Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Account information: email address, display name, and (if you sign up with email/password) a hashed password.
• Sign-in with Google or Apple: if you choose to sign in with a third-party provider, we receive your email address, name, and profile image as authorized by that provider.
• Photos you upload: images you capture or select when scanning an item.
• Item details: optional notes, store name, store location text, and price you paid, if you choose to enter them.

1.2 Information generated by your use of the App

• Scan results: AI-generated identifications (brand, category, condition), comparable listings we find on public marketplaces, and estimated values we compute for your items.
• Haul data: items you group together, totals, and milestones you reach.
• Saved items: items you save to your collection.
• Usage counters: number of scans performed per day (used to enforce plan limits).

1.3 Information collected automatically

• Device & app analytics (via PostHog): device type, operating system, app version, screen views, feature interactions, crash events, and approximate location inferred from your IP address (country/region level). We do not collect precise GPS location.
• Push notification tokens: if you grant notification permission, we store an Expo push token so we can send you notifications about your scans and account.
• Authentication tokens: stored locally on your device in secure storage to keep you signed in.

1.4 Permissions the App requests

• Camera — to photograph items you want to scan.
• Photo library — to let you select existing photos to scan.
• Notifications — to send price alerts, scan completions, and streak reminders (only if you opt in).

You can revoke any of these permissions from your device settings at any time.

1.5 Information we do not collect

• We do not access your precise GPS location, contacts, microphone, calendar, or health data.
• We do not sell your personal information to third parties.
• We do not use your photos to train public AI models outside the scan pipeline described below.

2. How We Use Your Information

We use the information we collect to:

• Provide the core scan pipeline: identify items from your photos, find comparable listings, and estimate resale values.
• Maintain your account, authenticate you, and enforce plan limits.
• Save your scan history, collection, and haul records across sessions.
• Send you transactional and optional notifications (price drops, scan completions, streaks, milestones).
• Understand how the App is used so we can improve features and fix bugs.
• Prevent fraud, abuse, and violations of our Terms.
• Comply with legal obligations.

3. How Your Photos and Scan Data Are Processed

When you perform a scan, your image is uploaded to our backend and then sent to the following third-party services solely to complete the scan pipeline:

1. OpenRouter — your image is sent to third-party AI models routed through OpenRouter for item identification and valuation synthesis. Images are transmitted over HTTPS.
2. Serper — we search publicly available marketplace listings using a text description of your item. Your photo itself is not sent to Serper.
3. Spider.cloud — we retrieve the content of publicly available marketplace pages to extract comparable listing data. Your photo itself is not sent to Spider.
4. Convex — our real-time backend stores your scan results, photos, and account data. Convex hosts data on its secured cloud infrastructure.

These providers act as processors for us. We do not permit them to use your data for their own purposes beyond providing the services described.

4. Third-Party Services We Use

Each provider has its own privacy policy governing its handling of data.

5. Data Retention

• Account data is retained for as long as your account is active.
• Scan photos, scan results, and haul records are retained until you delete them or your account is deleted.
• Analytics data (PostHog) is retained for up to 13 months.
• Authentication tokens are retained until they expire or you sign out.

If you delete your account (see Section 7), we delete or anonymize the data associated with you within 30 days, except where we are legally required to retain it longer.

6. How We Share Information

We share personal information only in these circumstances:

• With service providers listed in Section 4, who process data on our behalf under contract.
• To comply with legal obligations, such as responding to a lawful subpoena.
• To protect rights and safety, including investigating fraud or abuse.
• In connection with a business transfer, such as a merger or acquisition, with notice to you.

We do not sell personal information.

7. Your Rights and Choices

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate information.
• Deletion — ask us to delete your account and associated personal information.
• Opt out of analytics — you can disable analytics tracking in the App settings (where available) or at the device level.
• Revoke permissions — disable camera, photo library, or notification access from your device settings at any time.
• Data portability — request an export of your data in a machine-readable format.

To exercise any of these rights, email joshua@reliqe.app. We will respond within the timeframes required by applicable law (typically 30 days).

California residents (CCPA/CPRA)

California residents have the right to know, delete, correct, and opt out of “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising.

European residents (GDPR)

If you are in the European Economic Area, UK, or Switzerland, we rely on the following legal bases: contract performance (to provide the App), legitimate interests (to improve and secure the App), and consent (for optional notifications and analytics where required).

8. Children's Privacy

Reliqe is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact joshua@reliqe.app and we will delete it.

9. Security

We use industry-standard safeguards to protect your information, including encrypted transport (HTTPS/TLS), secure authentication tokens, hashed passwords, and access controls on our backend. No system is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your information may be processed in the United States and other countries where our service providers operate. By using the App, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by email. The “Last updated” date at the top reflects the most recent revision. Continued use of the App after an update constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy or your personal information:

Email: joshua@reliqe.app
Company: Reliqe