Due Lab App Privacy Policy

1. Controller

The controller is MrF x Nexus Company LLC (شركة إم آر إف إكس نكسس ذ.م.م), a limited liability company based in Riyadh, Jarir district, national short address REJA8021, Saudi Arabia. Commercial Registration 7054581355, VAT number 314851252300003.

For anything concerning this policy, write to the official address info@mrf103.com.

2. Scope

This policy covers the Due Lab · دولاب app for iOS and Android (application ID com.mrf103.duelab). The frame that an online store shows on its own page, where you paste your fit passport, is a web service separate from the app and is not covered by this policy; what reaches it is described in section 7.

3. No network access

The app contains a network guard that blocks every outbound connection attempt and logs it; you can see the log in the in-app "Privacy centre". The app therefore sends your data neither to the company nor to anyone else, and does not transfer it off your device or outside the Kingdom (Article 29 of the Personal Data Protection Law).

The app contains no analytics, no crash reporting, no advertising, no cloud storage and no external processor (Article 8). It does not track you across apps or websites.

4. What is processed on your device

• Measurements: your measurements and twin are computed locally and never sent to a server.
• Camera: used to read barcodes and to scan your body. The scan is recorded without sound, and the app does not request microphone permission. The video file stays in the app's temporary storage only for the capture and extraction, and is then deleted. Each frame becomes numbers and then every byte of it is zeroed, with a receipt stating how many frames were zeroed and whether the video was deleted.
• Body shape: numbers with no pixels and no mask, kept only with your consent to "Keep my real body shape on this phone".
• Face: "my face on the twin" is off by default. If you turn it on, the face is a head crop above the neck only, no larger than 128 × 160 pixels, kept only with your consent to "Keep my head image for the twin".
• Texture atlas: of the full-body scan images, only the atlas remains, with your consent, sealed under its own key.
• Fit passport: eight rounded measurements, a fit preference, an expiry date and a public verification key. No name, phone, photo or device ID (Article 11).
• Consent ledger: a chained ledger on the device of every consent and withdrawal; its chain reveals any tampering.

5. Purposes

Computing your measurements and recommended size, building your twin and showing how garments fit on it, issuing an identity-free fit passport, and sharing a size result with a store when you ask. Nothing else.

6. Separate consents, withdrawable at any time

Each purpose has its own consent, which you grant and withdraw under "My consents" in the Privacy centre (Article 5):

• On-device processing only: required to start.
• Issue an identity-free fit passport.
• Share a size result with a store when I ask: off by default.
• Keep my real body shape on this phone (body-shape).
• Keep my head image for the twin (face-keep).
• Confirmation: I am 18 or older (adult-18).

Withdrawing destroys what depends on it: turning off "my face on the twin" destroys the face, and "Erase my shape (shape and texture)" destroys the shape and the atlas; the withdrawal is recorded in the ledger.

7. Sharing with a store

Nothing is shared with any store except with your consent and by your own action: you paste your fit passport code into the Due Lab frame on the store's page. The store sees the recommended size, not your measurements. The server that verifies the passport accepts eight anonymous fields and rejects anything else, and runs in an isolated frame that the store page's scripts cannot read (Articles 11 and 15). Each store's passport carries a different pseudonym, so your shopping cannot be linked across stores.

Because the frame appears inside the store's page, make sure you are on the store you intend before pasting.

8. Permissions and why

• Camera: to read barcodes and scan your body; the images are processed on the device as described in section 4.
• No microphone, no location, no contacts.
• On Android: the permission list may show internet access and storage read/write permissions, which the build framework adds automatically. The app sends nothing through them, and the network guard blocks every outbound connection.

9. Retention and erasure

• The temporary video is deleted after extraction, and frames are zeroed as soon as they become numbers.
• What is in the vault stays on your device until you destroy it.
• "Erase my shape (shape and texture)" destroys the shape and the atlas: the key first, then the ciphertext, with a receipt.
• "Hold to crypto-erase" destroys the encryption key, all measurements and the passport at once. Irreversible (Articles 4 and 18).

Some operating systems may keep an app's stored keys after it is uninstalled, so use crypto-erase before uninstalling the app. The company retains none of your data, because none of it reaches us.

10. Age and children

Due Lab is not directed at anyone under 18. Keeping body shape and face is tied to the confirmation "I am 18 or older". That confirmation is your own statement, not a verification of your identity or age; the app collects nothing that proves age. If a parent or guardian learns that a minor has used it, crypto-erase destroys everything on the device.

11. Your rights

Under the Personal Data Protection Law you have the right to be informed of what is processed and why, to access it, to have it corrected and to request its destruction (Article 4), and to withdraw your consent at any time (Article 5). Because all the data is on your device, you exercise these rights yourself:

• Access: your measurements and passport in the app; your consents, their ledger and the blocked connection attempts in the Privacy centre.
• Correction: measure or scan again in the app.
• Erasure: "Erase my shape" or crypto-erase.
• Withdrawing consent: under "My consents" in the Privacy centre.

For any question or request, write to info@mrf103.com.

12. Complaints

If you believe your data was processed in breach of the Law, please write to us first so we can resolve it. You may at any time lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent supervisory authority.

13. Updates and legal review

This policy is subject to review by the company's legal counsel; any change resulting from that review, or from a change in the app, is published on this page with its date. Last updated: 12 November 2026.