Privacy Policy

Last updated: 13 October 2026

Virtual Change Room ("we", "us") is an AI try-on service. This policy explains what we collect, why, and what we never do with it. The short version: your photos are yours, they are private by default, and we do not sell your data.

Who we are

Virtual Change Room (ABN 59 359 846 570) is a registered Australian business name, and we are the data controller for the personal information described here. Write to us at PO Box 2300, Rosebud VIC 3939, Australia, or email support@virtualchangeroom.app.

What we collect

Account details: your name, email address, and password (stored hashed, never in plain text).
Your date of birth. We ask for it when you sign up and use it to apply our age rules - who can have an account, which AI models are available, and who can publish a share link. We keep the full date rather than just your age so the rules stay correct as you get older, and we use it to send you a birthday gift of credits if that offer is running. It is not shown to anyone else.
Your gender. We ask for it when you sign up (or the first time you sign in, if you signed up before we asked), and "Prefer not to say" is always an answer. We use it to choose the styles and offers we show you. It is not shown to anyone else.
Your content: the photos you upload, the outfit images you add, the try-ons and videos the service generates for you, and anything you write on them, such as notes on a try-on or the caption of a share link or poll.
Messages you send us: support requests, contact-form messages and image reports, with anything you attach to them.
Billing records: your credit balance, purchases, and subscription status. Payments on our website are handled entirely by Stripe on their secure checkout - we never see or store your card number. Purchases made in our Android app go through Google Play: Google handles your payment details, and we receive only the details of the purchase itself, such as the product, the Google Play order number and a purchase token we use to confirm it with Google. Purchases made in our iPhone and iPad app go through the Apple App Store in the same way: Apple handles your payment details, and we receive only the product, the App Store transaction id we use to confirm the purchase with Apple, and its price.
Where you signed up from: the country you signed up from, worked out from your IP address when you create your account (or, for older accounts, when you sign in). We keep the country only, never a precise location. It helps us understand where our members are and spot sign-up abuse.
Your time zone and language: read from your browser or device and stored with your account, so dates and times show correctly for you. You can change them on your Profile page.
An app install identifier: our Android app creates a random identifier for each installation and stores it in a cookie called ez_install. When you sign up in the app we record it with your account, so that one installation cannot keep creating new accounts to claim free credits again and again. It does not identify you, it is not an advertising identifier, and it is removed from your account if you delete it.
Device tokens: if you install our mobile app and allow notifications, we store a device token so we can send you push notifications. You can turn notifications off at any time in your device settings.
Service records: sign-in sessions, an audit trail of actions on your account, and technical and error logs needed to run and secure the service. These include your IP address and browser or device description.
Image fingerprints: a short numeric fingerprint of each picture stored on the service, used to stop a picture that was reported and taken down from being uploaded again. See "Reporting and image fingerprints" below.

Your photos and try-ons are private

Everything you upload or generate is private to your account. There are no public galleries and no public links to your images unless you create one yourself. Files are stored outside the public web space and served only to your authenticated account. Our support staff can access files solely to operate the service and help you with a problem; access is logged.

To generate a try-on, your images are sent to the AI infrastructure that powers the service and processed there. They are used to produce your result, not to build a public gallery, and we do not sell or license your images to anyone.

We do not look at, classify or recognise faces in your photos. The one automatic check we make is a fingerprint: when a picture is stored, we compute a short numeric fingerprint of it, and when you upload one we compare its fingerprint with the fingerprints of pictures that were reported and taken down, so a taken-down picture cannot simply be uploaded again. A fingerprint only tells us whether two pictures look the same; it is not facial recognition and it cannot identify a person. The AI providers we use also apply their own safety filters and may refuse to generate from an image; when that happens we are told the request was refused, and we pass that on to you. Beyond that, content is reviewed by a person only when somebody reports it.

Cookies and analytics

We use cookies that are strictly necessary to run the service - keeping you signed in, remembering your consent choice, and keeping the site secure. These do not need your consent and cannot be turned off without breaking the service. The cookie that remembers your consent choice is called ez-consent, lasts 12 months, and is shared across virtualchangeroom.app and its subdomains so you are not asked the same question twice. Inside our Android app there is one more, ez_install, the install identifier described above, which limits repeat free-credit sign-ups.

If you installed our iPhone app by tapping an Apple Search Ads advertisement, Apple tells the app which ad campaign, ad group and keyword it was, and the app passes those to us in a cookie called ez_app_attr. We record them with your account so we can tell which ads bring people who stay. They are Apple's campaign numbers, the same for everyone who tapped that ad: they do not identify you or your device, no advertising identifier is used, and the app does not ask to track you.

We also measure how the service is used, with Google Analytics, and that measurement starts when you arrive rather than waiting for you to opt in. We use it to see which features people actually use, where they get stuck, and what to improve - not to build advertising profiles about you, and not to follow you around other websites. We do not sell this information, and we do not use it to serve you ads.

Advertising and ad-personalisation signals are switched off by default and stay off unless you turn marketing cookies on. We use Google Consent Mode, so your choice is passed to Google rather than merely applied on our side. If you are visiting from a region where consent is required before any measurement, nothing is measured until you answer the banner.

You can turn analytics off at any time from the cookie settings on the site, and signed-in users can also manage it under Account then Privacy. Switching it off takes effect immediately and stops measurement for the rest of your visit and every visit after it. You can also block or delete these cookies in your browser, or install Google's own opt-out add-on, without losing access to any part of the service.

When you create an account or complete a purchase, we may send Google a record of that event together with an identifier for your browser and a randomly generated account identifier, so that we can tell which marketing efforts work. It does not include your name, email address or any of your images, and it is marked as not for ad personalisation.

Reporting and image fingerprints

Anyone can report an image without an account. If you send a report we collect the email address you give us and whatever you tell us about the image, and we use them only to investigate the report and reply to you.

Every picture stored on the service has a fingerprint: a short number (64 bits) worked out from the rough pattern of light and dark in the picture, which lets us recognise the same picture again even after it has been resized or re-saved. A fingerprint is not an image, the image cannot be reconstructed from it, and it says nothing about who is in the picture. When a picture is deleted, its fingerprint is deleted shortly afterwards too.

If we uphold a report, the fingerprint of the picture that was taken down is kept on a block list, and an upload whose fingerprint matches it is refused. Those fingerprints are kept for as long as the block needs to hold, which means they can outlive the account the image came from and the deletion of the image itself. That is deliberate: a fingerprint that disappeared with the image would let a taken-down picture be re-uploaded the next day.

We do not sell your personal information. We share it only with the service providers we need to run Virtual Change Room, and only so they can perform that service for us:

AI image generation - your uploaded photos and the generated results are processed by our AI infrastructure provider, located in the United States. The copies it holds are governed by its own retention policy rather than by ours: under its published policy, the inputs, outputs and logs of each generation made through its API are removed automatically, by default after about an hour.
Payments - Stripe for purchases on our website, Google Play for purchases in our Android app, and the Apple App Store for purchases in our iPhone and iPad app.
Email, SMS and push notifications - our messaging providers, and Google (Firebase) for push.
Hosting and file storage - our application runs on servers in Australia, and your images are stored in an access-controlled object store in the Oceania region.
Analytics - Google, as described above.

Because several of these providers operate overseas, your information - including the images you upload - may be stored or processed outside Australia. We take reasonable steps to ensure it is handled consistently with this policy and with Australian privacy law wherever it is processed, and we only use providers who commit to protecting it.

How long we keep it

We keep your account details and your content for as long as your account is open. We do not delete your try-ons on a timer; they stay until you delete them or close your account.

When you delete a try-on, a video or a photo, it is gone from your account straight away and cannot be restored. The stored copies on our servers take a little longer to disappear: we erase them within 30 days. Copies held by our AI provider follow that provider's own retention policy, described above.

After the images are gone we keep a technical record of the generation itself for up to 12 months. It contains no photographs - only details like when it ran, whether it succeeded or failed, why it failed, how long it took and what it cost. We keep it to investigate faults, to answer billing questions, to detect fraud and abuse, and to make the service more reliable.

Our operational records have their own limits:

Sign-in sessions - 90 days, then deleted. These hold the IP address and device description of each sign-in.
Error logs - 90 days, then deleted.
The security and audit trail - 2 years. This is the record of what was done on an account and by whom, so it needs to outlast the disputes it may have to settle.
Messages you send us through a form on the site - 12 months, then deleted.

Some things are kept for longer where the law requires it, or where we are asked to preserve them:

Billing and transaction records - Australian tax law generally requires financial records to be kept for five years.
Content reported or flagged for breaching our terms, kept as the record of that decision.
Records of your unsubscribe and opt-out choices, kept indefinitely, because the only way to keep honouring "do not contact me" is to remember it.
Anything covered by a legal request. If we receive a lawful request from a law-enforcement agency, a regulator or a court, or if we need to establish or defend a legal claim, we may be required to preserve the relevant data - including images you have deleted - and we will keep it until we are no longer required to. In that situation a deletion or account-closure request may be paused or partly refused, and the law may prevent us from telling you.

Deleting your content and your account

You can delete any try-on, video or photo at any time from your feed. Deletion is permanent - it cannot be undone - and the stored images are erased within 30 days as described above.

You can request deletion of your whole account from Account then Privacy, on the Your data tab, or by emailing us from the address registered to your account. How to delete your account explains every step, and you do not need the app to follow it. There is a 30-day cooling-off period before we act on it, so a request made in a bad moment can be withdrawn. After that the erasure runs automatically, overnight, without anyone having to approve it: your name and email are replaced with anonymous values, your date of birth and gender are removed, your password, sign-in methods and sessions are deleted, and your photos, try-ons, videos, the technical records of your generations and their stored files are erased. Once done it cannot be reversed. The only thing that can hold it up is a legal requirement to preserve the account, described above.

Deleting your account does not cancel a subscription bought through Google Play or the Apple App Store; cancel it in that store first.

A few things deliberately survive that erasure, because removing them would cause harm rather than prevent it:

Your unsubscribe and opt-out records, so we do not start contacting you again.
Our security and audit trail, including the IP addresses and device descriptions in it, kept as the record of what happened on the account.
Content held under a legal request or preserved as the record of a safety decision.
Image fingerprints of anything taken down after a report.

You can also request a copy of your data from the same page. We build it automatically and email you a link; the download expires after 7 days.

Legal requests

We may receive requests from law-enforcement agencies, regulators or courts to disclose or preserve account data. We check that each request is lawful and properly served, and we give only what it actually covers. Where we are permitted to tell you about a request, we will; sometimes the law prevents us.

Children

Virtual Change Room is not for children. You must be at least 16 to have an account, and we ask for your date of birth at sign-up to apply that rule. Somebody below that age who tries to sign up is turned away before an account is created. Somebody who signs in with Google or Apple and gives a date of birth below that age cannot use the account: it cannot get past that step, and the date they entered is not kept. If we learn that an account belongs to someone below the minimum age, we may suspend it, and we will delete it on request from them or their parent or guardian. If you believe a child has an account, or that an image of a child is on the service, tell us at support@virtualchangeroom.app or report the image.

Emails

We send transactional email (account confirmation, receipts, security notices, and the outcome of a report you have made). Marketing email only ever goes to people who opted in, and every marketing email has a working unsubscribe. Unsubscribing stops marketing and automated messages; it does not stop the transactional ones, because those are how we tell you about your own account.

Keeping it secure

We protect your information with measures appropriate to how sensitive it is, including encrypted connections, hashed passwords, private-by-default file storage and logged staff access. No service can promise perfect security, but if a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

Your rights

You can request a copy of your data, correct it, or ask for it to be erased, from Account then Privacy or by contacting support@virtualchangeroom.app. Your date of birth is the one detail you cannot change yourself, because our age rules depend on it; contact us if it is wrong. If you are unhappy with how we have handled a privacy matter, you can complain to us first and then, if you are still not satisfied, to the Office of the Australian Information Commissioner.

Changes

We may update this policy. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.

Contact

Privacy questions: support@virtualchangeroom.app.