Legal
Privacy Policy
This policy explains how ZoneEvo handles information across our apps, websites, and connected services.
Last updated: August 26, 2026
Scope
This Privacy Policy applies to ZoneEvo apps, websites, and connected services that link to it. It explains what personal information we process, why we process it, the categories of recipients involved, how long we keep it, and the choices and rights available to you.
Who We Are
ZoneEvo LTD is the controller of personal information processed for the services covered by this policy, except where another party acts as an independent controller under its own terms. You can contact us at support@zoneevo.com or by mail at 71-75, SHELTON STREET, LONDON WC2H 9JQ, United Kingdom.
Information We Collect
The categories of personal information we collect may vary depending on the ZoneEvo apps and services you use and may include:
- Account information, including email address, account identifier, display or profile name, sign-in provider, sign-in status, and account-recovery activity. Passwords are processed by our authentication provider; ZoneEvo does not receive or store plaintext passwords.
- Profile and personalization information that you choose to provide, including gender, ethnicity, birthday or calculated age, height, weight, body type, hair colour, preferred unit system, app preferences, and face or full-body reference photos. Some of this information may be sensitive under applicable law.
- User content and interactions, including clothing, face, and full-body photos you choose to upload; prompts and speech-recognition text; preferences, metadata, saved items, generated images and text, notes, favourites, and feedback.
- Credit and purchase information, including credit balance, purchase identifiers, refund events, and purchase status needed to deliver consumable credits or digital products.
- Device, network, diagnostics, advertising, and usage information, including app and operating-system version, device model, language and region, crash and error details, app startup and lifecycle timing, HTTP or HTTPS request timing and payload size, installation and advertising identifiers, IP address, user agent, security signals, ad interactions, and behavioral events where you have made the relevant privacy choice. Performance monitoring uses request URLs without query parameters to produce aggregated URL patterns. Custom analytics events are designed not to include emails, images, free-form text, voice transcripts, or content identifiers.
- Location and voice-related information that you actively provide, including city or place searches, coordinates derived temporarily from a selected place to retrieve weather, the location name and weather context saved with a feature, and speech-recognition text when you choose voice input. The current city-search feature does not request your device's GPS location, and we do not intentionally retain an audio recording after speech recognition.
Service Providers
We use carefully selected service providers and platform operators to deliver the service. They may process personal information only for the purposes described here and under applicable contractual, legal, and platform requirements. Categories include hosting, authentication, storage, security, diagnostics, analytics, purchases, AI and image processing, advertising, location and weather lookup, and customer support.
- Account and authentication providers help manage account creation, sign-in, password reset, authenticated sessions, and related security checks.
- Hosting and storage providers store account records, profile information, user content, generated results, images, preferences, and credit-related records.
- Operational and communications providers help process requests, purchases, image and AI features, support workflows, and service maintenance. Support and feedback messages may be stored with your account identifier and delivered to our support mailbox through an email-delivery provider.
- Security and anti-abuse providers help confirm that requests come from legitimate apps, websites, devices, or browsers.
- Diagnostics and performance-monitoring services may process crash reports, error messages, device details, installation identifiers, app lifecycle and startup timing, and network-request performance to maintain security, reliability, and responsiveness. Diagnostics may also use a pseudonymous account identifier. Optional behavioral analytics is disabled until the relevant privacy choice permits it; when enabled and you are signed in, a pseudonymous account identifier may be used to measure use across sessions and devices. You can change available analytics choices in Privacy Choices.
- AI and service-management providers help us operate features, process prompts and images, and generate or analyze content when a feature requires it.
AI Processing
Some ZoneEvo apps include AI-enabled features that analyze user-provided content, improve search, provide recommendations, edit media, or create images and other outputs. Depending on the feature, inputs may include clothing photos, face or full-body reference photos, prompts, saved items, and profile attributes such as age, gender, ethnicity, height, weight, body type, and hair colour.
- When you request an AI-enabled feature, we and our processors may use the selected inputs only as reasonably necessary to classify clothing, remove backgrounds, personalize recommendations, create virtual outfit imagery, or provide the requested result.
- We may process your content to make search and recommendations available within your account.
- For recommendation or generation features, selected account content, profile attributes, and preferences may be sent to AI processors so they can produce the result you requested.
- For clothing analysis, background removal, image editing, virtual outfit imagery, and related media features, processors may receive temporary access to selected clothing, face, or full-body images and associated prompts. Do not submit another person's image without their permission.
- Inputs and generated results may be retained in your account so you can view, retry, or manage them. Processors may retain request data for service delivery, security, abuse prevention, or legal compliance under their applicable terms. We do not authorize providers to use your private account content to train general-purpose models unless we first provide any notice or obtain any consent required by law. AI results may be inaccurate, incomplete, or similar to outputs generated for other users.
Purchases And Credits
ZoneEvo apps may use payment processors, app stores, and purchase-management providers to sell consumable credits or other digital products. These providers may send purchase or refund information to us so we can update your credit balance, entitlements, and purchase records.
If you opt in through an iOS app, we may share purchase-delivery information with Apple through our purchase-management provider when Apple reviews your refund request. This information is used to help Apple assess that request. You can withdraw this consent in the app profile before you submit a refund request.
- We maintain purchase and credit records, including credits added, reserved, used, adjusted, or returned. Credits may be reserved while a paid feature is processing and returned if processing cannot be completed.
- Credit amounts, product availability, and feature availability may vary and may change over time. This policy describes the categories of information processed for purchases and credits, not current prices or credit amounts.
Weather And Location Lookup
If you search for and select a city, location-search services process the search and return a selected place. Coordinates derived from that place are sent temporarily to a weather provider. We save the location name, weather, and temperature with the related feature data, but not the lookup coordinates. This feature does not request the device's GPS location.
Device Permissions
ZoneEvo apps may ask for device permissions such as camera, photo library, microphone, notifications, or similar access when a feature needs them. You can control these permissions from your device settings, but disabling them may limit related features.
How We Use Information
We use information for the following purposes:
- To provide, maintain, and improve the services, including account management, authentication, storage, image processing, generated results, and customer support.
- To personalize features, recommendations, search results, and generated outputs based on the information and preferences you provide.
- To prevent abuse, verify service integrity, enforce authenticated access, investigate errors, monitor stability, and protect users and the service.
- To process credit purchases, refunds, reservations, usage, adjustments, and related transaction records.
- To respond to support messages and investigate reported issues.
- To comply with legal obligations, enforce terms, preserve records needed for disputes, and protect rights and safety.
Legal Bases For Processing
Where data-protection law requires a legal basis, we rely on the basis appropriate to the purpose and context:
- Contract: processing needed to create and manage your account, provide requested features, store your content, and administer purchases and credits.
- Legitimate interests: securing and improving the service, preventing fraud and abuse, diagnosing faults, supporting users, and maintaining business records, balanced against your rights and expectations.
- Consent: optional behavioral analytics, personalized advertising or cross-app tracking, and processing that requires consent because of its nature or your location. You may withdraw consent prospectively through the available controls.
- Legal obligation and legal claims: processing needed for tax, accounting, consumer-protection, regulatory, law-enforcement, dispute, and compliance requirements.
Retention And Deletion
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining security, resolving disputes, and meeting legal, tax, accounting, and platform obligations. Retention depends on the data type, account status, legal requirements, and provider lifecycle.
- Account, profile, photos, and other user content are generally retained while your account is active or until you delete the content or account. An account-deletion request removes the account and associated content from active systems after verification and processing, subject to the exceptions below.
- Deleted or replaced content may remain temporarily in backups, caches, pending processing, security records, or processor systems until ordinary deletion cycles complete. We may retain a minimal record of a deletion request to demonstrate compliance.
- Diagnostics, security, advertising, analytics, and processor records are retained under configured retention periods and the providers' applicable deletion cycles. Where supported and appropriate, we request deletion of account-linked analytics identifiers when an account is deleted.
- Purchase, refund, credit-ledger, execution, consent, fraud-prevention, tax, accounting, and dispute records may be archived and retained after account deletion where reasonably necessary or legally required. Access is restricted, and these records are not retained for continued personalization or advertising.
Security And International Transfers
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, security checks, and encryption features provided by our service providers. Information may be processed in countries other than where you live, subject to applicable safeguards and our agreements with service providers.
Your Choices And Rights
Depending on where you live, you may have rights to access, correct, delete, receive a copy of, restrict, or object to processing of your personal information, withdraw consent, and complain to your local data-protection authority. These rights may be subject to lawful exceptions.
- You can change camera, photo library, microphone, and notification permissions through your device or browser settings.
- You can edit profile, preference, and user-generated content in the app where editing controls are available.
- You can request account deletion, data access, or correction by visiting our account deletion page here or contacting support. We may need to verify your account before completing the request.
- We do not use your private user content or profile photos to create advertising profiles. Optional behavioral analytics and personalized advertising are subject to the available consent and platform controls. You can reopen Privacy Choices where available, manage operating-system tracking permission in device settings, and exercise applicable opt-out rights. Users identified as under the relevant age of consent receive restricted advertising treatment.
Children
ZoneEvo apps and services are not directed to children under 13, and users must meet the age requirements in our Terms of Use. Where we know a user is below the applicable age for advertising consent, we apply restricted advertising settings. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action.
Contact
For privacy requests or questions, contact us at support@zoneevo.com. If you are in the United Kingdom, you may also complain to the Information Commissioner's Office; if you are elsewhere, you may contact your local data-protection authority. We would appreciate the opportunity to address your concern first.