Privacy Policy

Introduction

Warranty Pocket ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our warranty tracking application (the "Service").

By using Warranty Pocket, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use the Service.

Information We Collect

When you sign in with Google, we collect only the following basic profile information:

• Email address
• Name
• Profile picture

Additionally, when you use the warranty tracking features, we store:

• Product warranty information you enter
• Purchase receipts and documents you upload
• Custom categories and tags you create

Google Calendar Integration (Optional)

If you choose to connect your Google Calendar, we follow a privacy-focused approach:

• A dedicated "Warranty Reminders" calendar is created in your Google Calendar
• All warranty expiry events are added only to this dedicated calendar
• Your other calendars remain completely untouched and inaccessible to our app
• You can disconnect or delete this calendar at any time
• We only store a secure refresh token to manage events in your dedicated calendar

We use the restricted calendar.app.created scope, which only allows us to manage calendars and events that our app itself creates. This means we cannot see, edit, or access any of your existing calendars or events - only the dedicated "Warranty Reminders" calendar we create.

How We Use Your Information

Google Sign-In is used exclusively for authentication purposes. Your basic profile information is used to:

• Create and maintain your account
• Identify you when you sign in
• Display your name and profile picture in the app
• Send you important account-related notifications

Third-Party Services

We use the following third-party services to provide and improve the Service:

• Supabase (Database & Authentication): Used to securely store your account data, warranty information, and uploaded documents. Data is encrypted both in transit and at rest.
• Google (Authentication & Calendar): Used for Google Sign-In authentication and optional Google Calendar integration for warranty expiry reminders.
• AI Processing Services: Your uploaded receipts and documents may be processed using AI technology to extract warranty information. Documents are processed securely and are not used to train AI models.

These third-party services have their own privacy policies. We encourage you to review their policies to understand how they handle your data.

Data Storage and Security

All your data, including warranty information and profile details, is stored securely using Supabase, a trusted database platform with enterprise-grade security. Your data is encrypted both in transit and at rest using industry-standard encryption protocols (TLS 1.3 for data in transit, AES-256 for data at rest).

We implement the following security measures to protect your information:

• Secure authentication using Google OAuth 2.0
• Row-level security policies to ensure data isolation between users
• Regular security audits and updates
• Encrypted backups and disaster recovery procedures
• Access controls and monitoring for suspicious activity

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your personal information and warranty data for as long as your account is active or as needed to provide you with the Service. If you delete your account:

• Your data will be immediately inaccessible to you and marked for deletion
• Active data will be permanently deleted within 30 days
• Backup copies may be retained for up to 90 days for disaster recovery purposes
• Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention, financial records)

You may request a complete export of your data before deleting your account.

International Data Transfers

Warranty Pocket is operated from Macedonia and primarily serves users in the United States. Your information, including personal data, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

Our infrastructure provider, Supabase, uses cloud servers that may be located in various regions. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy, regardless of where it is processed.

Data Sharing

We do not sell, trade, or share your personal information with third parties. Your data is used solely for providing and improving the Warranty Pocket service.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and all associated data
• Export: Request a portable copy of your data in a structured format
• Revoke Consent: Disconnect Google Sign-In or Google Calendar at any time

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal data we collect, use, disclose, and sell (we do not sell your data)
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: You have the right to opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

Categories of Personal Information We Collect (CCPA):

• Identifiers (name, email, profile picture from Google)
• Commercial information (subscription plan, payment history)
• Internet activity (app usage, feature interactions)
• User-generated content (warranties, receipts, documents you upload)

We collect this information directly from you and from your use of the Service. We use it solely to provide and improve the Service. We do not sell your personal information to third parties.

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@warrantypocket.com or through the Support section in the app settings. We will respond to your request within 30 days (or as required by applicable law). You may be required to verify your identity before we process your request.

Children's Privacy

Warranty Pocket is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Continued use of Warranty Pocket after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at:

Email: support@warrantypocket.com

You can also reach us through the Support section in the app settings.

Data Protection Contact:
Warranty Pocket
Privacy Inquiries
support@warrantypocket.com

For California residents exercising CCPA rights, please include "CCPA Request" in your email subject line.