REFIT is a fashion feed where every photo is an outfit whose pieces can be identified and bought. It is operated by Rafik Rechache, an individual based in Montréal, Québec, Canada. Questions about anything on this page go to [email protected].
This page says exactly what the app stores, who else sees it, and what you can do about it. It describes what REFIT actually does today, not what it might do later.
| Data | Why |
|---|---|
| Email address | It is your account. Used to sign you in and to send security codes. |
| Handle, display name, bio, location text, profile photo | Your public profile. |
| First name, last name, gender, date of birth (when you provide them) | Gender feeds how the feed is ordered for you. These fields are never readable by other users' apps: they are blocked at the database level and only ever compared server-side. |
| Outfit photos, and a silhouette mask computed from them | The posts themselves. The mask is computed on your own device, never on a server. |
| Pieces you tag: brand, description, category, colour, store link | What makes a photo shoppable. |
| Saved pieces (your wishlist), likes, comments, follows, blocks, reports | The features they belong to. |
| Buy clicks: which piece, which merchant, when | Affiliate commission attribution. Recorded server-side so it cannot be forged. |
| IP address, at sign-in only | Rate-limiting sign-in attempts. Not stored with your profile and not used to profile you. |
REFIT uses a small number of services to work. Each receives only what its job requires.
| Service | What it receives |
|---|---|
| Supabase (hosting, database, file storage, sign-in) | Everything above. Servers are in the United States, so your data is stored outside Canada and the European Union. |
| Resend (email delivery) | Your email address and the security code sent to it. |
| OpenAI (content moderation) | The text you write and the photo you post, at the moment you post it, to check it against rules on sexual content, violence, harassment and self-harm. Photos are sent for this check and are not used to train their models. |
| A product search provider (Serper, over Google Shopping) | The brand and description you type while tagging a piece, never your photo. |
| Skimlinks (affiliate links) | The fact that a buy link was opened, so a commission can be attributed. |
Nothing is sold. Nothing is shared with advertisers.
Your posts, handle, display name, bio, location text and profile photo are public inside the app. Two things are yours to control:
Text is checked against a list of terms inside the database, at the moment it is written, so refused wording is never published to anyone. Photos and contextual abuse are checked by OpenAI's moderation service, and a post stays invisible to everyone but you until that check has answered. Content reported by three different accounts is hidden immediately, pending review. Refused content is deleted, not stored.
Delete your account from Settings, at any time. It removes your profile, posts, photos, comments, likes and saves. It is immediate and it cannot be undone.
Ask for a copy of your data, or a correction, by emailing [email protected]. There is no self-serve export yet; requests are handled by hand, within 30 days.
If you are in the European Union or the United Kingdom, you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local data protection authority. If you are in Québec, you may also contact the Commission d'accès à l'information.
REFIT is not for children under 14, and accounts are not knowingly created for them. Fourteen is the age at which a minor can consent to the handling of their own personal information in Québec, where REFIT is operated, and the age is applied everywhere rather than by country. If you believe a child has an account, write to [email protected] and it will be removed.
Access rules live in the database itself rather than in the app, because the app only ever holds a public key: someone querying the API directly is bound by the same rules as the app. Passwords are hashed by the sign-in provider and never visible to us. Fit photos sit in a private bucket, reachable only through links that expire.
If this page changes in a way that matters, the date at the top changes and the app says so. Continuing to use REFIT after that means the new version applies.