← Back to home

Privacy Policy

Last updated: 5 October 2026

1. Introduction

FitBook AI ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our Service.

2. Data We Collect

We collect the following types of data:

  • Account information: Name, email address, and profile details provided during registration via Clerk authentication
  • Uploaded images: Photos you upload for portrait generation, including suits and backdrop images
  • Generated content: AI-generated portraits and business cards
  • Payment information: Processed securely by Stripe — we do not store your card details
  • Usage data: Credit transactions, generation history, and feature usage
  • Organisation data: Company name, logo, and member information for organisation accounts

3. How We Use Your Data

We use your data to:

  • Provide and improve the portrait generation service
  • Process payments and manage your credit balance
  • Authenticate your identity and secure your account
  • Generate business cards using your provided details
  • Communicate service updates and important notices
  • Comply with legal obligations

4. Image Processing

Photos you upload are sent to Google's Gemini AI for portrait generation. Generated images are stored in our Supabase storage. We do not use your images to train AI models. You may delete your generated images at any time through the Gallery.

5. Data Storage and Security

Your data is stored securely using:

  • Supabase: Database and file storage with row-level security
  • Clerk: Authentication and user management with industry-standard encryption
  • Stripe: PCI-compliant payment processing
  • Vercel: Application hosting with enterprise-grade infrastructure

All data is transmitted over HTTPS. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction.

6. Third-Party Services

We share data with the following third-party services solely for the purpose of providing the Service:

  • Google Gemini: AI image generation (receives uploaded photos)
  • Clerk: Authentication (receives account information)
  • Stripe: Payment processing (receives payment information)
  • Supabase: Data storage (stores all application data)

7. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Request your data in a structured, machine-readable format
  • Objection: Object to processing of your personal data
  • Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at privacy@fitbookai.com.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it. Generated images and business cards are deleted immediately upon request.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. Third-party services (Clerk, Stripe) may set their own cookies as required for their functionality.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related enquiries, contact us at privacy@fitbookai.com.