Privacy Policy
Last updated: February 27, 2026
Hoardable ("we," "our," or "us") is committed to protecting your privacy. This Privacy
Policy explains how we collect, use, disclose, and safeguard your information when you
use our mobile application and related services (collectively, the "Service").
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Name and email address (via Google or Apple Sign-In)
- Profile photo (if provided by your OAuth provider)
- Authentication tokens for sign-in
1.2 Photo Data
When you use Hoardable to scan your spaces:
- Photos you upload are transmitted to our servers for AI processing
- Photos are processed to identify items, including names, brands, colors, and condition
- Original photos are stored securely in encrypted cloud storage
- EXIF metadata (date taken, location if enabled) may be retained to remember where items were found
1.3 Inventory Data
We store data about items you discover and save:
- Item names, descriptions, brands, models, colors, and condition
- Your tags, notes, and favorite status
- Which photo each item was identified from
1.4 Usage Data
We automatically collect:
- App usage statistics (scan frequency, features used)
- Device information (model, OS version)
- Crash reports and performance data
1.5 Purchase Data
When you purchase credit packs:
- Transaction IDs from Apple App Store or Google Play
- Purchase amounts and dates
- We do not receive or store your payment card details
2. How We Use Your Information
We use collected information to:
- Provide the Service: Process photos, identify items, and maintain your inventory
- Improve AI accuracy: Enhance our item recognition models (photos used for training are anonymized)
- Send notifications: Reminders and updates you have opted into
- Process purchases: Manage credit pack transactions and balances
- Provide support: Respond to your inquiries and troubleshoot issues
- Comply with law: Meet legal obligations and enforce our Terms
3. Third-Party Services
3.1 AI Processing (Google Gemini)
Photos are processed using Google's Gemini AI to identify items. Photos are
sent to Google's API for processing. Google does not use API data to train their models
when accessed through their paid API tier.
3.2 Authentication (Google & Apple)
We use OAuth providers (Google Sign-In, Apple Sign-In) for authentication. These services
share only the information you authorize (typically name and email).
3.3 Cloud Infrastructure (AWS)
Your data is stored on Amazon Web Services (AWS) infrastructure with encryption at rest
and in transit. AWS data processing terms apply.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data only in these circumstances:
- Service providers: Third-party services that help us operate (cloud hosting, AI processing), under strict data processing agreements
- Legal requirements: When required by law, court order, or governmental authority
- Safety: To protect the rights, safety, or property of Hoardable, our users, or the public
- Business transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)
5. Data Retention
- Account data: Retained while your account is active
- Photos: Retained while your account is active; deleted within 30 days of account deletion
- Inventory data: Retained while your account is active
- Usage logs: Retained for up to 12 months, then anonymized or deleted
- Purchase records: Retained for 7 years for financial compliance
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data (see Account Deletion)
- Portability: Export your inventory data
- Opt-out: Unsubscribe from marketing communications
- Restriction: Request limitation of processing
6.1 GDPR (European Economic Area)
If you reside in the EEA, we process your data under the following legal bases: consent
(for optional features), contract performance (to provide the Service), and legitimate
interest (to improve our Service). You may exercise your rights by contacting us at
privacy@hoardable.io.
6.2 CCPA (California)
If you are a California resident, you have the right to know what personal information
we collect, request deletion, and opt out of the "sale" of personal information. We do
not sell personal information. To exercise your rights, contact us at
privacy@hoardable.io.
7. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Secure authentication via OAuth 2.0
- Regular security audits and monitoring
- Access controls and principle of least privilege for our team
No method of electronic storage is 100% secure. While we strive to protect your
information, we cannot guarantee absolute security.
8. Children's Privacy
Hoardable is not directed at children under 13. We do not knowingly collect personal
information from children under 13. If you believe a child has provided us with personal
information, please contact us and we will delete it promptly.
9. Account Deletion
You may delete your account at any time through the app (Settings > Account > Delete Account)
or by visiting our account deletion page. Upon deletion:
- Your account and profile information will be permanently removed
- All photos will be deleted from our servers within 30 days
- Your inventory data will be permanently deleted
- Remaining scan credits will be forfeited
- This action cannot be undone
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material
changes by posting the new policy in the app and updating the "Last updated" date.
Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us: