REFIT is a fashion feed where every photo is an outfit whose pieces can be identified and bought. It is operated by Rafik Rechache, an individual based in Montréal, Québec, Canada. Questions about anything on this page go to [email protected].
This page says exactly what the app stores, who else sees it, and what you can do about it. It describes what REFIT actually does today, not what it might do later.
| Data | Why |
|---|---|
| Email address | It is your account. Used to sign you in and to send security codes. |
| Handle, display name, bio, location text, profile photo | Your public profile. |
| First name, last name, gender, date of birth (when you provide them) | Gender feeds how the feed is ordered for you. These fields are never readable by other users' apps: they are blocked at the database level and only ever compared server-side. |
| Outfit photos, and a silhouette mask computed from them | The posts themselves. The mask is computed on your own device, never on a server. |
| Pieces you tag: brand, description, category, colour, store link | What makes a photo shoppable. |
| Saved pieces (your wishlist), likes, comments, follows, blocks, reports | The features they belong to. |
| What you look at in the feed: how long a fit stays on your screen, whether you open its pieces or its detail, whether you tap a piece | Ordering your feed. Fits that hold people's attention rise, fits you have already seen move down, and the brands you spend time on count toward your taste, the same way a like does. Kept as one line per fit you looked at (total time, capped at a minute, and whether you opened or tapped), never as a timeline of your session, and never with your location or device. Your own fits are not counted, and a private account's fits only count for the people allowed to see them. |
| Buy clicks: which piece, which merchant, when | Knowing which pieces people actually go and buy. Recorded server-side so it cannot be forged. No affiliate network is involved today, see below. |
| IP address, at sign-in only | Rate-limiting sign-in attempts. Not stored with your profile and not used to profile you. |
REFIT uses a small number of services to work. Each receives only what its job requires.
| Service | What it receives |
|---|---|
| Supabase (hosting, database, file storage, sign-in) | Everything above. Servers are in the United States, so your data is stored outside Canada and the European Union. |
| Resend (email delivery) | Your email address and the security code sent to it. |
| OpenAI (content moderation) | The text you write and the photo you post, at the moment you post it, to check it against rules on sexual content, violence, harassment and self-harm. Photos are sent for this check and are not used to train their models. |
| Product search providers (Serper, SearchAPI, SerpAPI, over Google Shopping) | The brand and words you type while tagging a piece, and your country, so results come from stores that ship to you. Never your photo. |
| Google Lens (through SerpAPI, visual search) | A crop of the garment you tag: the part of your photo under the bubble, sized to that piece, plus the brand and words you typed and your country. The crop is placed in a private, access-controlled folder for the seconds the search takes, handed to the engine, and deleted right after; REFIT keeps nothing of it. It is a piece of clothing, not your face, but it is a part of your photo, and it leaves your phone only when you tag a piece. |
Nothing is sold. Nothing is shared with advertisers.
No affiliate network, today. A buy link opens the merchant's own page directly. Nothing is added to it, no intermediary sees the click, and REFIT earns nothing from it. That is expected to change, and this page will name the network and say what it receives before it does.
Your posts, handle, display name, bio, location text and profile photo are public inside the app. Two things are yours to control:
We host your photos, so we can open them. That is true of every service that stores files for you, and stating it plainly is better than letting the paragraph above suggest otherwise. Concretely, the rules that keep other users out do not apply to the administration key, which is what runs moderation, brand approvals and repairs.
Two accesses are automatic and happen to every post, private accounts included: the word filter reads the text you write, and the moderation check sends the photo to OpenAI when you publish it. A third happens only when you tag a piece: the crop of that garment goes to the visual search named above.
Beyond those, a person looks at your content for three reasons only:
Today that person is one person, the founder. Nothing else: no browsing out of curiosity, no private content used to build features, rank a feed or train a model, and nothing shown to a brand or an advertiser. If REFIT grows enough to need staff, this page will say who has access and under what rule before it is granted.
Text is checked against a list of terms inside the database, at the moment it is written, so refused wording is never published to anyone. Photos and contextual abuse are checked by OpenAI's moderation service, and a post stays invisible to everyone but you until that check has answered. Changing a published post's caption or thumbnail sends it through that check again. Content reported by three different accounts, each at least a week old and none of them its author, is hidden pending review. Refused content is never published, and the post is kept rather than erased, so the decision can be reviewed if you contest it.
Delete your account from Settings, at any time. It removes your profile, posts, photos, comments, likes, saves and the record of what you looked at in the feed. It is immediate and it cannot be undone.
Ask for a copy of your data, or a correction, by emailing [email protected]. There is no self-serve export yet; requests are handled by hand, within 30 days.
If you are in the European Union or the United Kingdom, you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local data protection authority. If you are in Québec, you may also contact the Commission d'accès à l'information.
REFIT is not for children under 14, and accounts are not knowingly created for them. Fourteen is the age at which a minor can consent to the handling of their own personal information in Québec, where REFIT is operated, and the age is applied everywhere rather than by country. If you believe a child has an account, write to [email protected] and it will be removed.
Access rules live in the database itself rather than in the app, because the app only ever holds a public key: someone querying the API directly is bound by the same rules as the app. Passwords are hashed by the sign-in provider and never visible to us. Fit photos sit in a private bucket, reachable only through links that expire.
If this page changes in a way that matters, the date at the top changes and the app says so. Continuing to use REFIT after that means the new version applies.