Privacy Policy

1. Introduction

Welcome to WhichDrawer ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using WhichDrawer, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address and password. If you sign in with Apple or Google, we receive your name and email from those services.
• Profile Information: You may optionally provide additional profile information such as your name or profile picture.
• User Content: Photos of items and organizers you upload, item names, descriptions, quantities, categories, and any other information you enter into the app.
• Feedback and Support: Information you provide when contacting us for support or providing feedback.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: How you interact with the app, features used, time spent, and actions taken.
• Crash Reports: Technical information about crashes and errors to help us improve the app.
• Analytics: Aggregated and anonymized usage statistics.

2.3 Information from Third Parties

• Authentication Providers: If you sign in with Apple or Google, we receive basic profile information as permitted by your settings with those services.
• Payment Processors: We use RevenueCat for subscription management. They process payments through Apple App Store and Google Play Store. We do not directly collect or store payment card information.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process subscriptions and transactions
• Enable features like AI-powered image search
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze usage trends and preferences
• Detect, investigate, and prevent security incidents and fraud
• Comply with legal obligations

4. AI-Powered Features

Our AI Image Search feature uses machine learning to help you find items:

• Image Processing: When you use image search, photos are processed to create visual embeddings (mathematical representations) that enable similarity matching.
• Data Storage: Image embeddings are stored securely in our database to enable search functionality.
• Third-Party AI Services: We use Replicate API to generate image embeddings. Images are processed in accordance with their privacy policy.
• No Training: Your photos are not used to train AI models. They are only used to provide the search functionality you requested.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, crash reporting, payment processing).
• Shared Organizers: If you share an organizer with another user, they can view the contents you've shared.
• Community Templates: If you submit a layout template to the community, other users can see and use it (no personal information is shared).
• Legal Requirements: When required by law, legal process, or to protect our rights, privacy, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with password hashing
• Row-level security in our database
• Regular security audits and monitoring
• Access controls and employee training

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You can request deletion of your account and data at any time. After deletion:

• Your personal data will be removed within 30 days
• Photos and item data will be permanently deleted
• Anonymized, aggregated data may be retained for analytics
• Some data may be retained as required by law

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Limit how we use your data

To exercise these rights, contact us at privacy@whichdrawer.app or use the in-app settings.

9. Children's Privacy

WhichDrawer is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We use Supabase for our backend services, which may store data in various regions. We ensure appropriate safeguards are in place for international transfers.

11. Third-Party Services

Our Service integrates with the following third-party services:

• Supabase: Backend and database services
• RevenueCat: Subscription management
• Replicate: AI image processing
• Apple/Google: Authentication and payments
• Sentry: Error monitoring (when enabled)

Each service has its own privacy policy governing their use of your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an in-app notification or email for significant changes

Your continued use of the Service after changes indicates acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: