Privacy Policy

Effective Date: June 23, 2026  ·  Last Updated: September 28, 2026

1. Who We Are

JetKit ("JetKit," "we," "us," or "our") is an AI-powered travel wardrobe and packing intelligence application available on iOS, Android, and the web at jetkit.ai. JetKit is operated as a sole proprietorship.

If you have any questions about this Privacy Policy, contact us at info@jetkit.ai.

2. Information We Collect

We collect the following categories of information when you use JetKit:

Account Information

• Name and email address (collected when you sign up via email/password, Google Sign-In, or Apple Sign-In)
• Authentication tokens provided by Google or Apple

Wardrobe & Clothing Data

• Photos of clothing items you upload to your digital closet
• Clothing metadata you provide or that is inferred by AI (category, color, tags, style attributes)
• Outfit combinations and signature looks you create or save

Trip & Packing Data

• Trip details you enter (destination, dates, activities, transport type)
• Packing lists, item selections, and swap history generated by or confirmed by you
• AI-generated packing plans and reasoning stored to your account
• Destination search terms you type when creating or editing a trip are sent to JetKit's backend server, hosted on Railway, which looks them up against GeoNames place data. Railway's request logs may record these search terms for Railway's normal log retention period.

Location Data

• Your device's current location, only if you allow location access, used only to show the current weather where you are. The coordinates are sent to our weather provider, OpenWeather, to fetch that weather. We do not store them.

Usage Data

• App feature usage (e.g., which tabs you visit, how many items you upload) used for freemium enforcement and internal analytics
• Device type and operating system (Android or iOS)

AI-Generated Insights

• Style compatibility scores, wardrobe gap analysis, redundancy detection, and outfit recommendations generated by our AI and stored to your Firestore account document

3. How We Use Your Information

• To provide the core JetKit features: digital closet, outfit generation, trip packing plans, and wardrobe intelligence
• To authenticate your identity and maintain your account
• To fetch weather data for your trip destination and improve packing recommendations
• To enforce usage limits on our free tier and manage paid subscriptions via RevenueCat
• To analyze aggregated, anonymized usage patterns to improve the product
• To send you transactional emails (account creation, subscription confirmations) via our email infrastructure
• To respond to support requests or privacy inquiries you send to us

We do not use your photos or personal data to train AI models. Your clothing photos are processed by our recognition pipeline to extract attributes (category, color, style tags) and then stored securely in your account.

4. Third-Party Services We Use

JetKit shares data with the following third-party services solely to operate the app and the jetkit.ai website:

Firebase / Google (Firebase Authentication, Firestore, Firebase Storage)

Your account data, clothing metadata, packing data, and AI insights are stored in Google Firebase. Photos are stored in Firebase Storage. Authentication is handled via Firebase Authentication. Google's privacy policy applies: policies.google.com/privacy.

OpenAI

We send clothing photos and wardrobe metadata to OpenAI's API to identify garment attributes (category, color, style) and to generate packing plans, outfit recommendations, and style insights. OpenAI's privacy policy applies: openai.com/privacy.

OpenWeather

We use OpenWeather for weather data: the current weather at your location and at your trip destinations, and the weather for your trip's dates. To fetch it, the app or our server sends OpenWeather the place name or coordinates and, for trip weather, the trip dates. If you allow location access, the app sends your device's current coordinates to show the weather where you are. No account information is sent to OpenWeather. OpenWeather's privacy policy applies: openweather.co.uk/privacy-policy.

Railway (Backend Hosting)

Our backend API servers are hosted on Railway. Request data passes through Railway's infrastructure. Railway's privacy policy applies: railway.app/legal/privacy.

Vercel (Web App Hosting)

Our web application at jetkit.ai is hosted on Vercel. Standard web request logs may be retained by Vercel. Vercel's privacy policy applies: vercel.com/legal/privacy-policy.

Vercel Web Analytics (Website Analytics)

Our website at jetkit.ai uses Vercel Web Analytics to count page views and see how visitors reach the site. It records the page visited, the referring page, and your browser, operating system, device type, and country. It does not use cookies: Vercel identifies a visit by a hash of the incoming request, discards that hash after 24 hours, and does not tie the data to any individual or IP address. It runs on the website only, not in the JetKit app, and no account information is sent to it. Vercel's privacy policy applies: vercel.com/legal/privacy-policy.

Google Analytics (Website Analytics)

Our website at jetkit.ai uses Google Analytics to understand how visitors use the site, such as which pages are viewed and how visitors find it. Google Analytics sets cookies in your browser and receives the pages you visit, the referring page, your browser and device type, and your IP address, from which Google derives an approximate location. It runs on the website only, not in the JetKit app, and no account information is sent to it. Google's privacy policy applies: policies.google.com/privacy. Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites, and you can opt out of Google Analytics with Google's browser add-on at tools.google.com/dlpage/gaoptout.

Modal (Background Removal Processing)

Clothing photo background removal is processed via Modal, a third-party cloud compute service. Modal's privacy policy applies: modal.com/legal/privacy-policy.

Resend (Transactional Email)

We use Resend to send transactional emails. Your email address is shared with Resend for this purpose only. Resend's privacy policy applies: resend.com/legal/privacy-policy.

RevenueCat

We use RevenueCat to manage in-app purchases and subscriptions. Your purchase history and subscription status are processed through RevenueCat to verify entitlements. RevenueCat's privacy policy applies: www.revenuecat.com/privacy.

DiceBear (Avatar Images)

When you save a Weekly Reflection in the app and its mood has shifted from your previous one, the app downloads a new avatar image from DiceBear's API (api.dicebear.com). The request carries only a mood (happy, neutral, or sad) and a background color. Like any web request, it also reaches DiceBear with your device's IP address. No account information, reflection text, or photos are sent to DiceBear. DiceBear's privacy policy applies: www.dicebear.com/legal/privacy-policy.

We do not sell, rent, or share your personal information with advertisers or any third party for marketing purposes.

5. Photos and Image Processing

When you upload clothing photos, they are processed through our AI recognition pipeline to identify garment type, color, and style attributes. As part of this process, your photo is sent to OpenAI's API to perform the recognition. Processed photos are stored in Firebase Storage and linked to your account. Background removal is processed via Modal, a third-party cloud compute provider.

For outfit recommendations, OpenAI may also analyze style attributes such as silhouette, pattern, texture, and aesthetic characteristics from your uploaded photos.

Your photos are never shared with third parties for advertising purposes, and we do not use your photos to train any AI or machine learning model.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data, wardrobe photos, and trip data from our active systems within 30 days. Some data may persist in encrypted backups for up to 90 days before being permanently deleted.

7. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your data in a structured format
• Opt-out: Opt out of non-essential data processing
• Object: Object to our processing of your data in certain circumstances
• Restrict: Request that we restrict processing of your data
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Lodge a Complaint: If you are in the EU/EEA or UK, lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, email us at info@jetkit.ai with the subject line "Privacy Request." We will respond within 30 days.

8. US State Privacy Rights (California and Other States)

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, or another US state with a comprehensive privacy law, you may have rights under that law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). These rights include the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing.

We do not sell personal information, and we have not sold or shared (for cross-context behavioral advertising) any personal information in the preceding 12 months. Where technically feasible, we honor Global Privacy Control (GPC) signals as an opt-out request.

We will not discriminate against you for exercising any of these rights. To submit a request, contact us at info@jetkit.ai.

9. Children's Privacy

JetKit is not directed to children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us at info@jetkit.ai and we will delete it promptly. For users in the European Economic Area and United Kingdom, the applicable age threshold under GDPR may be as high as 16 depending on your country of residence; if you believe a user under that age has provided us with personal information, contact us at info@jetkit.ai and we will delete it promptly.

10. Data Security

We implement industry-standard security measures to protect your data, including:

• Firebase Authentication for secure sign-in
• Firestore security rules restricting data access to authenticated account owners
• Firebase Auth middleware on all backend API endpoints
• Per-user rate limiting on AI endpoints
• HTTPS encryption for all data in transit

No method of transmission over the internet is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

11. International Data Transfers

JetKit is operated from the United States. Your data is stored and processed in the United States via Google Firebase, OpenAI, and our Railway-hosted backend servers. Where we transfer personal data from the EEA, UK, or Switzerland to the United States, we rely on recognized transfer mechanisms, including the EU-US Data Privacy Framework (DPF) for vendors certified under that framework (e.g., Google/Firebase and OpenAI, subject to their current certification status) and Standard Contractual Clauses (SCCs) where DPF certification does not apply. You can verify current DPF certifications at dataprivacyframework.gov.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will notify you via email or an in-app notification. Continued use of JetKit after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us