Privacy Policy

This Privacy Policy describes how WorthIt (“we,” “us,” or “our”) handles information when you use the WorthIt mobile app and related services (the “Service”). WorthIt is operated by an independent developer. A formal legal entity name and mailing address may be added when incorporated.

Contact

For privacy questions, email hello@isitworthit.io.

Summary

WorthIt helps you evaluate products using photos, barcodes, and text you submit. Scan history is stored on your device unless you later use features that sync elsewhere. Cloud analysis, when enabled, sends your inputs to our backend and to AI and lookup providers to produce results. We use Supabase for sign-in and operational data such as usage limits when that is configured. We do not sell your personal information.

Information you provide

If you create an account, our authentication provider may process your email address, password (hashed by the provider), and any profile metadata you add. You may also submit images (for example product or price-tag photos), barcode values, and typed text (for example product names or notes) for analysis.

Information collected automatically

When cloud analysis is enabled, we may store usage counts and plan or tier data tied to your account to enforce daily limits. If we add analytics or crash reporting, we will update this Policy to name those tools and what they collect.

On your device

The app saves your analysis results and related data locally. When you are signed in, scan history (including saved-for-later and purchased markers, and location captured for a scan when you allow it) may sync to your account so it can be restored on another device. You can clear saved activity from Settings on this device; signed-in users may also remove synced copies from the cloud when clearing.

How we use information

We use it to run and improve the Service, authenticate accounts, enforce limits and security, generate product and price-related insights, and show links to third-party retailers. We may use it to comply with law and protect rights and safety. Third-party AI providers (for example Google Gemini) apply their own terms; check their documentation for whether your content may be used to improve their models.

Cloud analysis

When enabled and you are signed in (or when a custom analysis endpoint is configured), your image (if any), text query, mode (for example Save or Flip), and approximate location (when you grant permission) may be sent to our backend (for example Supabase Edge Functions). Our backend may call Google Gemini for interpretation. For barcode-only lookups, we may send the barcode to Open Food Facts (or similar databases) with minimal technical headers required by that service. Results are returned to your app. Server or provider logs may temporarily retain related metadata. Signed-in scan history may also store structured fields such as product name, prices you confirm, store context, and location metadata for your account.

Third parties

Third parties we rely on may include Supabase (authentication, database, serverless functions), Google (Gemini API), Open Food Facts (barcode product data), and our cloud hosting provider. Each has its own privacy policy.

Retailer links

The Service may open third-party sites (for example Amazon, Walmart, Target, Kroger, or eBay) in your browser. Those sites are independent and have their own practices. Some links may include affiliate parameters; see our Terms of Service for Amazon Associates and similar disclosures.

Retention

On-device history remains until you delete it or remove the app. Account and quota data are kept while your account is active and as needed for security and legal compliance. Log retention follows our hosting provider’s practices unless law requires otherwise.

Security

We use reasonable measures to protect information. No method of transmission or storage is completely secure.

Children

The Service is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect personal information from children.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Contact hello@isitworthit.io for requests.

International users

Information may be processed in the United States or other countries where we or our providers operate. Those countries may have different data protection laws.

Changes

We may update this Policy and will adjust the effective date. Material changes may be communicated as required by law. This page is published at https://isitworthit.io/privacy.

This Policy is provided for transparency and is not legal advice.