Privacy Policy
Last updated: March 6, 2026
1. Introduction
This Privacy Policy describes how Fiftify Inc. ("we", "us", "our") collects, uses, and protects your personal information when you use the Unboxity mobile application ("App"). We are committed to protecting your privacy and handling your data transparently.
2. Information We Collect
2.1 Information You Provide
- Account information: email address, display name, and profile picture (when using Google Sign-In)
- Box and item data: photos of box contents, item names, descriptions, quantities, dimensions, and values you enter
- Location labels: names and descriptions of storage locations you create (e.g., "Kitchen", "Garage")
2.2 Information Collected Automatically
- Device information: device model, operating system version, unique device identifiers
- Usage data: app interactions, feature usage, crash reports, and performance data (via Sentry)
- Network information: connectivity status (online/offline) for sync functionality
- Advertising identifiers: used by Google AdMob to serve relevant ads in the free version
2.3 Information from Third Parties
- Google Sign-In: basic profile information (name, email, profile photo) when you choose to sign in with Google
- RevenueCat: purchase and subscription status information
3. How We Use Your Information
- Provide the service: store your box inventory, sync data across sessions, generate QR codes
- AI item recognition: photos you submit are sent to Google Gemini (via OpenRouter) for item identification. Photos are processed in real-time and are not stored by the AI provider beyond the processing request
- Manage subscriptions: process purchases and verify premium status via RevenueCat
- Display advertisements: show relevant ads via Google AdMob in the free version
- Improve the App: analyze crash reports and usage patterns via Sentry to fix bugs and improve performance
- Send notifications: push notifications for sync status, updates, or important account information (with your permission)
4. Third-Party Services & Data Sharing
We do not sell your personal data. We share data with the following third-party services only as necessary to operate the App:
Supabase
Purpose: Backend database, user authentication, file storage, and real-time sync. Data stored: account information, box/item data, photos.
Supabase Privacy Policy
Google Sign-In
Purpose: Optional authentication method. Data shared: OAuth tokens. Data received: name, email, profile picture.
Google Privacy Policy
OpenRouter / Google Gemini
Purpose: AI-powered item recognition from photos. Data shared: photos of box contents (processed in real-time, not retained).
OpenRouter Privacy Policy
RevenueCat
Purpose: Subscription and in-app purchase management. Data shared: anonymous user ID, purchase history.
RevenueCat Privacy Policy
Google AdMob
Purpose: Displaying advertisements in the free version. Data shared: advertising identifiers, device info, general location.
Google Privacy Policy
Sentry
Purpose: Error tracking, crash reporting, and performance monitoring. Data shared: device info, OS version, stack traces, breadcrumbs (no personal content).
Sentry Privacy Policy
5. Data Storage & Security
Your data is stored on Supabase-hosted infrastructure and locally on your device using encrypted local storage (AsyncStorage). Data is transmitted using TLS encryption. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.
6. Offline Data & Synchronization
The App stores data locally on your device to enable offline functionality. This includes box data, item lists, and cached photos. When an internet connection is restored, local changes are automatically synchronized with our servers. Locally stored data persists until you clear the app data or uninstall the App.
7. Camera & Photo Library Access
The App requests access to your device camera and photo library. Camera access is used to photograph box contents and scan QR codes. Photo library access allows you to select existing photos for item recognition. Photos are uploaded to our servers for storage and sent to the AI service for recognition. You can revoke these permissions at any time through your device settings.
8. Push Notifications
With your permission, we may send push notifications for sync status updates, app updates, or important account information. You can disable push notifications at any time through your device settings.
9. Children's Privacy
The App is rated for ages 3+ but account creation requires users to be at least 13 years old. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly.
10. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and all associated data
- Export: request a portable copy of your data
- Opt-out: disable personalized ads through your device advertising settings
To exercise any of these rights, contact us at the email below or use the account management features in the App settings.
10.1 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected
- Right to Delete: request deletion of your personal information
- Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights
- Right to Opt-Out: we do not sell personal information, so no opt-out is necessary
10.2 EEA and UK Residents (GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the following additional rights under the General Data Protection Regulation (GDPR):
- Lawful basis: we process your data based on consent (account creation, photo uploads), contractual necessity (to provide the service), and legitimate interest (to improve and secure the App)
- Right to Restrict Processing: request that we limit how we use your data
- Right to Data Portability: receive your data in a structured, machine-readable format
- Right to Object: object to processing based on legitimate interest
- Right to Withdraw Consent: withdraw consent for data processing at any time
- Right to Lodge a Complaint: file a complaint with your local data protection authority
11. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data from our servers within 30 days. Anonymized, aggregated data may be retained for analytics purposes. Crash reports and performance data are retained by Sentry for 90 days.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. The "Last updated" date at the top of this page indicates when this policy was last revised.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Fiftify Inc.
1111B S Governors Ave, STE 23190
Dover, DE 19904, USA
Email: info@fiftify.com