Last updated: September 5, 2026
This policy covers ThriftSnap: AI Resale Value (the "App"), listed under that name on the Apple App Store and referred to throughout as ThriftSnap.
Photos you take in the App. When you scan an item you take a photo of the item, and optionally a second close-up of its brand or size tag. Both are uploaded to our servers (hosted on Supabase) and sent to a third-party AI service (Anthropic's Claude) to identify the item. Photos are stored so your scan history and closet work across devices. Images are resized on your device before upload.
Profile information. If you add them: a display name and a profile photo. Both are optional — the App works without either.
Account information. If you create an account: your email address and a hashed password (we never store your password in plain text).
Scan and closet data. Item identifications, price estimates, items you save to your closet, and the amounts you choose to enter: what you paid for an item and, if you mark it sold, what you sold it for.
Subscription status. Whether you have an active subscription, which plan you are on, when the current paid period ends, and how many scans you have used, so we can apply the correct limits. Payment details (credit card, billing address) are handled entirely by Apple — we never see or store them. Subscriptions are managed through RevenueCat, which receives your purchase status and your account's internal identifier. That identifier is a random code rather than your name or email, but it does identify your account to us, so we describe it as pseudonymous rather than anonymous.
Messages you send us. Settings has a Contact section with Send Feedback and Report a Problem. Both open your own email app with a message already prepared. Nothing is sent until you send it, and it is sent by your email app from your own address — not by ThriftSnap. A problem report also fills in your device type and operating system version (for example "ios 18.5") so we can reproduce the fault; you are free to delete that line before sending. Whatever you send reaches our support mailbox, and we keep it for as long as we need to answer you and to fix what you reported.
Preferences. Your chosen display currency, stored on your device.
Your IP address, for abuse prevention only, and only in one case. Scanning in the App requires an account, and for a signed-in scan the rate-limit counter is keyed to your account — no IP address is recorded at all. An IP is recorded only where a scan is requested without an account, which the App itself never does but our interface permits; without that limit anyone could script unlimited scans against our AI provider at our expense. Where an IP is recorded it is used for nothing else — not analytics, not advertising, not profiling — is never linked to an account or to any photo, and is deleted after 7 days.
Technical usage records. For each scan we record how much AI processing it consumed and what it cost us, so we can understand and control the cost of running the service. This holds no photo and no content of your item. If you delete your account these records are kept, but the link to your account is removed, so what remains is an anonymous cost figure that cannot be traced back to you.
We do not sell your personal data or use it for third-party advertising.
| Service | What is shared | Why |
|---|---|---|
| Supabase | Photos, account info, profile, scan/closet data | Database, storage, and login infrastructure |
| Anthropic (Claude AI) | Your item photo, and the tag close-up if you take one | AI identification and price estimation |
| eBay (Browse API) | Text search queries derived from your scans — never your photos or identity | Finding comparable listings for price estimates |
| eBay (in your browser) | Only if you tap through to a listing or search from a result. Your browser then contacts eBay directly, as it would for any link | Letting you see the comparable listings themselves |
| Frankfurter (exchange rates) | Currency codes only (e.g. "USD to GBP") — no personal data | Converting displayed prices into your chosen currency |
| Apple | Subscription purchases | Payment processing |
| RevenueCat | Your account's internal identifier (a random code, not your name or email) and your subscription status — never your email, photos or closet | Managing subscriptions and unlocking paid features |
Each of these providers has its own privacy policy governing their handling of data.
Data is transmitted over encrypted connections (HTTPS). Your account data — closet, scan history, profile and subscription status — is protected by database row-level security, so only you can read or change your own records.
Please note how photos are stored. Uploaded photos (scan images and profile pictures) are held in public storage buckets. They are not listed anywhere and their web addresses contain long random identifiers that are impractical to guess, but they are not individually access-controlled: anyone who obtains a photo's exact URL can view it without signing in. Treat scanning as you would posting a photo to an unlisted link, and avoid capturing anything in frame you would not want seen that way.
No system is perfectly secure, and we cannot guarantee absolute security.
ThriftSnap is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. Contact us at thriftsnapai@gmail.com to exercise these rights.
We may update this policy from time to time. Material changes will be communicated in the App or by email.
Privacy questions or requests: thriftsnapai@gmail.com