Privacy Notice

• The items you add to a basket (photo, product name, price, the retailer link) and the decisions you record about them.
• Your account email and display name, plus how you signed in (Google or magic link).
• Any contacts you save for sharing, and any baskets you publish or share by link.

We store this so the app can show your baskets back to you across devices, and so collaborators on a shared basket see the same content.

When you invite someone to a basket, they can see every item in that basket and add their own. They can also see your display name. They never see your email or any of your other baskets.

You can leave a basket someone else owns at any time from that basket's screen. Leaving immediately removes your access.

When you create a share link or publish a basket to the community feed, anyone who has the link can open it. Public-facing pages do not include your email or your user id — only your display name and the basket contents.

You can revoke a share link at any time from the shared basket page (the "Revoke share link" button). Once revoked, the link stops working immediately.

When you snap or upload a photo of a product, drsr sends that image to AI services so we can identify the item, retailer, brand and price. Today those services are OpenAI (image understanding and safety review) and Google (Lovable AI Gateway). Images are sent only to identify the product and check it against our safety policy — they are not used to train any model.

We cache the result of an image lookup briefly so the same photo doesn't have to be re-analysed. Cached entries expire automatically.

Anything you publish to the community feed is run through OpenAI's safety review and our own moderation policy. Private baskets and link-only shares are not moderated.

We record basic product-usage events (e.g. "basket created", "item added") to understand how the app is being used and to decide what to build next. We do not sell this data and we do not use third-party advertising trackers.

You are in control. From Profile → Settings you can:

• Delete all my data — removes every basket, item, decision and share link you created. Your account stays so you can start fresh.
• Delete my account — permanently removes your account and everything tied to it. You will be signed out immediately. This cannot be undone.

You can also revoke a share link from that basket's page, or leave a collaboration from the basket that was shared with you.

What we delete. Your account, profile, sign-in links, baskets, items in those baskets, decisions, comments, shared cart pages and their reactions/favourites/reports, collaboration memberships, bug reports, saved contacts, cover and thumbnail images uploaded for your baskets, device backups, and the product-usage events recorded from devices you signed in on.

What may be retained in anonymised form. A few operational records keep a reference to the action but have your user id removed: remix history (so a remixed basket still links back to the original), public-cart collection membership, and conflict logs we use to catch double-claims. None of these retain your email, your display name, or your user id after account deletion.

Shared "capture" thumbnails. Thumbnails are stored by the SHA-1 of the image bytes — identical images uploaded from any device share one stored copy. We don't delete those bytes when an individual account is deleted because the same bytes may belong to other users. They contain no account-identifying metadata.

Questions, concerns, or a data request the buttons above don't cover? Use Profile → Settings → Report a bug, or write to hello@drsrdresser.com.