Privacy Policy

This Privacy Policy describes how ThriftHaul (“we,” “us,” or “our”) collects, uses, stores, and shares information when you use the ThriftHaul mobile application (the “App”). By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

ThriftHaul is an iOS mobile application that provides AI-powered resale value identification and profit tracking for secondhand sellers and thrift shoppers. For questions about this Privacy Policy, please contact us at jayanth.0903@gmail.com.

2. Information We Collect

2.1 Information You Provide Directly

• Photos and images — When you use the scanning feature, you provide photos of items for AI analysis. These images are transmitted to our AI service provider for identification and valuation.
• Item data — Information you manually enter about items in your collection, such as purchase price, sale price, notes, and status (unsold / sold).
• Subscription information — When you subscribe to ThriftHaul Pro, payment is processed entirely by Apple through the App Store. We do not receive or store your payment card details.

2.2 Information Collected Automatically

• Device information — We may collect information about your device, including device model, operating system version, unique device identifiers, and app version.
• Product usage and analytics data — We collect in-app events and interactions (such as screens viewed, scans started and completed, onboarding steps, and subscription events) along with basic device and diagnostic information. This is processed through PostHog to help us understand and improve the App. It is not used for cross-app tracking and is not linked to your real-world identity. See Section 10.
• Crash and performance data — We may automatically collect crash reports and performance diagnostics to help us identify and fix technical issues.
• Advertising measurement data — We measure the performance of our advertising campaigns. With your permission, this may include your device Advertising Identifier (IDFA); if you do not grant permission, no IDFA is collected. See Section 11.
• Subscription status — We collect and store your subscription entitlement status (free or pro) via RevenueCat to verify access to premium features.

2.3 Information We Do Not Collect

• We do not collect your name, email address, or any other personally identifying information unless you contact us directly.
• We do not access your Photo Library. Photos are captured through the in-app camera only (or selected by you from your library if you choose to use that option) and are used solely for scanning purposes.
• We do not collect location data.
• We do not collect contacts or calendar data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the App and its AI-powered features
• Analyse photos you submit to identify items and generate resale value estimates, demand scores, and platform recommendations
• Verify your subscription status and provide access to premium features
• Track and display your saved items, profit calculations, and analytics within the App
• Detect, investigate, and prevent fraudulent or prohibited activity
• Improve AI model accuracy and overall app performance using aggregated, anonymised data
• Communicate with you if you contact us for support

4. Information We Share

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share information only in the following circumstances:

4.1 AI Service Providers

When you scan an item, the photo(s) you provide are transmitted to our AI analysis provider(s) — which may include Anthropic, Google, or OpenAI — solely for the purpose of generating identification and valuation results. These providers are bound by their own privacy policies and, where applicable, contractual obligations with us. Photos are processed transiently and are not retained by these providers for the purpose of training their models without a separate agreement.

4.2 Subscription Management

We use RevenueCat to manage subscription entitlements. RevenueCat receives a pseudonymous user identifier and subscription event data (e.g., subscription start, renewal, cancellation) to verify your access to ThriftHaul Pro features. RevenueCat’s privacy policy is available at revenuecat.com/privacy.

4.3 Apple

The App is distributed through the Apple App Store. Apple may collect certain information as described in Apple’s Privacy Policy, available at apple.com/legal/privacy.

4.4 Comparable Listings (eBay)

To show live comparable listings and resale value estimates, the App queries the eBay API. Search terms derived from your scanned item are sent to eBay; we do not share your identity with eBay.

4.5 Analytics Provider (PostHog)

We use PostHog to process the product-usage analytics described in Section 10. Data is sent to PostHog’s EU cloud (eu.i.posthog.com) and processed within the European Union. PostHog’s privacy policy is available at posthog.com/privacy.

4.6 Advertising Partners (Meta)

We use the Meta (Facebook) SDK to measure the performance of our advertising campaigns — for example, which ads led to installs or subscriptions. Where permitted, this measurement may use your device Advertising Identifier (IDFA). It always uses Apple’s SKAdNetwork / Aggregated Event Measurement, which provides only aggregated, non-user-level conversion data. See Section 11 for how you control this. Meta’s data policy is available at facebook.com/privacy/policy.

4.7 Legal Requirements

We may disclose your information if required to do so by law or in good-faith belief that such disclosure is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud or illegal activity, or protect the personal safety of users or the public.

4.8 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5. Camera and Photo Library Access

ThriftHaul requests access to your device’s camera to enable the item scanning feature. This access is used solely to capture photos for AI analysis. The App may also request access to your photo library to allow you to select existing photos for scanning.

You can manage these permissions at any time through your device’s Settings app under Privacy & Security. If you revoke camera access, you will not be able to use the scanning feature.

Photos captured within the App are not automatically saved to your camera roll unless you explicitly choose to do so.

6. Data Storage and Retention

Item data you save to your Treasure Chest (purchase price, sale price, notes, and related metadata) is stored locally on your device using Apple’s SwiftData framework. This data persists on your device until you delete the App or manually delete items within the App.

Photos submitted for scanning are transmitted to our AI service provider for analysis and are not stored on our servers beyond the time required to process your request.

Aggregated, anonymised usage data may be retained for analytical purposes for up to 24 months.

7. Data Security

We implement reasonable technical and organisational measures to protect your information from unauthorised access, loss, misuse, or disclosure. All data transmitted between the App and our service providers is encrypted in transit using industry-standard TLS.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use the App responsibly.

8. Children’s Privacy

ThriftHaul is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information without parental consent, we will take steps to delete such information promptly. If you believe we may have inadvertently collected information from a child under 13, please contact us at jayanth.0903@gmail.com.

9. Your Rights and Choices

9.1 Access and Deletion

Because item data is stored locally on your device, you have full control over it within the App. You can delete individual items or your entire collection at any time from within the App. Deleting the App from your device removes all locally stored data.

9.2 California Residents (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (“CCPA”), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information.

We do not sell your personal information to third parties.

To exercise your CCPA rights, please contact us at jayanth.0903@gmail.com. We will respond to verified requests within 45 days.

9.3 EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (“GDPR”) or equivalent legislation, including:

• Right of access — the right to request a copy of the personal data we hold about you
• Right to rectification — the right to request correction of inaccurate data
• Right to erasure — the right to request deletion of your personal data
• Right to restrict processing — the right to request that we limit how we use your data
• Right to data portability — the right to receive your data in a structured, machine-readable format
• Right to object — the right to object to our processing of your data

Our legal basis for processing data is: legitimate interests (to operate and improve the App), contract performance (to deliver the subscription service you pay for), and legal obligation (where required by law).

To exercise your GDPR rights, contact us at jayanth.0903@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. Product Analytics (PostHog)

We use PostHog to collect product-usage analytics so we can understand how the App is used and improve it. This includes in-app events and interactions (such as screens viewed, scans started and completed, onboarding steps, and subscription events) and basic device and diagnostic information.

This analytics data is processed on PostHog’s EU cloud (eu.i.posthog.com) within the European Union. It is not used for cross-app tracking and is not linked to your real-world identity. Apple’s App Store Connect may also provide us with high-level, aggregated usage statistics about the App as a whole.

11. Advertising and App Tracking Transparency

We use the Meta (Facebook) SDK to measure how our advertising campaigns perform — for example, which ads led to app installs or subscriptions. This measurement uses Apple’s SKAdNetwork / Aggregated Event Measurement, which reports only aggregated, non-user-level conversion data.

The App may also access your device Advertising Identifier (IDFA) for advertising measurement, but only with your explicit permission. On first relevant use, iOS will show Apple’s App Tracking Transparency (ATT) prompt:

• If you tap “Allow,” the IDFA may be accessed and used for advertising measurement.
• If you tap “Ask App Not to Track” or decline, no IDFA is collected and advertising measurement falls back to aggregated, privacy-preserving methods such as SKAdNetwork only.

You can change your tracking choice at any time in iOS Settings › Privacy & Security › Tracking, where you can also reset or limit your Advertising Identifier.

12. Links to Third-Party Services

The App may display information about third-party marketplaces (such as eBay, Poshmark, Depop, and Mercari) for the purpose of providing selling recommendations. We are not responsible for the privacy practices of these platforms. We encourage you to review the privacy policies of any third-party services you choose to use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. For significant changes, we will provide notice through the App or by other reasonable means. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

ThriftHaul
Email: jayanth.0903@gmail.com
Website: https://thrifthaul-web.vercel.app

We take privacy enquiries seriously and aim to respond to all requests within 30 days.