Privacy Policy

Effective date: April 22, 2026 · Last updated: September 18, 2026

This Privacy Policy describes how Colby Schenck ("WorthIt," "we," "us," or "our") collects, uses, and shares information when you use the WorthIt mobile application ("App"). We take privacy seriously and we don't sell your personal information.

If you do not agree with this Policy, please do not use the App.

1. Information We Collect

1.1 Information You Provide

• Account information — email address, display name, and authentication tokens when you sign up or sign in with email/password, Google Sign-In, or Apple Sign-In.
• Scan content — the photos you capture, the items identified from those photos, the prices and listings returned, and any collections, notes, or watchlist entries you create.
• Scan accuracy feedback — if you rate a result via the optional "Was this accurate?" prompt, we receive the rating, any reasons or note you add, and non-identifying scan details (item category, listing count, confidence level). This feedback is collected anonymously — it is not linked to your account or device, and never includes your photo.
• Support communications — messages you send to us at WorthIt.app@icloud.com.

1.2 Information Collected Automatically

• Device information — device model, operating system version, app version, language, and a device identifier (used for push notifications and anti-abuse).
• Usage data — screens viewed, features used, errors encountered, scan counts, and paywall interactions. We use this to improve the App.
• Approximate location — derived from your IP address at the country/region level. We do not collect precise GPS location.

1.3 What We Do Not Collect

• We do not collect precise location, contacts, microphone audio, or health data.
• We do not access photos outside those you explicitly capture or select inside the App.
• We do not track you across other apps or websites for advertising.

2. How We Use Information

We use the information we collect to:

• Identify items in your photos and retrieve price estimates
• Sync your scans, collections, watchlist, and alerts across your devices
• Send push notifications when items on your watchlist change price (if you enable alerts)
• Manage your subscription, process purchases, and restore prior purchases
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms
• Improve the App, fix bugs, and understand which features are used
• Comply with legal obligations

3. Third-Party Services

WorthIt uses the following processors to operate the App. Each receives only the data needed for its function:

We do not sell your personal information to third parties, and we do not share it for third-party advertising or marketing.

4. Your Photos

Photos you capture in the App are:

1. Uploaded to our AI providers (Google Gemini, and Anthropic Claude as fallback) for item identification. Providers process the image to return a result and do not use your photos to train models beyond what is covered by their enterprise data policies.
2. Stored on Firebase Storage for cross-device sync. Only you (authenticated as your WorthIt account) can retrieve them.
3. Never published publicly by WorthIt.

You can delete any scan from Home → long-press → Delete, and this removes the associated image from both your device and our storage.

5. Cookies and Tracking

The App does not use cookies or third-party advertising trackers.

We use PostHog to understand how the App is used and what it costs to run. Our server, not your phone, sends PostHog events tagged with your WorthIt account ID. That ID is a random code created with your account. It is not your name or email. The events cover:

• Using the App: finishing a scan, a scan that failed and why, opening or closing the upgrade screen, buying or restoring Pro (including which plan), and cancelling, with the reason you pick and anything you type in the optional box, along with your platform (iOS or Android) and app version.
• The work behind your scans, searches, price checks, and Izzit chats: each AI request, barcode or book lookup, and marketplace search, with what it cost us and how long it took.
• Work we do for your account in the background: daily price checks on your watchlist, free-trial reminders, with which day of the trial it was and the numbers the reminder is built from (like how many items you watch), and the one reminder we send a couple of days after you sign up, with how many days it had been and how many free scans you had left.

The events don't include your photos, what you scanned, what you asked Izzit, your name, or your email. The one thing you type that we do record is that optional note on the cancellation prompt.

The ID belongs to your account, not your device, so signing out, reinstalling the App, or switching phones doesn't change it. Deleting your account also deletes these events, though PostHog can take a few weeks to finish removing them.

Scan accuracy ratings are the exception. Each rating is sent under a new random ID that isn't linked to your account (see section 1.1).

6. Data Retention

• Active account data — kept as long as your account exists.
• Deleted scans — removed from our servers within 30 days.
• Deleted accounts — all personal data is deleted within 30 days of account deletion, except records we must retain for legal, tax, or fraud-prevention purposes.
• Billing records — retained by Apple per its own policy; we retain subscription status for as long as required by law.

7. Your Rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data (WorthIt provides JSON export in Settings → Data → Export Data)
• Withdraw consent to processing, where consent is the legal basis
• Object to processing, and restrict processing in certain cases
• Lodge a complaint with your local data protection authority

You can exercise most of these rights directly from the App (Settings → Account). For other requests, email WorthIt.app@icloud.com. We respond within 30 days.

California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

European Economic Area / United Kingdom (GDPR)

If you are in the EEA or UK, our legal basis for processing is:

• Contract — to provide the App's core features (item identification, scan history, subscriptions)
• Legitimate interests — to secure the App, prevent fraud, and improve the product
• Consent — where you opt in to push notifications
• Legal obligation — to comply with tax, accounting, and anti-abuse laws

The data controller is Colby Schenck (based in Washington State, USA). There is no EU representative; EU/UK residents may contact WorthIt.app@icloud.com directly.

8. Children's Privacy

WorthIt is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email WorthIt.app@icloud.com and we will delete it.

9. Security

We use industry-standard security measures including TLS encryption in transit, Firebase Authentication with secure token handling, encrypted local storage for biometric credentials (via Apple Secure Enclave / Android Keystore), and least-privilege service accounts on our backend. No system is 100% secure, but we take reasonable precautions.

10. International Transfers

Our servers and third-party processors are primarily located in the United States. If you are outside the United States, your data will be transferred to, stored, and processed in the U.S. By using the App, you consent to this transfer.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes we will notify you in the App or by email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Colby Schenck Email: WorthIt.app@icloud.com Support: WorthIt.app@icloud.com