Refi Privacy Policy

1. Types of Information We Collect

Refi ("we", "us", "our") collects information to provide and improve our services for outdoor camping outfit transformation. The types of information we collect include:

• Account Information: Email address, username, password (encrypted), and profile information you provide when creating an account.
• Content You Upload: Photos/videos of old and transformed clothing, transformation notes, community posts, and comparison posters generated through the App.
• Device & Usage Data: Device model, operating system, IP address, App usage duration, feature interaction records, and camera/album access permissions (only with your explicit consent).
• Optional Information: Information you provide when participating in community challenges (e.g., fashion expert certification applications).

We do not collect sensitive personal information (e.g., race, religion, health records) unless voluntarily provided by you.

2. Purposes of Information Use

We use the collected information for the following legitimate purposes:

• To provide and maintain core App functions (e.g., photo upload, poster generation, community sharing).
• To improve user experience: Analyze usage patterns to optimize App performance and add new features tailored to user needs.
• To manage community challenges and issue fashion expert certifications.
• To communicate with you: Send service-related notifications (e.g., policy updates, challenge results) to your registered email.
• To ensure security: Detect and prevent fraudulent activities, unauthorized access, or violations of our User Agreement.

3. Third-Party Service Data Processing

We may engage trusted third-party service providers to assist in operating Refi, and these providers may process your data on our behalf:

• Cloud storage providers: To store your uploaded photos and content (encrypted at rest).
• Analytics tools: To analyze App usage (data is anonymized to protect your identity).
• Payment processors (if applicable): To handle transactions for paid features (no payment data is stored on our servers).

All third-party providers are contractually obligated to protect your data and only use it for the purposes we specify, in compliance with applicable privacy laws (e.g., GDPR, CCPA).

4. Scenarios of Information Sharing

We will not sell your personal information to any third party. We may share your information only in the following limited scenarios:

• With your explicit consent: e.g., sharing your transformation posts to social media platforms (at your request).
• Community content: Content you choose to share publicly in the Refi community is visible to other App users.
• Legal requirements: When required by law, court order, or government regulation, or to protect our legal rights and safety.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction (you will be notified in advance).

5. Security Measures

We implement industry-standard security measures to protect your data from unauthorized access, disclosure, or alteration:

• Encryption: Passwords are stored using bcrypt hashing; sensitive data (e.g., photos) is transmitted via HTTPS.
• Access control: Only authorized personnel have access to user data, and access is logged and monitored.
• Regular security audits: We conduct periodic security assessments and updates to address potential vulnerabilities.
• Device-level protection: We require your explicit permission before accessing camera/album on your device.

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. User Rights to Data

You have the following rights regarding your personal data, in compliance with global privacy regulations:

• Access: Request a copy of all personal data we hold about you.
• Correction: Update or correct inaccurate or incomplete personal information.
• Deletion: Request deletion of your account and all associated data (except as required by law to retain).
• Download: Export your uploaded content (photos, posts) to your device.
• Withdraw consent: Revoke permission for camera/album access at any time via your device settings (may limit some App features).

To exercise these rights, contact us at Refi@gmail.com with your request, and we will respond within 30 days.

7. Children's Privacy Protection

Refi is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will immediately delete such information. Parents/guardians who believe their child has provided data to us may contact us at Refi@gmail.com to request deletion.

For users aged 13-17, we require parental/guardian consent for account creation and use of community features. Parents/guardians may review or delete their child's data by contacting us.

8. Policy Update Mechanism

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements:

• Notification of changes: We will notify you of material changes via in-App notification, email, or prominent notice on our App homepage at least 30 days before the changes take effect.
• Effective date: Updated policies will include a new effective date, and your continued use of Refi after the effective date constitutes acceptance of the updated policy.
• Archive of old policies: We will keep a copy of previous versions of this policy for your reference upon request.

If you do not agree to the updated Privacy Policy, you must stop using Refi and request account deletion.