1. Who We Are
Coutiv Inc. ("Coutiv," "we," "us," or "our") is a corporation incorporated in Ontario, Canada. We operate a fashion discovery, personalization, and social shopping application (the "App") and associated website at coutiv.com (together, the "Service").
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have. It applies to all users of the Service regardless of location, with specific provisions for California residents under the CCPA and for all users under PIPEDA (Canada's federal private-sector privacy law).
Questions or requests: hq@coutiv.com
2. Information We Collect
2.1 Information You Provide Directly
- Account credentials: email address and password (passwords are stored as a secure hash — never in plaintext), or the name and email address your Apple or Google account shares with us when you sign in with them
- Profile information: display name, handle, and optional profile photo and bio
- Style preferences: your answers to the style quiz (such as preferred colours, fits, brands, budget and how covered you like to dress) and any refinements you make later
- Photos you upload: photos you add to Inspo boards, send in group chats, or submit to search for similar products
- User-generated content: product comments you post, messages you send within groups, group names you create, and items you add to groups
- Musa conversations: if you're signed in, your conversations with the Musa stylist (your questions, Musa's replies and the products it showed you) are saved to your account so they're still there after you reinstall the app or sign in on another device. We keep your 30 most recent conversations; you can delete any of them in the app at any time
- Communications: any messages you send us directly, such as support requests
2.2 Information We Collect Automatically
When you use the Service, we automatically collect the following:
Browsing and discovery behavior:
- Products viewed, products saved or unsaved, and product detail pages opened
- Search queries entered and search results clicked
- Product categories browsed and categories you interact with
- Outbound "Buy" link clicks — including the product ID, brand, and affiliate source parameter — when you are redirected to a third-party retailer website
Social and group activity:
- Groups created, group invitations sent, and groups joined
- Items added to or removed from a group
- Votes cast on items within a group (like or dislike)
- Comments posted on products
- Messages sent within group chats
Device and session data:
- Device type, operating system, and app version
- IP address and approximate geographic region derived from it
- Device location, only if you allow location access: used once to show today's weather for outfit suggestions in Musa, never stored on our servers. If you don't allow it, we estimate your city from your IP address instead
- Session identifiers, timestamps, session duration, and navigation paths
- Crash reports and error logs
We use this behavioral data to operate the Service, improve recommendations, and build a personal taste profile (our "taste graph") over time.
2.3 Product and Brand Content
The Coutiv catalog contains product information aggregated from publicly available brand and retailer websites. We do not collect personal information through this process.
2.4 Information We Do Not Collect
- Payment or financial information — all purchases are completed on third-party brand websites
- Sensitive personal information such as race, ethnicity, health data, biometric data, or government ID numbers. We do not analyse faces or extract biometric data from photos you upload
- Precise GPS location data
- Personal information from anyone under the age of 13
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your account and verify your identity
- Operate core features: product discovery, saving, category browsing, group creation and management, group chat, product comments, voting, and outbound affiliate linking
- Build and continuously refine your personal taste profile to improve product recommendations and power AI-driven personalization features
- Analyze aggregate and anonymized usage patterns to improve the Service and develop new features
- Send transactional communications: account confirmation, password reset, group invitations, and security notifications
- Monitor for spam, abuse, and violations of these policies
- Comply with applicable law and enforce our Terms of Service
We do not sell your personal information. We do not use your personal information to serve you third-party targeted advertising.
4. How We Share Your Information
4.1 With Other Users (Limited)
- Your display name and profile photo are visible to other users in groups you join
- Items you add to a group, votes you cast, and comments you post on products are visible to other members of that group
- Group messages are visible to all members of that group
4.2 Service Providers
We work with third-party providers who help us operate the Service. Current providers include:
- Supabase Inc. — database hosting, authentication, and row-level data security
- AI service providers — when you use an AI-powered feature (for example asking the Musa stylist a question, or searching with a photo), the text or image you submit, together with the style preferences from your quiz that are needed to answer you, is sent to a third-party AI model provider to generate the response. We send only what the feature needs, we do not send your name, email or account identifiers, and our providers are contractually barred from using your data to train their models. This happens only when you use the feature. We keep a copy of the questions you ask the Musa stylist for up to 90 days to help improve its results, then delete it. If you're signed in, your Musa conversation history is also saved to your account (see section 2.1); if you're not, it stays on your device only.
- Email delivery providers — transactional and account-related emails
- Error monitoring providers — crash reports and error logs, which may include your device type, app version and an account identifier
- Search and recommendation infrastructure — product views, saves and search terms are processed by our cloud search provider to rank results and recommendations, keyed to a pseudonymous ID rather than your account
- Push notification delivery — your device's push token and the notification content are passed to the platform push services to deliver notifications
- Weather and location services — to show local weather, your approximate coordinates (or, if location is off, your IP address) are sent to a weather service and an IP-geolocation service; they receive no account information
4.3 Affiliate Partners
When you tap the "Buy" button in the App, you are redirected to a third-party brand or retailer website. We pass an affiliate tracking parameter to that site to attribute any resulting purchase for commission purposes. No personal information beyond a session or click identifier is shared with the retailer at redirect.
4.4 Legal Requirements
We may disclose information if required by applicable law, regulation, court order, or valid legal process.
4.5 Business Transfers
If Coutiv is acquired, merged, or undergoes a substantial asset transfer, user data may be transferred as part of that transaction. We will notify you by email or by a prominent notice in the App if this occurs.
5. Data Retention
For instructions with or without the app, see Delete your Coutiv account.
We retain your personal information for as long as your account is active or as needed to provide the Service, except where we are required to retain certain records for legal or compliance purposes.
Account deletion. When you delete your account, your profile is deactivated immediately and you have 30 days to change your mind by signing in again. After 30 days we permanently remove your display name, profile photo, bio, handle, email address, sign-in connections, follows (of people and brands) and friend requests, and we also permanently delete:
- your closet items
- your style profile, including your style quiz answers and any body measurements you entered
- your purchase records (items you marked as bought, and any fit feedback you left)
- your Style Match ratings (the products you marked Love or Pass)
- the events you added to your Musa calendar
- your Musa conversation history
At the same time we strip your IP address and device identifiers from analytics records.
Content you shared with other people — group chat messages, product comments, items and votes you added to groups — stays visible to those groups so their conversations remain intact, but is shown under the name "Deleted Collector" with no link to you. Boards you kept private are hidden from everyone. Group chat messages are in any case deleted 12 months after they are sent.
If you want content you posted removed as well, email hq@coutiv.com (subject "Privacy Request") before or after deleting your account and we will remove it within 30 days.
Accounts that never complete sign-up are removed after 7 days. Behavioral event data may be retained in aggregated or de-identified form after account deletion, as this data no longer identifies you individually.
6. Data Security
We implement the following technical and organizational measures to protect your personal information:
- Authentication via JSON Web Tokens (JWTs) with session expiry and secure refresh token management
- Row-level security (RLS) enforced at the database level — users can only access their own data
- Passwords stored as secure cryptographic hashes; never stored in plaintext
- API keys and service credentials stored in environment variables; never committed to source code
- Encrypted data transmission via HTTPS/TLS
7. Your Rights
7.1 All Users (PIPEDA — Canada)
Under Canada's PIPEDA, you have the right to access, correct, or delete your personal information, withdraw consent to non-essential data processing, and file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
7.2 California Residents (CCPA / CPRA)
If you are a California resident, you have additional rights including the right to know, delete, correct, and opt out of sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioral advertising.
To exercise any of these rights, email hq@coutiv.com with the subject line "Privacy Request." We will respond within 30 days.
8. Children's Privacy
The Service is not directed to anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact hq@coutiv.com.
9. Third-Party Websites
The Service contains links to third-party brand and retailer websites. When you click the "Buy" button or any outbound product link, you leave Coutiv's Service and enter a third-party website governed by that party's own privacy policy and terms.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a prominent in-app notice at least 7 days before the changes take effect.
11. Contact
For privacy-related questions, access requests, correction requests, or deletion requests:
Coutiv Inc.
Email: hq@coutiv.com (Subject: "Privacy Request")
Website: coutiv.com
Incorporated in Ontario, Canada