Privacy Policy

Who we are

Pehno ("Pehno", "we", "us") is built and run by Sairev, an independent developer based in India. We are responsible for your personal data under this policy. You can reach us at pehnoai@gmail.com.

This policy covers the Pehno Android app and this website. We keep it in line with India's Digital Personal Data Protection Act, 2023 and the IT Act, 2000, and the Google Play User Data policy.

The short version

• Your wardrobe, photos, saved advice and chats are stored on your phone.
• You sign in with Google. Your account holds your plan, your AI credits and a private daily backup.
• Photos and your style profile go to Google Gemini only when you run an AI feature.
• We don't sell your data, show ads, or use analytics or tracking tools.
• You can export everything, and delete your account and backups from the app at any time.

Data stored on your phone

Pehno keeps the following in its private app storage on your phone:

• Your wardrobe: photos of your clothes (and any AI-made product photos), item names, types, colours, tags, notes, favourites and wear status.
• Your style profile: your name, wear preference, styles, budget, city or climate, notes, and any body measurements you choose to add (such as height, chest, waist, weight, shoe size and fit). Only your name is required.
• What you create: product checks and comparisons, layered looks, wardrobe-gap audits, suitcases, combos, sets, follow-up chats, your ratings of suggestions and the preferences Pehno learns from them.
• App records: an estimate of what each AI request cost, and a log of recent errors and crashes (the last 200 entries). This log never leaves your phone unless you choose to copy or share it with us.
• Your own Gemini API key, if you add one. It's kept in Android's encrypted storage and is never included in backups.

Your account

You sign in with Google. We receive your name, email address, profile picture link and Google account ID, and use them to create your Pehno account (hosted by Supabase), show which account you're signed in with, and keep your plan, credits and backups tied to you. We never see your Google password.

On our servers, your account also has:

• Your plan: your tier, subscription product, renewal and expiry dates.
• AI usage records: for each Pehno AI request, the feature used, the model, token counts, estimated cost, response time and any error code. We use these to count credits, prevent abuse and keep the service running. They don't include your photos, prompts or AI answers.

Cloud backup

While you're signed in, Pehno backs up your wardrobe about once a day to private cloud storage that only your account can access. Each backup is a zip of your style profile, your clothes and their photos, saved advice and chats, AI cost history, compare list, suitcases, sets and combos. It doesn't include your Gemini key, app lock setting, error log or learned preferences.

We keep your 7 most recent backups and delete older ones automatically. Backups are sent over an encrypted connection and stored encrypted at rest by our storage provider. You can restore one on any phone you sign in on, or export a backup zip yourself from Settings › Your data.

How AI features use your data

Pehno's advice comes from Google Gemini. When you run an AI feature, Pehno sends Google only what that feature needs:

• Photos of your clothes, to tag them and to make clean product photos and combo pictures.
• Photos of you, when you scan an outfit or mirror selfie to pick out the garments.
• Product links, screenshots and listing text for product checks, comparisons and imports. To read reviews and prices, Gemini may search Google or open the product page.
• Your wardrobe: a combined image of your wearable pieces and their descriptions, so advice is based on what you own.
• Your style profile (but not your name), including any body measurements you've added, and the preferences Pehno has learned from your ratings.

The route depends on which AI you use:

• Pehno AI (the default): requests go through our server, which checks your credits and passes them to Google. Our server doesn't store the photos, prompts or answers. It only keeps the usage record described above.
• Your own Gemini key: requests go straight from your phone to Google under your key, and Pehno doesn't see them. Google's terms for your key apply. On Google's free tier, Google may use content to improve its products.

Google handles this data under the Gemini API Additional Terms and the Google Privacy Policy.

Store pages, sharing and Try-on

• Store pages: when you check or import a product, your phone opens the store page and downloads its images directly, the way a browser would. The store sees an ordinary visit from your phone.
• Try-on and sharing: Try-on makes a picture of the pieces you chose and copies a prompt that describes them (including the fit and your height, if you've added it). Pehno then opens Android's share sheet. Whatever app you pick, such as Gemini or ChatGPT, gets that picture and prompt under its own privacy policy. Pehno makes no AI request for Try-on. Share cards and exported backups work the same way.

Payments

Paid plans are bought through Google Play. Google processes your payment, and we never see your card or bank details. We use RevenueCat to confirm your subscription. RevenueCat receives your Pehno account ID and your purchase details from Google Play.

Permissions on your phone

• Camera and photos: to photograph clothes or pick photos you choose. Pehno only reads the photos you select.
• Biometrics: for the optional app lock. Android handles your fingerprint or face, and Pehno never receives it.
• Notifications: to tell you when an AI result is ready. These notifications come from your phone, not from our servers.
• Internet: for AI requests, sign-in, backups and store pages.

Pehno doesn't use your microphone, location or contacts.

Who we share data with

We share data only with the service providers that run Pehno, and only for the purposes above. Each one processes it on our behalf or under its own terms:

• Google: sign-in, Gemini AI and Google Play billing.
• Supabase: accounts, plans, AI usage records, the Pehno AI service and cloud backups.
• RevenueCat: confirming subscriptions.

We don't sell or rent your personal data, and we don't share it for advertising. We may disclose data if the law requires us to, or to protect the rights and safety of our users or of Pehno.

Some of these providers process data outside India. When they do, it's protected by their own security measures and contracts, and transferred as Indian law allows.

How long we keep data

• Data on your phone stays until you delete it, clear Pehno's storage or uninstall the app.
• Cloud backups: your latest 7. All of them are deleted when you delete your account.
• Your account and plan: until you delete your account.
• AI usage records: kept to account for costs and prevent abuse. When you delete your account, they're unlinked from you, so they no longer identify you.

Deleting your data and account

Step-by-step instructions, including how to ask by email without the app, are on our Delete your account page.

• Delete your account: in the app, go to Settings › Account and tap delete. This deletes your Pehno account, your plan record and all your cloud backups, and wipes Pehno's data from the phone. Cancel any Google Play subscription separately in Play Store › Payments & subscriptions.
• Clear just this phone: Settings › Start over › Delete all data. This wipes your wardrobe from the phone but keeps your account and existing backups.
• Without the app: email pehnoai@gmail.comfrom the Google account you use with Pehno and ask us to delete it. We'll delete your account and backups within 30 days and confirm by email.

Your rights

You can see, export, correct and delete your data in the app. You can also email us to ask what personal data we hold about you, to correct or delete it, to withdraw your consent (which may stop some features from working), or to nominate someone to act for you. We'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

Security

Data travels over encrypted connections. Your backups and account data are walled off so only your account can reach them. Your API key sits in Android's encrypted storage, and you can turn on an app lock. No system is perfectly secure, so keep your phone and Google account protected. If a breach affects your data, we'll tell you and the authorities as the law requires.

Children

Pehno is not for children under 13. If you're under 18, you need a parent or guardian's permission, and they should read this policy with you. If you think a child under 13 is using Pehno, email us and we'll delete their account.

This website

This website uses no tracking cookies or analytics. Our host, Vercel, keeps standard server logs, such as IP address and browser type, to deliver and protect the site. Fonts are served from our own domain.

Early access list: if you join it, we keep your email, which phone you use (if you tell us) and the link you came from, in our Supabase database. We use them only to email you when Pehno opens and to count interest, never for ads, and we don't share them. Email us to be removed at any time.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use your data, we'll also tell you in the app before it takes effect.