Privacy Policy
Dripcheck, by Altronite · Last updated 23 October 2026
1. What this policy covers
This policy explains what personal data Dripcheck collects, why, how we store and protect it, and the rights you have over it. Dripcheck is an AI styling app: you add a photo of yourself and see clothes rendered on you. Because your photos are sensitive, we treat privacy as a core feature, not an afterthought. Dripcheck is provided by Altronite (India).
2. What we collect
We collect only what the app needs to work:
| Data | Why we collect it |
|---|---|
| Your photo(s) — the "digital you" photo and any garment photos you add | To generate try-on renders and build your wardrobe. This is the core function. |
| AI renders and looks you create | To show, save, and let you organise your looks. |
| Your name / display name | To personalise your experience during onboarding. |
| Email address (and, if you use phone sign-in, your phone number) | To create and secure your account, via our authentication provider. |
| Purchase records — which credit pack or subscription you bought | To grant you the credits you paid for and manage your account. |
| App usage events | To understand how the app is used and improve it (Google Analytics for Firebase in the Android app; Google Analytics 4, Cloudflare Web Analytics and our own visit-step record on the website). See section 7. |
| Device identifiers — an app ID for your device that the app sends with each request, the Firebase app-instance and installation IDs, and a push-notification token if you allow notifications | To allow a limited number of free accounts per device and prevent abuse, to send notifications you turned on, and to count usage. |
| Crash and error reports — what went wrong, the app screen or server path, device model, OS and app version. Reports never include your photos, what you typed, or your email address | To find and fix bugs. |
| Messages you send us from Help & support | To answer you and fix what you report. |
We do NOT collect your location. Every photo you upload has its EXIF and GPS metadata stripped automatically before it is stored — location that phones embed in photos never reaches our servers. We do not request any location permission.
We do not knowingly collect data from anyone under 18. Dripcheck is for adults: you must be 18 or older to create an account. If we learn that an account belongs to someone under 18, we will delete it.
3. How your photos are handled (the important part)
- Your photos and renders are private. They are served only to your own account through short-lived signed links, after we verify the file belongs to you. They are private by default and no other user can open them, unless you choose to share a look. When you share a look as a link, anyone with that link can see the look or looks you picked for it and vote on them. They never see your name, email address or your other photos. Deleting the look, or your account, takes the link down.
- We never use your photos, garments, or looks to train any AI model — ours or anyone else's.
- Renders are produced using a third-party AI model provider (Google's Gemini API) acting as our processor. Your images are sent to it only to generate your render, under terms that do not permit using your data to train their models (our paid, no-training tier).
- Photos are stored in private cloud storage (Cloudflare R2) with access restricted to our backend; uploads pass through our server (validated and metadata-stripped), never written directly to public storage.
4. Why we use your data (purposes)
- To provide the core service (rendering, wardrobe, looks, sharing you initiate).
- To operate your account, credits, and purchases.
- To keep the service secure and prevent abuse (e.g. rate limits, anti-multi-account signals).
- To improve the app through aggregate, non-identifying usage analytics (section 7).
We do not sell your data. We do not use your data for third-party advertising, and the app contains no ads.
5. Sharing your data
We share personal data only with service providers who process it on our behalf to run the app, under contract:
- Authentication (Google Firebase) — to sign you in.
- AI rendering (Google Gemini API) — to generate your renders (no-training terms).
- Cloud hosting & storage (Google Cloud — Mumbai region; Cloudflare R2/edge) — to run the backend and store your data.
- Payments — Google Play Billing (for in-app purchases on Android) and/or Razorpay (for web purchases). Your card/UPI details are handled by these processors; we do not see or store them.
- Analytics (Google Analytics for Firebase and Google Analytics 4): usage events, never advertising profiles. See section 7.
- Website statistics (Cloudflare Web Analytics): aggregate, cookieless page-view counts. See section 7.
- Crash reporting (Sentry): error reports, scrubbed of photos, request bodies and email addresses.
- Push notifications (Firebase Cloud Messaging): only if you turn notifications on.
- Support alerts (Slack): the text of a message you send us from Help & support, so we can reply.
A look becomes visible to others only when you choose to share it (e.g. a share link or via WhatsApp). That is entirely user-initiated.
6. Where your data is stored
Data is stored and processed primarily on infrastructure in India (Mumbai region) and on Cloudflare's global edge network for delivery. Some processors (e.g. the AI model provider) may process data outside India to deliver the service. Crash reports are processed by Sentry in the United States.
7. Analytics and cookies
We use Google Analytics to understand aggregate usage — which features are used, where people drop off — so we can improve the app. It records events such as signing up, making a look or opening the plans screen, linked to an app-instance ID, not to your name or email. We do not use analytics to build advertising profiles.
On the website (Google Analytics 4), a banner asks on your first visit whether you accept analytics cookies. Until you accept, analytics cookies stay off (Google consent mode), and Google may still receive basic signals without cookies, such as that a page was viewed. If you decline, the website sends nothing to Google Analytics and records none of the visit steps below. Advertising storage is always off. You can change your choice at any time from Analytics choice in the footer, or from You > Analytics choice in the web app.
In the Android app (Google Analytics for Firebase), analytics records the same kind of events. The app does not collect the advertising ID and sends no ad-personalisation signals.
The website also uses Cloudflare Web Analytics, which counts page views and page load speed in aggregate. It sets no cookies and does not follow you across sites.
On the website we also record simple steps of a visit: which page you opened, how you arrived (for example the campaign tag on a link or the referring site), how long the page was visible, your country and state, and your device type. This record does not include your IP address or browser details. It uses a random ID kept in your browser, not a cookie, so we can tell whether a visit led to a new account. When you create an account, the website sends how you first arrived (the campaign tag, referring site and landing page) and that random ID with the sign-up, whichever choice you made on the banner.
8. How long we keep your data
We keep your data for as long as your account is active. You can delete individual garments and looks at any time. When you delete your account (in the app under You > Delete account, or by email, see dripcheck.altronite.com/delete-account), we delete your profile, photos, looks, wardrobe, collections, shared polls and push registrations the moment you confirm, and the image files and your sign-in record straight after. A web subscription paid through Razorpay is cancelled for you. We keep payment, credit and subscription records, and messages you sent to support, attached to an anonymous placeholder with no name, email address or sign-in, for as long as tax and accounting law requires. Server logs are kept for up to 30 days. Deleting your account does not cancel a Google Play subscription: cancel it in the Play Store first.
9. Your rights
Under India's Digital Personal Data Protection Act, 2023 (DPDP) and applicable law, you can:
- Access the personal data we hold about you.
- Correct inaccurate data (e.g. update your name/photo in the app).
- Delete your data — delete individual items in-app; for full account deletion, use the in-app option or contact us at the email below and we will action it.
- Withdraw consent for optional processing.
- Grievance redressal — contact our grievance officer below; we will respond within the timelines required by DPDP.
Grievance Officer, Altronite (India): support@altronite.com. Write "Grievance" in the subject line.
10. Consent
By creating an account and adding your photo, you consent to the processing described here. You can withdraw consent by deleting your content or your account; some processing (e.g. keeping purchase records for tax/accounting) may continue where the law requires.
11. Security
We protect your data with encryption in transit (HTTPS/TLS everywhere), private per-account access to media via signed links, server-side upload validation, and access controls on our infrastructure. No system is perfectly secure, but we treat body photos as sensitive personal data and design around that.
12. Payments
In-app purchases on Android are processed by Google Play Billing; web purchases (if you use the web app) by Razorpay. These providers have their own privacy terms. We store only the record of what you purchased, not your payment instrument.
13. Changes to this policy
We may update this policy; we will post the new version here and update the effective date. Material changes will be communicated in-app.
14. Contact & governing law
Questions or requests: privacy@altronite.com.
This policy is governed by the laws of India, with jurisdiction in the courts of Bengaluru.