Legal

Privacy.

Last updated: 26 July 2026

Fibe is an AI styling app made for the Gulf, launching first in the UAE. This page explains what data we collect, why we collect it, and the choices you have. It is written to be readable, not lawyered. If anything is unclear, email hello@fibeapp.com.

What we collect

• Account information — name, email, city, language, date of birth.
• Photos — the few reference photos you upload, used to analyse your colours and to generate personalised outfit images of you.
• Style preferences — aesthetics, occasions, coverage preferences, sizes.
• Activity — outfits viewed, saved, generated, and items clicked through to retailers.
• Device and diagnostic data — app version, OS, error logs. No advertising identifiers.
• Website and app usage — how you move through our website and app (pages and screens viewed, clicks, taps, scrolls), captured through privacy-masked analytics. See "Analytics and session replay" below.

How we use it

• To generate personalised outfit images and recommendations.
• To detect your colour palette and styling preferences from your photos.
• To improve outfit quality and product matching over time.
• To process affiliate link click-throughs to partner retailers (we earn commission on purchases).
• To send you account-related communication. We do not sell your data.

Photos and biometric data

Your photos are treated as sensitive personal data under UAE Federal Decree-Law 45/2021. We:

• Encrypt every photo at rest (AES-256-GCM) using a key unique to your account — not even our own admin tools can open them.
• Store photos in a region with appropriate data protection. Cross-border transfers are made only with your explicit consent.
• Never share your photos with third parties beyond the AI provider strictly necessary to generate your outfit images. Your photos are not used to train general AI models.
• Delete your photos and all derived data on request — see "Your rights" below.

Cross-border data transfer

Some processing (AI vision, image generation) is performed by providers based outside the UAE. You consent to this transfer explicitly at signup — it's one of the two separate consents we ask for, never bundled. We sign data processing agreements with every external provider and apply contractual safeguards equivalent to UAE PDPL standards.

Analytics and session replay

To understand how people use our website and app — which screens are confusing, where people get stuck, what they tap — we use Microsoft Clarity, a product-analytics tool that builds aggregate heatmaps and replays of interaction sessions. Clarity captures behavioural signals only: pages and screens viewed, clicks and taps, scrolls, pointer or touch movement, device and browser type, and an approximate location derived from your IP address. It does this using first-party cookies and similar storage.

It is configured to protect your content. Clarity masks text and images before anything leaves your device — masked content is never uploaded to Microsoft. So it does not capture what you type, your reference photos, the outfit images we generate for you, or other sensitive on-screen content; in our mobile app, images are masked so your photos and generated looks are never recorded. We use Clarity to improve the product, never to identify you personally.

Microsoft processes this data as an independent data controller under the Microsoft Privacy Statement, and stores it on Microsoft Azure. We do not sell this data. You can opt out of Clarity across every site that uses it via the Digital Advertising Alliance opt-out (choose Microsoft), and Clarity honours the Global Privacy Control browser signal.

Advertising measurement

When we advertise Fibe, we need to know which ads actually bring people to the app. To measure that, our mobile app includes Meta's app measurement SDK and shares a limited set of app events with Meta Platforms: app installs and opens, when you view a product, when you complete setup, and purchases (including the amount and currency).

These events are tied to an anonymous, install-scoped identifier generated by Meta — not to your name, your email, your reference photos, or the outfit images we generate for you. We do not present the iOS "Allow tracking" prompt, which means we do not collect your device advertising identifier (IDFA) and Meta cannot link your Fibe activity to your activity in other companies' apps. Measurement relies on Apple's privacy-preserving SKAdNetwork and Meta's aggregated measurement instead.

Purchase events are sent to Meta from our payments provider's servers rather than from your device. Meta processes this data as an independent controller under the Meta Privacy Policy, outside the UAE. You can limit ad personalisation in your Meta account settings, and iOS Settings → Privacy & Security → Tracking lets you refuse app tracking device-wide.

Our website (fibeapp.com) also uses the Meta Pixel for the same purpose: it records that the page was viewed and that a download button was clicked, using a cookie set by Meta in your browser. It does not see anything you type and there is nothing to type on the page — no account, no photos, no personal content exists on the website. Meta processes pixel data as an independent controller under the same policy linked above; you can limit how Meta uses it in your Meta ad settings, or block the pixel entirely with a content blocker.

Your rights

You can at any time:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data, including your encrypted photos and every generated outfit image (we crypto-shred the encryption key, making the data permanently unreadable).
• Withdraw consent for biometric processing or cross-border transfer — though some features will become unavailable as a result.
• Object to processing and lodge a complaint with the UAE Data Office.

To exercise any of these rights, email privacy@fibeapp.com.

Retention

We keep your account data while your account is active. After you delete your account, we retain the minimum required for legal and accounting reasons (usually 30 days for backup expiry, longer where law requires).

Children

Fibe is not intended for users under 18. We do not knowingly collect data from minors.

Changes to this policy

We will email you and update the "Last updated" date if we change this policy materially.

Contact

Privacy questions: privacy@fibeapp.com
General: hello@fibeapp.com