product of Spequlo Technologies Inc., a corporation incorporated in Ontario, Canada. We operate a physics-informed virtual try-on and fit intelligence platform for online apparel.

2. What Information We Collect

2.1 Account & Identity Data

• Full name and email address (via email/password sign-up or Google OAuth)
• Google profile ID (when using Sign in with Google)
• Avatar and profile photo

2.2 Biometric & Body Data

This is the most sensitive category of data we process. We collect it solely to power our fit simulation engine.

• Full-body photos submitted for mannequin / Fit ID generation
• Body measurements derived from image analysis (e.g., chest, waist, hip dimensions)
• Sizing profiles linked to your account

Body photos and derived measurements are stored encrypted. They are transmitted to third-party AI processing providers (listed in Section 5) only for the purpose of generating your Fit ID.

2.3 Garment & Try-On Data

• Garment images imported via the share extension or manual upload
• Try-on generation history, including timestamps and share IDs
• Saved wardrobe items and outfit collections

2.4 Usage & Analytics Data

We use PostHog (product analytics) and Sentry (error monitoring) to understand how users interact with Spequlo and to fix bugs.

• Page views, navigation paths, and session activity
• Custom events: clothing searches, try-on generations, wardrobe saves, garment imports, shares, downloads, and feedback
• Feature flag evaluations
• Error reports, stack traces, and session replays (10% of sessions; 100% of error sessions)
• IP addresses and user agent strings (captured by Sentry in error contexts)

2.5 Campaign & Community Data

• Raffle entries submitted during promotional campaigns (linked to user ID and generation ID)
• Anonymous votes on community feed entries (tracked via a locally stored voter fingerprint)

2.6 Communications Data

• Emails and messages submitted via our contact form (name, email, topic, message)
• Waitlist sign-up emails and referral source

2.7 Device & Local Storage

We store certain data locally on your device to improve your experience. This includes onboarding completion flags, persisted try-on state, guest usage counters, and anonymous visitor identifiers. None of this is transmitted to our servers unless explicitly associated with a logged-in session.

3. How We Use Your Information

3.1 To Provide the Service

• Authenticate and manage your account
• Generate your Fit ID (parametric body model) from uploaded photos
• Simulate garment fit and produce size recommendations, confidence scores, and tension maps
• Save and display your wardrobe, collections, and try-on history

3.2 To Improve the Platform

• Analyze usage patterns to identify improvements
• Calibrate our fit simulation engine across body types and garment categories
• Debug and resolve errors

3.3 To Communicate With You

• Respond to support and contact form inquiries
• Send product updates or campaign notifications (only if you have opted in)

3.4 Legal & Safety

• Comply with applicable law
• Enforce our Terms of Use
• Protect against fraud, abuse, or security incidents

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing personal data are:

5. Third-Party Services & Data Sharing

We do not sell your personal data. We share data with the following categories of third parties, only as necessary to operate our service:

5.1 AI Processing Providers

Your body photos and garment images are transmitted to external AI inference providers for processing. By using the fit simulation feature, you consent to this transmission.

• Replicate — AI model inference for try-on generation
• fal.ai — AI model inference for try-on generation
• Google Gemini — Image analysis, mannequin generation, body measurement extraction, size chart parsing, and AI styling features

5.2 Analytics & Monitoring

• PostHog — Product analytics (page views, custom events, feature flags). Configured for identified users only.
• Sentry — Error monitoring, session replay, and crash reporting. IP addresses may be collected in error contexts.

5.3 Infrastructure & Auth

• Supabase — Database, authentication, and file storage (Canada/US region)
• Browserless — Headless browser service used for scraping public product pages. No user PII is transmitted.

5.4 Mobile Notifications

• Expo Push Notification Service — Device push tokens stored for users of the Spequlo mobile app

6. Data Retention

• Account and profile data: retained while your account is active. Deleted upon account deletion request.
• Body photos and Fit ID data: retained while your account is active. Deleted within 30 days of an account deletion request.
• Try-on generation history: retained while your account is active.
• Analytics and error logs: retained for up to 12 months for product improvement purposes.
• Contact form submissions: retained for up to 24 months.
• Campaign and raffle data: retained for 6 months after campaign end.

7. Your Rights

7.1 All Users

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and associated data
• Portability — Request your data in a portable format

7.2 EEA / GDPR Users (Additional Rights)

• Right to object to processing based on legitimate interests
• Right to restrict processing
• Right to withdraw consent at any time (without affecting prior lawful processing)
• Right to lodge a complaint with your national supervisory authority

7.3 California / CCPA Users (Additional Rights)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise any rights, email us at divine@spequlo.com. We will respond within 30 days (GDPR) or 45 days (CCPA).

8. Biometric Data — Special Notice

Spequlo processes body photographs and derived body measurements, which may constitute biometric data under applicable law. We handle this data with heightened care:

• Body photos and measurements are encrypted at rest and in transit
• They are transmitted to AI providers only for Fit ID generation and are not used to identify individuals across contexts
• You may request deletion of your biometric data at any time by emailing divine@spequlo.com
• We do not sell, lease, trade, or profit from biometric data

9. Children's Privacy

Spequlo is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at divine@spequlo.com and we will delete it.

10. Security

We implement industry-standard security measures including encryption of sensitive data at rest and in transit, access controls, and regular security reviews. However, no system is perfectly secure. You are responsible for maintaining the confidentiality of your account credentials.

11. International Transfers

Spequlo is headquartered in Ontario, Canada. Your data may be processed or stored in the United States or other countries by our third-party service providers. Where applicable, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses for EEA transfers).

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our platform or by emailing you. Your continued use of Spequlo after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, requests, or complaints: