ThriftTown Privacy Policy

1. Information We Collect

Account Information

Email address, display name, and authentication credentials when you create an account or sign in with Google or Apple.

Market & Vendor Data

Market name, description, address, and logo image.

Vendor name, vendor number, contact information (phone and email), and profile photo.

Transaction Data

Checkout items including vendor number, item description, price, and timestamp.

Transaction totals and history.

Camera & Photos

The App uses your device camera to scan price tags during checkout. Tag images are processed for text recognition.

The App accesses your photo library when you choose to upload a market logo or profile photo.

2. How We Use Your Information

Authentication: To create and manage your account and verify your identity.

App Functionality: To operate the marketplace features including checkout, transaction history, vendor management, and market administration.

Image Processing: Price tag images are sent to a third-party AI service (OpenAI) to extract text (vendor number, price, and description). These images are processed in real time and are not stored by the third-party service beyond the processing request.

Storage: Market logos, profile photos, and tag images are stored securely using Firebase Storage.

3. Third-Party Services

We use the following third-party services:

• Google Firebase — Authentication, database (Firestore), and file storage.
• Google Sign-In — OAuth authentication. Subject to Google's privacy policy.
• Apple Sign-In — OAuth authentication on iOS. Subject to Apple's privacy policy.
• OpenAI API — Image-based text recognition for price tag scanning. Subject to OpenAI's API data usage policy.
• Google ML Kit — On-device text recognition. Processing occurs entirely on your device; no data is sent externally.

4. Data Storage & Security

Your data is stored on Google Firebase servers located in the United States.

All data is transmitted over encrypted HTTPS connections.

Access to your data is restricted by Firebase security rules tied to your authenticated account.

Some data (transaction history, preferences) is also cached locally on your device.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your data is shared only as follows:

• Within your market: Market owners can see vendor profiles and transaction data for their market. Vendors can see their own sales data.
• Service providers: As described in Section 3, to operate core App features.
• Legal requirements: If required by law, regulation, or legal process.

6. Your Rights

Access & Export: You can export your transaction data as a CSV file from within the App.

Account Deletion: You can delete your account from the App's Settings screen. This removes your authentication record and user data. Market data created by market owners may be retained in a deactivated state.

Revoke OAuth: You can revoke Google or Apple sign-in access at any time through your Google or Apple account settings.

7. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can promptly remove it.

8. Analytics & Tracking

The App does not use any analytics, advertising, or tracking services. We do not track your behavior, serve ads, or share data with advertising networks.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy within the App or on our website. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Email: support@thrift.town