Privacy Policy

Thank you for using ThriftX. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using ThriftX you agree to this policy.

1. Who we are

ThriftX is an app that helps you discover second-hand clothing across multiple marketplaces (eBay, Depop, Poshmark, Mercari, ThredUp, Vinted). The app is operated by the developer of ThriftX. Contact: support@thriftx.shop.

2. Information we collect

We collect the following categories of information:

Account information

When you create an account we collect:

• Email address
• Display name (optional)
• Profile picture (optional, if you choose to upload one)
• Encrypted password (handled by Firebase Authentication — we never see your plaintext password)

Usage information

When you use the app we collect:

• Search queries you submit (to power search results and to improve recommendations)
• Items you save / like (to display them to you on subsequent sessions)
• Feedback you submit on search results (to improve the AI-powered ranking)

Device and technical information

• Approximate IP address (used for rate limiting and security)
• Device type and operating system version
• App version
• Anonymous error logs (for diagnostics)

What we do NOT collect

• Your precise location
• Contacts, calendar, or other personal data
• Health data
• Payment information (ThriftX does not handle purchases — you complete transactions directly on the marketplace)

3. How we use information

We use your information to:

• Provide the core features of the app (search, save items, AI search)
• Maintain your account and authenticate you
• Improve the quality of search results (using anonymized aggregate data)
• Protect against abuse (rate limiting, fraud prevention)
• Comply with legal obligations

We do not sell your personal information.

4. Third-party services

ThriftX uses the following third-party services that process limited information on our behalf:

These providers act as data processors for ThriftX and are bound by their own data protection commitments.

5. Marketplace links

When you tap "View on marketplace" the app opens the marketplace's website or app. From that point the marketplace's own privacy policy applies — ThriftX does not see what you view or purchase on the marketplace.

6. Data retention

• Account data: kept while your account is active.
• Search history: retained for up to 12 months for product-improvement purposes, then deleted.
• Anonymous logs: retained for up to 30 days.

When you delete your account (Profile → Delete Account), we permanently remove your personal data within 30 days, except where retention is legally required.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (via the Edit Profile screen, or by emailing us)
• Delete your account and associated data (Profile → Delete Account)
• Object to processing of your data
• Data portability — request a copy of your data in machine-readable form
• Withdraw consent at any time

To exercise any right not covered by an in-app control, email support@thriftx.shop.

Residents of the European Economic Area, the United Kingdom, California, and other jurisdictions with applicable laws have additional rights under GDPR / UK-GDPR / CCPA. We honor those rights for all users.

8. Children

ThriftX is not directed to children under 13 (or under the equivalent age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Security

We use industry-standard measures to protect your data, including TLS in transit, encryption at rest, hashed passwords, and least-privilege access controls on the backend.

No service can be 100% secure. If we discover a security incident affecting your data we will notify you as required by law.

10. International transfers

Your data is processed in the United States (Google Cloud, OpenAI, Firebase) and may be transferred outside your country. Where we transfer personal data of EEA / UK residents, we rely on the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.

11. Changes

We may update this policy. Material changes will be announced in-app or by email. The "Last updated" date at the top tells you when the policy was last revised.

12. Contact

Questions or requests: support@thriftx.shop