Privacy Policy for GoShed

GoShed (“GoShed,” “we,” “our,” or “us”) is a service provided by ThriftShopper Inc. that helps people make everyday decisions by providing suggestions, reminders, and recommendations. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use the GoShed mobile app and related services (“Application” or “Service”).

By using GoShed, you agree to the practices described in this Privacy Policy.

1. Data We Collect and Why

We collect information that is necessary to operate, secure, and improve GoShed and to provide features like AI‑powered recommendations and subscriptions.

1.1 Information you provide

• Contact information such as your email address when you sign up or contact support.
• Preferences, lists, and product or item information you choose to enter into GoShed.
• Messages, notes, and other content you submit through the Application.
• Feedback, support requests, and other communications you send to us.

Why: To store your items, personalize recommendations, and provide core features (including AI‑generated suggestions).

1.2 Information collected automatically

When you use GoShed, we automatically collect certain technical and usage information, such as:

• Device information (device model, operating system, language, app version).
• Technical identifiers and network information (IP address, device identifiers, crash logs).

Why: To keep the app secure, diagnose issues, and ensure compatibility across devices.

• Usage data (features used, screens viewed, taps/clicks, session times, basic interaction events).
• Subscription and purchase status (for example, whether you are on the free tier, have purchased additional item slots, or have an active subscription).

Why: To understand how GoShed is used, improve performance and design, and fix bugs.

1.3 Location and place information

If you use features that involve locations or places, we may collect:

• Approximate or precise location information, depending on your device settings.
• Place‑related search queries and selected locations.

Why: To power location‑based and place‑based features, such as looking up nearby places or contextual suggestions.

You can disable location permissions at the device level, but some features may not work as intended if you do so.

1.4 Payment and subscription data

What: Payment details processed by our payment provider, purchase history, subscription status (free tier, per‑item unlocks, monthly or yearly plans).

Why: To process payments securely, manage entitlements (for example, number of items or plan type), and prevent fraud.

1.5 AI interaction data

What: Text you enter into AI‑powered features (such as lists, descriptions, or notes) and limited context about your usage.

Why: To generate suggestions and recommendations using third‑party AI models. We use this information only to provide and improve GoShed, operate our business, and comply with legal obligations—not to sell your personal data.

2. How We Use Your Information

We use the information described above to:

• Provide GoShed's core functionality, including storing your items, lists, and preferences.
• Generate and improve suggestions, reminders, and recommendations.
• Personalize your experience based on your activity and settings.
• Operate, maintain, and secure the Application and our backend infrastructure.
• Understand how GoShed is used and improve features, performance, and design.
• Communicate with you about updates, security alerts, changes to terms, and support responses.

We may use aggregated or de‑identified information (which does not reasonably identify you) for analytics, research, and business purposes.

3. AI and Automated Recommendations

Some GoShed features use artificial intelligence to generate suggestions and recommendations.

• We use third‑party AI model providers (such as Anthropic) to process certain content you provide (for example, item descriptions, lists, and notes) and to generate responses.
• When you use AI‑powered features, the text you submit and limited contextual information may be sent to these providers so they can generate suggestions.
• We take steps to limit the data we send and use contractual and technical measures designed to protect your privacy.
• We do not allow our AI providers to use this information for their own targeted advertising.

AI‑generated outputs may not always be accurate, current, or complete. You should use your own judgment and, where appropriate, verify information before relying on any suggestion.

4. Third‑Party Services We Use

We rely on trusted third‑party service providers to operate GoShed. These providers process limited personal data on our behalf and only as needed to deliver their services. They are not permitted to use your information for their own independent marketing purposes.

4.1 Authentication, storage, and infrastructure

We use a managed backend platform (including services such as Supabase) to provide: user authentication and account management; secure storage of your account data and the content you create in GoShed; and core application infrastructure. Your email address, authentication data, and stored content may be processed and stored by these providers so that we can operate GoShed reliably and securely.

4.2 Payments and subscriptions

For payments and subscriptions, we use specialized billing providers, including: payment processors such as Stripe to securely process payments; and subscription and entitlement management services such as RevenueCat to manage free tiers (for example, initial free items), pay‑per‑item unlocks, and subscription plans (such as monthly or yearly access). These services may process payment information, purchase history, and basic account identifiers as needed to complete transactions, manage your plan, prevent fraud, and comply with legal obligations.

4.3 Analytics and diagnostics

We use analytics and diagnostics tools, such as Google Analytics and similar services, to help us understand how GoShed is used and to identify issues. These services may collect: device and technical information (device type, OS, IP address, app version); usage information (screens viewed, actions taken, feature usage, session duration); and crash and performance data. We use this information to improve GoShed's reliability and user experience and do not use analytics data for cross‑app targeted advertising.

4.4 Maps, location, and place information

When you use features that involve location or places, we may use mapping and geolocation services such as Google Maps Platform (for example, Places API). These services may receive: approximate or precise location information, depending on your device settings; place‑related queries and selected locations; and technical identifiers necessary to return place data and operate the service. This data is used to power place lookups and location‑based features within GoShed.

4.5 AI model providers

As described above, we use AI model providers such as Anthropic to process some of the content you submit in order to generate suggestions and recommendations. These providers receive the text and limited context necessary to produce responses and act as our processors for this purpose.

5. Data Retention

We retain personal information for as long as necessary to provide GoShed, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account‑level information (such as email and preferences) is generally kept while your account is active and for a reasonable period thereafter.
• Usage and analytics data may be retained in aggregated or de‑identified form for a longer period where it cannot reasonably be linked back to you.
• If you request deletion of your account, we will delete or de‑identify personal information associated with your account, subject to data we may need to keep for legal, security, or legitimate business reasons.

6. Your Choices and Rights

Depending on your location, you may have certain rights regarding your personal data. Subject to applicable law, you may:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal information.
• Object to or restrict certain processing, or withdraw consent where processing is based on consent.

You can also: stop using GoShed and uninstall the app at any time to stop further data collection; and manage app‑level permissions (such as location and notifications) via your device settings.

To exercise your rights, contact us at support@thriftshopper.com. We may need to verify your identity before fulfilling certain requests.

7. Children's Privacy

GoShed is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it as soon as possible.

If you are a parent or guardian and believe that a child has provided us with personal information, please contact us at support@thriftshopper.com.

8. Security

We use reasonable technical, administrative, and physical safeguards designed to help protect your information from unauthorized access, loss, misuse, or alteration. These measures include secure cloud infrastructure and restricted access to personal data.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

If you access GoShed from outside the United States, your information may be transferred to and processed in the United States or other countries where we or our service providers operate. These locations may have data protection laws that are different from those in your country.

Where required by law, we implement appropriate safeguards to protect personal data transferred across borders.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. If we make material changes, we may provide additional notice, such as an in‑app notification or email.

Your continued use of GoShed after the updated Privacy Policy becomes effective means you accept the changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

ThriftShopper Inc. / GoShed

Email: support@thriftshopper.com