Dreamfit

Portrait & Biometric Consent

Required before we process your photo for virtual try-on

Last updated: [2026-xx-xx] · Version 1.0 (draft)

Draft template. This form is the written, informed consent required by GDPR Art. 9 and the Illinois Biometric Information Privacy Act (BIPA §15). In the product it should be an explicit opt-in checkbox shown before the first upload. Replace [bracketed] items before publishing. Not legal advice.

Contents: 1. Why we need this 2. What we collect 3. How it's used 4. Who sees it 5. Retention & destruction 6. No sale 7. Your rights & withdrawal 8. Your agreement

1. Why we need your consent

To create a virtual try-on, Dreamfit analyzes the photo you upload and derives facial and body geometry. This geometry is "special-category" data under the GDPR and "biometric information" under BIPA. Law requires your explicit, informed, written consent before we process it.

2. What we collect

The portrait/body photo you choose to upload.
Derived measurements and face/body landmarks used only to place clothing on your image.

We do not collect government IDs, nor do we build a persistent "faceprint" profile for identification.

3. How your data is used

Generate your requested try-on result.
Let you save, view, and share that result within your account.
Troubleshoot and improve rendering quality.

Your photo and geometry are processed by Dreamfit and our GPU sub-processor RunPod only for the duration of generation. They are not visible to other users, sold, or used for advertising targeting. See the Privacy Policy for the full sub-processor list.

5. Retention & destruction (BIPA written policy)

Our permanent destruction policy:

Your source photo is deleted immediately after the result is generated.
Derived geometry is deleted immediately after generation.
Generated results auto-delete after 30 days unless you Save them.
No biometric data is retained beyond 3 years from your last interaction (BIPA §15(a)).
On account deletion, all remaining data is purged within 30 days.

6. We do not sell your biometric data

Under BIPA §15(c), we will not sell, lease, trade, or otherwise profit from your biometric identifiers or information. We never disclose them except to sub-processors strictly necessary to perform the service or where law compels us.

7. Your rights & withdrawal

You may withdraw consent at any time from Account → Privacy & data or by emailing privacy@dreamfit.app.
Withdrawal stops future processing; data already generated is deleted per Section 5.
You may request export or erasure of all your data (GDPR/CCPA rights).

8. Your agreement

By checking the consent box at upload, you confirm:

You have read and agree to this Consent, the Privacy Policy, and the Terms of Service.
You are the person in the photo or have authority to upload it.
You provide explicit consent (GDPR Art. 9 / BIPA §15(a)) for Dreamfit to collect and process your biometric data solely to provide virtual try-on, subject to the retention and destruction policy above.

Record kept: consent timestamp, account ID, and policy version are stored to evidence this agreement.

[Dreamfit Legal Entity, Inc.]
Privacy: privacy@dreamfit.app
To withdraw consent or exercise rights: Account → Privacy & data