Privacy Policy
How TryOnAnytime handles your camera feed, photos, and personal information.
Last updated: 2026-10-15
Introduction
This Privacy Policy explains how TryOnAnytime ("we", "our") collects, uses, and protects your information when you use our virtual try-on service. By using the service, you agree to the practices described here. If you do not agree, please do not use the service.
Data Controller
TryOnAnytime is operated by Ren Jiansheng, an individual operator (no registered legal entity), who acts as the data controller for your personal information.
- Privacy contact: hi@tryonanytime.com
- Data Protection Officer (DPO): not applicable — given the scale of the service we have not appointed a DPO. All privacy requests go to the contact above.
Information We Collect
Information you provide:
- Account Information — Your name and email address when you create an account. If you sign in through a third-party identity provider (such as Google OAuth, where enabled), we receive the basic profile data that provider shares with us (name, email, avatar).
- Camera Feed (live try-on) — Your live camera video is streamed in real time to our AI processing provider (Decart) solely to render the try-on. It is never recorded, stored, or retained by us or by Decart after the session ends.
- Photos (photo try-on) — The selfies and garment images you upload, and the result images we generate, are stored in your private account history so you can revisit them. You can delete any item from your history at any time, which removes it permanently.
- Usage Data — Features used, try-on counts, and credit balance activity, used for metering and abuse prevention.
- Payment Information — Payments are processed by Waffo, our merchant of record. Waffo handles your card details, billing address, and tax calculation; we never see or store your full card number. Waffo appears on your bank statement.
Information collected automatically:
- Device & Log Data — Your IP address, device and browser type, and request logs. The service is hosted on Cloudflare Workers, which processes this data to deliver, secure, and troubleshoot the service.
How We Use Your Information & Legal Bases
We use your information to render virtual try-ons and deliver result images, to meter credit consumption and prevent abuse, to process purchases and handle support requests, and to improve the service. We do not sell your personal data.
Where the GDPR (or a similar law) applies, we rely on the following legal bases:
| Purpose | Contract | Legitimate interest | Legal obligation | Consent |
|---|---|---|---|---|
Render try-ons and deliver result images | ✓ | |||
Process purchases, invoicing, and tax | ✓ | ✓ | ||
Meter credits; prevent fraud and abuse | ✓ | |||
Service notices (billing, security, account) | ✓ | ✓ | ||
Analytics and product improvement | ✓ | ✓ | ||
Marketing communications (not currently sent) | ✓ |
Where we rely on consent (for example, camera access or analytics cookies), you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Cookies & Tracking
We use the following cookies and similar technologies:
- Strictly necessary cookies — required for sign-in, session management, and security. These cannot be switched off.
- Google Analytics — usage analytics, running in Consent Mode: if you reject analytics, only anonymous, cookieless pings are sent. See Google's Privacy Policy.
- Plausible Analytics — cookieless, privacy-friendly analytics that does not use cookies or collect personal data. See Plausible's Data Policy.
- Google AdSense — advertising, loaded only after you consent. See Google's Advertising Privacy Policy.
You can accept or reject non-essential cookies at any time via Cookie Settings (linked in our website footer). Rejecting them does not affect core functionality.
How We Share Information
We do not sell your personal information — including as "sale" or "sharing" is defined under the CCPA. We share the minimum necessary with:
- Waffo (Waffo Pancake) — our PCI-DSS compliant payment processor and merchant of record. Your card data goes directly to Waffo and never passes through our servers.
- Decart — the AI model provider that renders try-ons. Live camera frames are transmitted over an encrypted connection during an active session only and are not retained.
- Cloudflare — hosting (Cloudflare Workers) and email delivery, which process request and log data to operate the service.
We may also disclose information when required by law (e.g. a valid court order), in connection with a business transaction such as a merger or acquisition (with notice to you), or otherwise with your consent.
Data Security
We protect your information with encryption in transit (TLS), hashed password storage (via better-auth), and least-privilege access to production systems. No method of transmission or storage is perfectly secure, but if a data breach affecting your personal information occurs, we will notify you and the competent authority within 72 hours where the law requires it.
Data Retention
| Data type | Retention period |
|---|---|
| Account information | Deleted within 30 days of account deletion |
| Order & transaction records | 5 years (tax and accounting compliance) |
| Support correspondence | 2 years |
| Security & request logs | 6 months |
| Try-on photos & result images | Until you delete them or delete your account |
| Live try-on video | Never recorded or retained |
Your Privacy Rights
Where the GDPR applies, you have the following rights:
| Right | What it means |
|---|---|
| Be informed | Know how your data is used — this policy |
| Access | Request a copy of the personal data we hold about you |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Have your data deleted ("right to be forgotten") |
| Restriction | Limit how we process your data |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw any consent you have given, at any time |
To exercise any of these rights, email hi@tryonanytime.com. We respond within 30 calendar days. You also have the right to lodge a complaint with your local data protection supervisory authority. If you are in another jurisdiction (e.g. California under the CCPA), we honor equivalent rights on request.
Marketing Communications
We do not currently send marketing or promotional emails. We only send service messages necessary to run your account — billing receipts, security alerts, and important policy notices. If we introduce marketing communications in the future, we will ask for your explicit consent first, and every message will include an unsubscribe option.
International Data Transfers
Our service providers — Cloudflare (global edge network), Decart, and Waffo — may process your information in countries other than your own. Where data is transferred internationally, we rely on safeguards such as standard contractual clauses (SCCs) and each provider's own compliance obligations to protect it.
Children's Privacy
The service is intended for users aged 18 or older only. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us information, contact us at hi@tryonanytime.com and we will delete it promptly.
Third-Party Links
Our website may link to third-party sites or services. We are not responsible for their content or privacy practices — please review their policies before providing them any information.
Changes to This Policy
We may update this policy as the service evolves. For material changes, we will give at least 15 days' notice via an on-site announcement or an email to your registered address before the change takes effect. The updated date above reflects the latest revision.
Contact Us
For privacy questions, requests, or complaints — and for general support — contact us at hi@tryonanytime.com.