Last updated: May 26, 2026
Thank you for using ThriftX. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using ThriftX you agree to this policy.
ThriftX is an app that helps you discover second-hand clothing across multiple marketplaces (eBay, Depop, Poshmark, Mercari, ThredUp, Vinted). The app is operated by the developer of ThriftX. Contact: support@thriftx.shop (replace with your actual support address before publication).
We collect the following categories of information:
When you create an account we collect: - Email address - Display name (optional) - Profile picture (optional, if you choose to upload one) - Encrypted password (handled by Firebase Authentication — we never see your plaintext password)
When you use the app we collect: - Search queries you submit (to power search results and to improve recommendations) - Items you save / like (to display them to you on subsequent sessions) - Feedback you submit on search results (to improve the AI-powered ranking)
We use your information to: - Provide the core features of the app (search, save items, AI search) - Maintain your account and authenticate you - Improve the quality of search results (using anonymized aggregate data) - Protect against abuse (rate limiting, fraud prevention) - Comply with legal obligations
We do not sell your personal information.
ThriftX uses the following third-party services that process limited information on our behalf:
| Service | Purpose | Data sent |
|---|---|---|
| Firebase Authentication (Google) | Account login | Email, password (hashed) |
| Google Cloud Run / Cloud SQL | Backend hosting & data storage | All app data |
| OpenAI API | AI-powered search ranking | Anonymized search queries and product titles |
| ScrapingBee | Marketplace data retrieval | Search keywords (no personal info) |
| Upstash Redis | Caching and rate limiting | Anonymous request counts |
| eBay Finding API | eBay product search | Search keywords (no personal info) |
These providers act as data processors for ThriftX and are bound by their own data protection commitments.
When you tap "View on marketplace" the app opens the marketplace's website or app. From that point the marketplace's own privacy policy applies — ThriftX does not see what you view or purchase on the marketplace.
You have the right to: - Access the personal data we hold about you - Correct inaccurate data (via the Edit Profile screen, or by emailing us) - Delete your account and associated data (Profile → Delete Account) - Object to processing of your data - Data portability — request a copy of your data in machine-readable form - Withdraw consent at any time
To exercise any right not covered by an in-app control, email support@thriftx.shop.
Residents of the European Economic Area, the United Kingdom, California, and other jurisdictions with applicable laws have additional rights under GDPR / UK-GDPR / CCPA. We honor those rights for all users.
ThriftX is not directed to children under 13 (or under the equivalent age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it.
We use industry-standard measures to protect your data, including TLS in transit, encryption at rest, hashed passwords, and least-privilege access controls on the backend.
No service can be 100% secure. If we discover a security incident affecting your data we will notify you as required by law.
Your data is processed in the United States (Google Cloud, OpenAI, Firebase) and may be transferred outside your country. Where we transfer personal data of EEA / UK residents, we rely on the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.
We may update this policy. Material changes will be announced in-app or by email. The "Last updated" date at the top tells you when the policy was last revised.
Questions or requests: support@thriftx.shop