Privacy Policy

Sukat ("we," "our," or "us") is an AI-powered wardrobe and outfit suggestion app built for the Philippines. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application and website (collectively, the "Service").

By using Sukat, you agree to the collection and use of information in accordance with this policy and with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines.

We collect the following types of information:

Account Information

When you register, we collect your name, email address, and password (stored as a secure hash). You may also provide optional profile details such as body measurements and style preferences.

Wardrobe & Photo Data

Photos of clothing items you upload to build your digital wardrobe. These images are stored securely via Cloudinary. We also store metadata such as item category, colour, and any product links you associate with items.

Body Scan Data

If you use the Body Scan feature, we collect two full-body photos (front and side view) along with optional height and weight. These photos are processed server-side using MediaPipe Pose to verify photo completeness, then stored in a private encrypted AWS S3 bucket in the Singapore (ap-southeast-1) region. Body scan photos are never publicly accessible — they are only viewable via time-limited signed URLs generated for your authenticated session. From these photos and your height/weight, we compute clothing measurements (chest, waist, hips, inseam, shoulder width) used for fit recommendations and virtual try-on.

Usage Data

How you interact with the app — screens visited, outfit feedback (thumbs up/down), features used, and session duration. This helps us improve our recommendations.

Device & Technical Data

Device type, operating system version, app version, IP address, and crash logs. This data is used for diagnostics and service reliability.

Location Data (Optional)

With your permission, approximate location data to provide weather-appropriate outfit suggestions via the Open-Meteo weather API. We do not store precise GPS coordinates.

We use your information to:

We do not sell your personal information to third parties. We do not use your data for advertising profiling.

When you use the Virtual Try-On feature, your garment photo and body scan reference image are sent to Google Vertex AI (Gemini) for processing. Here is exactly what happens to your images:

What Google receives

The input images (your garment photo and body reference photo) are transmitted to Google Cloud's Vertex AI servers for AI image generation. Your body scan photo is sent as a time-limited signed URL that expires after one hour.

How long Google stores them

Google Cloud processes images in memory during generation. According to Google's Vertex AI data governance policies, customer data submitted via API is not retained after processing is complete, unless you have opted into data logging. We do not opt into data logging.

Does Google train on your images?

No. Google's Vertex AI terms state that customer data submitted via API is not used to train or improve Google's models.

Output images

Try-on result images are stored on Cloudinary's secure CDN and are only accessible to you via your authenticated session in the app. Results are deleted when you remove them or delete your account.

Your choice

Virtual Try-On is an optional feature. If you prefer not to have your photos processed by Google Vertex AI, simply do not use the Try-On feature. All other Sukat features remain fully available.

Sukat uses trusted third-party services to operate. Each has its own privacy policy:

We share only the minimum data necessary for each service to function.

Your data is stored on servers located outside the Philippines. By using Sukat, you consent to this transfer and processing in accordance with this policy and the Data Privacy Act of 2012:

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, server-side encryption, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide the Service. Here are our specific retention commitments:

While your account is active

After account deletion

Exceptions

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the right to:

Data Controller

Sukat App is the personal information controller responsible for your data. For all data privacy inquiries, contact us at support@sukat.app. We will respond within 15 business days.

Sukat is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@sukat.app.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and notify you via the app or email for material changes.

Your continued use of Sukat after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Data Controller: Sukat App

Email: support@sukat.app

Subject line: Privacy Inquiry — [Your Name]

We are committed to resolving any concerns promptly and in good faith. If you are unsatisfied with our response, you may escalate your concern to the National Privacy Commission (NPC) at complaints@privacy.gov.ph or through their website at privacy.gov.ph.