Privacy Policy

Nirova Labs ("we", "us", "our") makes Worthy, a mobile app, and runs the website nirovalabs.com. This policy explains what information we collect through both, how we use and share it, and the choices you have. Worthy has not been released yet. Some features described here are still being built, and for those we describe how they will work once they are available.

1. Our website

Our website has no accounts, forms or comments.

• Request data. Cloudflare delivers our site. To serve and protect it, Cloudflare processes standard request information such as your IP address, your browser type, the page you asked for and the time.
• Email. If you write to hello@nirovalabs.com, we receive your address, your message and any attachments. Our email providers process the message to deliver it, and we use it only to reply to you.

2. Information we collect in Worthy

• Account. When you start onboarding, Worthy creates an anonymous account through Firebase Authentication, identified by a random account ID. If you sign in with Google, we receive your name, email address, profile photo link and Google account ID. Once Sign in with Apple is available, we will receive the name and email address you choose to share, which may be a private relay address.

• Onboarding answers. How often you miss out on good finds, the kind of items you usually look for, your gender, your age range and whether you want notifications. You can choose not to disclose your gender.

• Usage and device data. Google Analytics for Firebase records events, such as the onboarding steps you complete. It also collects an app instance ID, your device model, operating system version, approximate country based on your IP address, and session information. Your onboarding answers are attached to this data, and we may link it to your account ID. If you sign in, we may combine your onboarding answers with your email address in internal reports. Worthy does not collect your device's advertising identifier.

• Photos. Worthy uses your camera, or a photo you pick, to identify an item. When you pick a photo, the app gets only that photo. The current version of the app does not upload photos. Once photo identification is available, each scan photo will be uploaded to our cloud storage, sent to an image recognition service to identify the item, and kept with your account so you can go back to your scans. The in-app setting for saving scan images affects only the copy on your phone.

• Scans and saved finds. The items you scan, their results (the identified item, estimated resale value, fees and profit), the finds you save and any costs you enter. To produce an estimate, we may send a text description of the item, such as its name, to service providers that help us calculate it.

• Feedback and support. Ratings, comments and support messages, linked to your account ID. For support requests, we also receive details about your device.

• Notifications. If you allow notifications, we may store a push token, an installation ID, your device model, your operating system and app version, your language and your time zone so we can deliver them.

• Subscriptions. If you subscribe, Apple processes the payment and we never see your card details. We share your account ID with a subscription management service. That service gets your purchase records from Apple, such as your plan, purchase dates and renewal status, and keeps them for us.

• Service logs. Our servers record request timing, errors and an account identifier. These logs never contain photos.

3. How we use information

• To create and maintain your account and recognize you when you sign in.
• To identify items, show estimates and keep your scans and saved finds.
• To send notifications you have agreed to receive.
• To understand how people use Worthy, fix problems and improve the app.
• To respond to your messages and feedback.
• To protect our services and users from fraud, abuse and security threats.
• To meet legal obligations.

We do not sell your personal information. We do not use it, or your photos, for advertising.

4. How we share information

• Service providers that run parts of our service for us. Each one receives only what it needs: Google, for Firebase, Google Cloud and image recognition; Apple, for sign-in, notifications and payments; Cloudflare; our email providers; a subscription management service; and providers that help us calculate estimates.
• Legal reasons, when the law requires disclosure, or when it is needed to protect the rights, property or safety of our users, the public or Nirova Labs.
• Business transfers, if Worthy or our business is sold, merged or transferred. The new owner must protect the information as this policy describes.
• With your consent or at your direction.

5. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, these are our legal bases for processing your information:

• Contract: to provide the app you ask for.
• Legitimate interests: to understand who uses Worthy and how, including through your onboarding answers; to improve and secure the app; and to answer your messages.
• Consent: for notifications, and for your gender answer, which you can decline by choosing "Prefer not to say". You can withdraw consent at any time.
• Legal obligation: where the law requires it.

6. How long we keep information

• Account data, onboarding answers, scans, saved finds and photos: while your account exists, and afterwards as described in section 7. When you delete a scan or saved find in the app, it disappears from Worthy, but we keep it, including its photos, until you delete your account.
• Records of identification and estimate requests: up to 180 days.
• Service logs: up to 400 days.
• Analytics data, including copies we export for our own reports: up to 14 months.
• Subscription records: purchase events for up to 90 days. Your plan and purchase history are kept until you delete your account.
• Emails: as long as we need to answer them, or less if you ask us to delete them.

After that, we delete the information or keep it only in a combined form that does not identify you.

7. Deleting your account

You can delete your Worthy account in the app. Right now, this removes only your sign-in. Your onboarding answers and feedback stay stored under a random account ID, and your analytics data stays with Google until it expires (see section 6).

If you signed in with Google and want your onboarding answers and feedback deleted too, email hello@nirovalabs.com from that Google address before you delete your account.

Before Worthy is released, we intend to make in-app deletion do more:

• Remove your account record, onboarding answers, feedback, notification tokens, scans, saved finds, photos and subscription records.
• Remove Worthy's access to your Apple or Google sign-in.
• Ask Google to delete your analytics data.

Service logs and records of identification and estimate requests are deleted on the schedule in section 6. We also keep a record of each App Store purchase, with your account removed from it: the Apple transaction ID, the product and how much of it was used. This stops the same purchase from being applied twice if it is restored to another account.

Deleting your account does not cancel an Apple subscription. To cancel one, go to your Apple Account settings.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access, correct or delete your personal information.
• Receive a copy of it.
• Object to or restrict some processing.
• Withdraw your consent.

If you live in California, you can also ask what we collect and how we use it, and we will not treat you differently for asking. We do not sell personal information or share it for cross-context behavioral advertising.

To make a request, email hello@nirovalabs.com. We may ask for information to confirm the request comes from you, and we will respond within 30 days. You can also complain to your local data protection authority.

You can turn off notifications and camera access for Worthy in your phone's settings. Worthy does not ask for access to your photo library. When you pick a photo, iOS gives the app only that photo.

9. International transfers

Worthy's database and photo storage are in the United States. We and some of our providers may access or process information in other countries, where data protection laws may differ from yours. Where the law requires it, we rely on safeguards such as the Standard Contractual Clauses in our providers' data processing terms.

10. Security

We rely on the protections our providers offer, including encryption in transit and at rest. We also limit access to personal information to what is needed to run our services. No system is completely secure.

11. Cookies and tracking

Our website does not use advertising or analytics cookies. Cloudflare may set a cookie it needs to filter out automated traffic. We do not track visitors across websites, so every visit is treated the same whether or not your browser sends a Do Not Track signal. Worthy does not track you across apps and websites that belong to other companies.

12. Children

Worthy is meant for adults 18 and older, and our website is not aimed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

13. Changes to this policy

We may update this policy as our services change, and we will change the date at the top when we do. If a change significantly affects how we handle your information, we will tell you in the app or on our website before it takes effect.

14. Contact us

For questions about this policy or to make a privacy request, email hello@nirovalabs.com.

Nirova Labs
nirovalabs.com