Privacy Policy for LegoSnap

Last Updated: March 27, 2026

LegoSnap (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by LegoSnap. This Privacy Policy applies to our mobile application “LegoSnap” (the “App”).

By accessing or using our App, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

1. Information We Collect

We collect information to provide better services to all our users. The types of information we collect include:

A. Information You Provide to Us

Account Information: If you register for an account (via email/password or Apple Sign-In), we collect your email address and authentication credentials.
User Content: The core function of LegoSnap is to scan and track your LEGO sets. We collect and store the text, notes, condition, purchase price, and other content you input into the App (“Your Collection”).
Support Data: If you contact us for support, we may collect your contact details and the content of your message.

B. Information We Collect Automatically

Device Information: We may collect information about your mobile device, including but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, and the type of mobile Internet browsers you use.
Usage Data: We collect information about how you use the App, such as the features you use, the time spent on the App, and crash logs to help us improve the stability and performance of the App.
Camera Data: The App requires access to your device’s camera to scan LEGO barcodes and box art. Images captured for processing are transmitted securely to our service providers and are not stored permanently.

C. Information from Third Parties

RevenueCat: We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat collects purchase history and subscription status linked to an anonymous App User ID. We do not process or store your credit card or payment instrument details directly; these are handled by the App Store (Apple).
Supabase: We use Supabase for authentication and database services. They process your login credentials and store Your Collection securely in the cloud.
Google API Services: Used for optical character recognition (OCR) and AI vision (Gemini) to identify LEGO sets from your scans.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

Provide and Maintain our Service: ensuring Your Collection is synced and accessible across your devices, and providing accurate LEGO market values.
Manage Your Account: to manage your registration as a user of the App.
Process Transactions: identifying your subscription status (Free, Pro, or Pro+) to unlock features.
Improve our App: analyzing usage trends to fix bugs and enhance user experience.
Send Administrative Information: sending you updates, security alerts, and support messages, including price alerts if you have set them.

We do not sell your personal data. We may share your information only in the following situations:

Service Providers: We may share your information with third-party vendors (like Supabase for database operations, Google for image processing, or PostHog/Sentry for analytics and crash reporting) who perform services on our behalf.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.

4. Third-Party Services

Our App utilizes the following third-party services, which have their own Privacy Policies:

RevenueCat: https://www.revenuecat.com/privacy
Supabase: https://supabase.com/privacy
Expo: https://expo.dev/privacy
Google Cloud: https://policies.google.com/privacy
PostHog: https://posthog.com/privacy
Sentry: https://sentry.io/privacy

5. Your Data Rights

Depending on your location (e.g., if you are in the EEA or California), you may have certain rights regarding your personal information, including:

Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
Right to Erasure (Deletion): You have the right to request that we erase your personal data (e.g., “Delete Account” option in Settings). This will permanently remove your account and Your Collection from our servers.
Right to Withdraw Consent: You have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

To exercise these rights, please contact us at the email provided below.

6. Children’s Privacy

Our App is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

7. Security of Your Data

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. We strive to use commercially acceptable means (encryption in transit and at rest via Supabase) to protect your Personal Data.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.