Privacy Policy

1. Who We Are

THRIFTEAZ ("we", "us", "our") is a mobile application that helps resellers identify, price, and list second-hand items. THRIFTEAZ is operated by THRIFTEAZ LLC, a Utah limited liability company.

Questions? Email us at thrifteazadmin@gmail.com

2. What We Collect

• Account data: email address and display name when you create an account.
• Photos: images you capture or upload for item identification. These are stored in our secure cloud and linked to your account.
• Scan history: item names, suggested prices, and listing details you create in the app.
• Usage data: scan counts, platform preferences, and subscription status.
• Purchase data: subscription and one-time purchase records (processed by RevenueCat — we never see your payment card details).
• Biometric authentication state: if you opt in to "Remember me" on the sign-in screen, your password is stored in the device's secure enclave (iOS Keychain / Android Keystore) and unlocked locally by your fingerprint or Face ID. The biometric data itself never leaves your device, is never transmitted to our servers, and we never see or store it. Opting in is purely optional; you can clear it at any time by unchecking "Remember me" and signing in.

3. How We Use Your Data

• To identify and price items using AI (requests are processed server-side — your API calls never leave our infrastructure).
• To display your scan history and analytics within the app.
• To manage your subscription and enforce free-tier limits.
• To serve a single rewarded ad per bonus scan (via Google AdMob). We do not sell your data to advertisers.
• To improve the app and fix bugs.

4. Third-Party Services

We use the following third parties, each governed by their own privacy policies:

• Supabase — database, authentication, and file storage (EU/US data centres).
• RevenueCat — subscription and purchase management.
• Google AdMob — rewarded video ads for free users.
• OpenAI / Anthropic — AI item identification and description generation (requests are routed through our server-side edge functions; images and text are processed but not retained for training by default).

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with the service providers listed above, and only to the extent necessary to operate the app.

6. Data Retention

We retain your account data and scans for as long as your account is active. You can delete your account (and all associated data) at any time from the Me tab → Settings → Delete Account.

7. Your Rights

Depending on your jurisdiction (including GDPR and CCPA), you may have the right to access, correct, or delete your personal data. Contact us at thrifteazadmin@gmail.com to exercise these rights.

8. Children

THRIFTEAZ is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from minors. If you believe a child has provided us with personal information, please contact us immediately.

9. Security

All data is encrypted in transit (TLS) and at rest. AI API keys are never stored in the app binary — all AI requests go through server-side edge functions.

10. Push Notifications

With your permission, we send push notifications for events such as community price validations on your posts, scan completion, and important account updates. You can opt out at any time by disabling notifications for THRIFTEAZ in your device's system settings, or by toggling specific categories in the Me tab → Notification Settings. We never send marketing or promotional push notifications without your explicit opt-in.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.