Privacy Policy

At LifeGeek AI, we take your privacy seriously. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our AI-powered lifestyle assistant platform.

1. Who We Are

LifeGeek AI is an innovative lifestyle technology company that provides AI-powered fashion analysis, style recommendations, and product discovery services. We combine advanced artificial intelligence with real-time data to help you make better lifestyle choices.

Data Controller: LifeGeek AI OÜ is the data controller for your personal data. You can contact us at privacy@lifegeek.ai or by post at Sepapaja tn 6, 15551 Tallinn, Estonia.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password (encrypted), and profile preferences
• Fashion Profile: Style preferences, body measurements (optional), budget ranges, and preferred brands
• Wardrobe Items: Photos, descriptions, and metadata of clothing items you store in your digital wardrobe (retained until you delete them)
• Shopping Cart Context: Multi-item fashion queries and cart data used to coordinate outfit recommendations (temporary session data)
• Images: Photos you upload for fashion analysis (processed and deleted within 24 hours unless saved)
• Communication: Messages, feedback, and support requests you send to us

2.2 Information We Collect Automatically

• Usage Data: How you interact with our platform, features used, and time spent
• Device Information: Device type, operating system, browser type, and app version
• Network Data: We process IP addresses and similar connection data for security, fraud and abuse prevention, and to apply fair-use limits (for example on guest or trial features)
• Location Data: General location for weather-based recommendations (if permitted)
• Analytics Data: Performance metrics and user behavior patterns (anonymized where feasible)

2.2a Guest try (before you create an account)

If you use the guest try (limited fashion assistant messages before sign-up), we do not use your name or email for that feature unless you choose to register. We may set a small, httpOnly, signed technical cookie in your browser to count free guest messages, process your IP address to limit abuse, and process the text you send and the responses from our services (AI, product search, weather) in line with the rest of this policy. For a full feature set, including image upload and saved history, you need an account.

2.3 Information from Third Parties

• Social Login: Public profile information when you sign up through Google, Apple, or other providers
• Product Search: Search queries sent to retail partners (no personal data stored)
• Weather Services: Location-based weather data from OpenWeather API for fashion recommendations

2.4 Meta Platform Data

If you interact with LifeGeek AI through our Facebook Page or Instagram professional account, we may process information made available to us through Meta's official APIs. Depending on your interaction, this may include your public profile information, username or platform identifier, posts, comments, direct messages, mentions, reactions, and related engagement information.

We use this information to manage LifeGeek AI's social-media presence, publish and manage content, respond to comments and messages, monitor engagement, provide customer support, and improve our communications.

We may use our internal OpenClaw agent and Anthropic (Claude) to analyse the context of Facebook or Instagram comments or direct messages and prepare draft replies. Drafts may be sent to an authorised LifeGeek administrator via Telegram for human review and approval before any reply or post is sent or published.

We do not sell Meta Platform Data. You may request access to, correction of, or deletion of personal information obtained through Facebook or Instagram by contacting privacy@lifegeek.ai. This applies whether or not you have a LifeGeek AI account. We will delete applicable Meta Platform Data when it is no longer required or following a valid deletion request, unless retention is required by law.

3. How We Use Your Information

3.1 Core Services

• AI Fashion Analysis: Process your images using GPT-5 Mini to provide style recommendations
• Personalized Recommendations: Tailor suggestions based on your preferences, body type, and budget
• Wardrobe Management: Store, organize, and analyze your clothing items with AI-powered categorization and outfit coordination
• Shopping Cart Context: Track multi-item fashion queries to provide coordinated product recommendations across different clothing categories
• Product Discovery: Search retail marketplaces for relevant fashion items matching your style
• Weather Integration: Provide weather-appropriate clothing suggestions for your location or travel destinations

3.2 Platform Improvement

• Service Enhancement: Improve AI accuracy, user interface, and feature functionality
• Analytics: Understand usage patterns to optimize performance and user experience
• Research: Develop new features and improve existing recommendation algorithms

3.3 Communication

• Account Management: Send verification emails, password resets, and security notifications
• Updates: Inform you about new features, policy changes, and platform improvements
• Marketing: Send promotional content and style tips (only with your explicit consent)

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: For marketing communications, optional features, and data processing preferences
• Contract Performance: To provide our core AI fashion analysis and recommendation services
• Legitimate Interest: For platform improvement, security, and analytics (with privacy safeguards)
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

Payments and subscriptions

When you subscribe or buy credits, payments are processed by Stripe. We receive only what is needed to run your account (for example subscription status and billing events). Payment card details are collected and stored by Stripe according to their policies, not on our servers in full.

5.1 Service Providers

We share information with trusted third-party providers who help us deliver our services:

• OpenAI (GPT-5 Mini): Powers the user-facing LifeGeek fashion assistant, including style analysis, outfit suggestions, and in-app chat on our website and app.
• Anthropic (Claude): Our internal OpenClaw agent may process Facebook or Instagram comments or direct messages using Claude to analyse context and draft replies. A human approves each draft via Telegram before any reply or post is sent or published. Claude is not used for the consumer-facing LifeGeek fashion assistant.
• Meta (Facebook / Instagram): We use Meta's official APIs to access and manage interactions relating to LifeGeek's Facebook and Instagram accounts, including posts, comments, messages, mentions, reactions, and related engagement data, where permitted by Meta.
• Telegram: We use Telegram as an internal approval channel for marketing and social-media workflows. Draft replies or posts prepared by our internal OpenClaw agent may be sent to an authorised LifeGeek administrator via Telegram for review and approval before being sent or published.
• Retail Partners: For product search and discovery (search queries only, no personal data)
• OpenWeather: For location-based weather data (location coordinates only)
• Cloud Infrastructure: Google Cloud for secure data storage and processing
• Email Services: For account verification and communication (email addresses only)

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5.3 Legal Requirements

We may disclose information when required by law, to protect our rights, prevent fraud, or ensure user safety.

6. Data Security

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication: Secure password hashing (bcrypt) and optional multi-factor authentication
• Access Controls: Role-based permissions, audit logging, and principle of least privilege
• Infrastructure: SOC 2 compliant cloud providers with regular security audits
• Monitoring: 24/7 security monitoring, intrusion detection, and incident response

7. Data Retention

• Account Data: Retained while your account is active, plus 30 days after deletion
• Fashion Analysis Images: Processed and deleted within 24 hours (unless explicitly saved by you)
• Wardrobe Item Images: Retained indefinitely until you delete them from your wardrobe
• Shopping Cart Data: Session-based temporary data deleted when session ends (typically 30 days)
• Usage Analytics: Anonymized data retained for up to 2 years for service improvement
• Communication Records: Support emails retained for 1 year for quality assurance
• Meta Platform Data: Facebook and Instagram comments, messages, and related engagement data are retained only for as long as reasonably necessary to manage our social-media accounts, respond to users, measure performance, comply with legal obligations, and resolve disputes. We delete or anonymise such data when it is no longer required and honour valid deletion requests unless retention is required by law.
• Legal Requirements: Some data may be retained longer to comply with applicable laws

8. Your Privacy Rights

8.1 GDPR Rights (EU Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your personal data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for marketing and optional features

8.2 How to Exercise Your Rights

To exercise your privacy rights, please contact us at:

• Email: info@lifegeek.ai
• Privacy Requests: privacy@lifegeek.ai
• In-app Privacy Settings: Manage your consent preferences at /privacy/settings
• Data Export: Request your complete data archive at /privacy/export-data (delivered within 7 days)
• Account Deletion: Initiate account deletion at /privacy/delete-account (30-day grace period before permanent deletion)
• Response Time: We respond to privacy inquiries within 72 hours, with most requests resolved within 30 days as required by GDPR

9. Cookies and Tracking

We use a cookie consent banner before loading non-essential tracking. Google Analytics helps us understand usage patterns. On our guest try page (/try), we may load the Reddit Pixel (only if you accept cookies) to measure ad traffic from Reddit campaigns.

• Essential Cookies: Required for login, security, and core functionality
• Analytics: Help us understand usage patterns (can be disabled in browser settings)
• Preferences: Remember your choices and settings
• Third-Party: Limited use for core services only (GPT-5 Mini, retail partners, weather data)

10. International Data Transfers

We may transfer data internationally for service provision. All transfers are protected by:

• Adequacy decisions where applicable
• Standard Contractual Clauses (SCCs)
• Certification schemes and codes of conduct
• Additional technical and organizational measures

11. Children's Privacy

LifeGeek AI is not intended for users under 16 years old. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email and platform notification. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Information

14. Supervisory Authority

EU users have the right to lodge complaints with their local data protection authority. Estonian users can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).