Vuppu
Privacy Policy
This Privacy Policy explains how Vuppu handles information used to provide its AI identity and content creation services.
Effective date
10 October 2026 — revision 3
Controller and how to reach us
Vuppu is operated by Daniel Zigdon, at 18 MacDonald Street, Ramat Gan, Israel, which is responsible for deciding how account and service data is used. Contact support@vuppu.app or the Contact page to exercise privacy rights.
Information collected
We process email and account identifiers; authentication and security records; uploaded face/body photographs and identity-training materials; AI identity profiles; prompts and generated images; Gallery and My Style items; V+ reference images, styling categories and analyses; support communications; device, usage and technical logs; and payment status and transaction identifiers. Payment details are processed under the arrangements disclosed by the payment provider at checkout.
How data is used
We use data to create and protect your account, train the personal AI identity you request, produce and store images, supply My Style recommendations, process Vcredits and purchases, support and troubleshoot the service, combat fraud or abuse, and comply with law. We do not make your private uploaded photographs publicly accessible merely by uploading them.
Legal bases and sensitive imagery
Where applicable, the legal bases for account and requested generation functions may include performance of a contract, consent for specifically disclosed identity-related processing, legitimate interests for security and prevention of abuse, and legal obligations for statutory records. Before identity-image processing, we request a distinct, explicit acknowledgement and consent for face/body image analysis, likeness-preserving identity-profile training, similarity checks and subsequent creation of images; this processing may involve biometric or other sensitive personal data. Users may withdraw consent for future processing by contacting support, subject to applicable law; withdrawal may prevent access to identity-dependent features. Withdrawal does not by itself remove records Vuppu is legally required to retain.
AI identity and automated processing
Your face and body images may be analyzed or used to create a trained identity representation and synthetic output. This is image-based processing and may qualify as biometric or other sensitive information depending on purpose and jurisdiction. Automated styling and image generation can shape creative results but do not, by themselves, decide legal rights.
My Style analysis
When you save a look or upload a V+ fashion reference, Vuppu can submit the image to an AI analysis provider to extract clothing, silhouette, materials, footwear and styling signals. Analyses are tied to the active saved image/reference; deletion of that source removes the linked analysis from Vuppu and prevents its use in subsequent new styling decisions.
Providers and disclosures
To provide the service, Vuppu uses hosting and infrastructure providers such as Vercel and Supabase; AI services such as fal, OpenRouter, Google and upstream model providers including Phota and vision models; and the payment provider identified at checkout. Depending on the feature, relevant images, prompts, account references or transaction details may be shared with these service providers. Provider retention, processing locations and safeguards depend on the specific route and must be verified before public launch.
Model training and provider retention
Training a private identity profile for your requested feature is different from training a general-purpose AI model. We cannot promise that every external provider immediately deletes all inputs, or never uses data for model development, without checking the applicable model, route and contractual terms.
Storage and security
Vuppu uses access controls, private media storage and time-limited links for access to uploaded/generated images, along with measures intended to prevent unauthorized access. No online system can guarantee perfect security. Some operational logging, backups or provider copies may persist separately from active account data.
Retention, Gallery Trash and deletion
We generally keep active-account data while needed to provide requested features. Gallery items moved to Trash are currently recoverable for seven days before scheduled permanent cleanup. Account deletion is designed to remove account-linked private media and personal records from Vuppu; limited records may remain where required for tax, legal claims, security or fraud prevention, and external providers may use different deletion schedules.
International transfers
Our infrastructure, payment and AI providers may process data in countries other than yours. Transfers that require safeguards under applicable privacy law must be supported by appropriate legal mechanisms.
Your choices and rights
You can remove My Style references, manage saved content and request account deletion. Depending on the law applying to you, you may ask for access, correction, deletion, portability, restriction or objection to processing, and withdraw consent where processing relies on it. You may also complain to a competent privacy regulator. Contact us to submit a request; identity verification may be needed.
Necessity and optionality
Creating a basic account requires certain account information. Uploading face images and running identity training are optional until you choose that feature, but the feature cannot work without the required images and processing. You should not submit another person’s images without permission, or images of minors.
Cookies and technical storage
Authentication, security and session features may use cookies or local storage. If we add non-essential analytics, advertising or tracking technologies, we will provide any required notice and choices before their use.
Changes to this notice
We may update this Policy when practices, providers or laws change and will identify material updates. This notice describes Vuppu practices; third-party payment and AI providers may also publish their own applicable terms. Contact us with questions or requests.