This Privacy Policy explains what information Tesori collects, how it is used, and the choices you have. Tesori is built with your privacy in mind: we do not sell your data, we do not run advertising networks, and we do not embed third-party analytics SDKs in the app. The personal information we collect is the minimum needed to provide the service.
1. Information We Collect
We collect information you provide directly, information generated as you use the app, and limited technical data necessary to operate the service.
| Category | What we collect | Why |
|---|---|---|
| Account information | Email address, username, display name, optional bio, optional avatar photo | To create and manage your account; to let other users find and follow you |
| User-generated content | Hero photos you take or upload, numeric product ratings, collection names and descriptions | To build and display your personal archive and collections |
| Scan and save history | Barcodes scanned and products saved to your archive | To populate your archive and power discovery features |
| Social graph | Accounts you follow and accounts that follow you | To enable the social and discovery features of the app |
| Subscription data | Your subscription status (active, expired, plan type); no payment card details are ever stored by Tesori | To enforce free-tier limits and unlock Premium features; payment is handled entirely by Apple |
| Usage data | Standard server-side analytics (request logs, error logs) generated by our backend infrastructure | To monitor app health and diagnose problems |
2. How We Use Your Information
We use the information we collect to:
- Create and secure your account
- Display your archive, collections, and profile to you (and to others, if your profile is public)
- Power social features: following, follower lists, public profile pages, shared collections
- Generate discovery content — trending and highly-rated products are surfaced from aggregated, non-identified activity across all users
- Verify your subscription status and enforce tier limits
- Diagnose technical issues and improve the app
- Communicate with you about material changes to the service (via email when necessary)
We do not use your information to serve advertisements. We do not create advertising profiles.
3. How Your Information Is Stored
Tesori's backend is built on Supabase, a cloud infrastructure platform. Your account data, archive contents, photos, and social graph are stored in Supabase databases and file storage hosted on cloud infrastructure in the United States. Supabase implements industry-standard security controls including encryption at rest and in transit.
Photos you upload are stored in Supabase's file storage (object storage) and served over HTTPS. We do not store originals anywhere else.
Barcode lookups are performed server-side using a third-party product database (go-upc). When you scan a barcode, the barcode number is sent from our server to go-upc to retrieve product details; it is not sent from your device directly to go-upc.
4. Third-Party Services
Tesori uses the following third-party services. We share only the minimum information needed for each service to function.
- Supabase — database, authentication, and file storage. Your account data and content live here. Supabase's privacy practices are described at supabase.com/privacy.
- Apple App Store / StoreKit — subscription purchase and management. All payment processing occurs through Apple. Tesori receives only a receipt or entitlement confirmation, never your payment card information. Apple's privacy policy applies to all App Store transactions.
- go-upc — product lookup by barcode, called server-side only. We send a barcode string and receive product metadata; no personally identifiable information is shared with go-upc.
We do not use advertising networks, marketing platforms, or analytics SDKs embedded in the app.
5. Data Retention
We retain your data for as long as your account is active.
Subscription transaction records are governed by Apple's data retention policies and are not under our direct control.
6. Your Rights and Choices
You have meaningful control over your data:
- Access: Your archive, collections, ratings, and profile are always visible to you within the app.
- Correction: You can update your display name, bio, avatar, and username at any time in Settings.
- Privacy visibility: You can switch your profile between public and private at any time. A private profile hides your collections and activity from non-followers.
For privacy-related requests — including requests to access, correct, or delete your personal data — email us at tesoriapp@gmail.com.
7. Children's Privacy
Tesori is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has created an account, please contact us and we will delete the account and associated data promptly.
8. Data Security
We take reasonable technical measures to protect your information, including HTTPS encryption for all data in transit and encryption at rest for stored data. No system is perfectly secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to keep your Apple ID credentials secure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. For significant changes, we may also notify you within the app or by email. Continued use of Tesori after a policy update constitutes your acceptance of the revised terms.
10. Contact
If you have questions or requests relating to this Privacy Policy, email us at tesoriapp@gmail.com. We will respond within a reasonable time.