Privacy Notice

Last updated 3 August 2026

The key points

We use the photo you upload to generate AI images of you in different outfits. Your photo shows your face, which is biometric/likeness data we process only with your explicit consent.
We don't sell your data. We share it only with the providers needed to run Zavi (below).
We delete your uploaded photo within 7 days and your generated results within 7 days. You can ask us to delete your data sooner.
Questions or requests: support@wearzavi.com.

Who we are

Zavi is operated by Terry Kayondo, trading as Falcon Sky (P.O. Box 302153, Mengo, Kampala, Uganda), a sole trader, who is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact support@wearzavi.com.

What we collect

Your uploaded photo(s): a full-body photo (and any additional photo you provide). These contain your facial features and likeness, which are special-category biometric data under GDPR Article 9.
Account details: your name and email address, from Google sign-in.
Your generated images: the AI portraits we create for you.
Order details: the style and looks you chose and your consent timestamp. Payments are handled by Paddle; we never see or store your card details.

Why we process it (and our lawful basis)

To create your AI try-on images, the core service. For the biometric/likeness processing, our lawful basis is your explicit consent (the checkbox before checkout). You can withdraw consent at any time by contacting us; this stops future processing but doesn't affect what was already done.
To run your account and deliver your results, to perform our contract with you.

How AI is used

Your photo is sent to Google's Gemini image model to generate your portraits. This is automated image creation only. We don't use it to make decisions about you, and we do not use your photos to train AI models.

Who we share it with

We share data only with the providers that help us run Zavi, each under a data-processing agreement:

Google: sign-in and the Gemini AI image model.
Paddle: payment processing (our Merchant of Record).
Cloudflare: image storage and delivery.
netcup: server hosting (Germany/EU).

Some providers are based outside your country (for example, the US). Where data is transferred internationally, it is protected by appropriate safeguards such as standard contractual clauses.

How long we keep it

Uploaded photos: deleted within 7 days (and once your images are generated).
Generated results: available to you for 7 days, then deleted from our servers.
Account & order records: kept while your account is active; ask us to delete them at any time.

Saved photos (draft): if you turn on "save my photos for future use", those photos are kept until you delete them or replace your saved set, so you can reuse them for future orders. Photos used only for a single order still follow the 7-day deletion above. You can delete saved photos at any time from the upload step.

Telling AI images apart from photographs

Zavi’s output is photorealistic and depicts you, so it can be mistaken for a photograph. We think you should be able to tell, and so should anyone you show them to.

The images we deliver keep the provenance marking the image model embeds, which allows AI-generated content to be detected. We do not strip it, and our terms ask you not to either.
If you publish or share an image somewhere people would assume it is a real photograph, you should say it is AI-generated. In some countries this is a legal duty.
We never present Zavi output as a real photograph, and we label it as AI-generated wherever we show it.

Your rights

You can ask to access, correct, or delete your data, object to or restrict processing, withdraw consent, or receive a copy of your data. Email support@wearzavi.com and we'll respond. You may also complain to your local data-protection authority.

Changes

We'll update this notice as Zavi develops, posting changes here with a new “last updated” date.

Back to Zavi Terms Refund Policy