Privacy Policy
Last Updated: ${LEGAL_LAST_UPDATED}
Version: ${LEGAL_VERSION}
At WORTHEK ("Company," "we," "us," or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the WORTHEK mobile application, website, and related services (collectively, the "Service").
This Privacy Policy is incorporated into and subject to our Terms of Service. By using the Service, you consent to the practices described in this Privacy Policy.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
• Account Information: username, email address, encrypted password
• Profile Information: display preferences, notification settings
• Item Data: photographs, descriptions, serial numbers, purchase details, warranty information, notes, pricing, and location categories
• Communication Data: messages sent through sharing features, support requests
• Payment Information: subscription and credit purchase details (processed by third-party payment providers; we do not store full payment card details)
1.2 Information Collected Automatically
• Device Information: device model, operating system version, unique device identifiers, screen resolution, language preferences
• Usage Data: features accessed, actions performed, timestamps, session duration, credit consumption patterns
• Log Data: IP address, browser type, referring/exit pages, error logs, crash reports
• Camera and Photo Data: when you use the camera feature, images are captured and processed; images are stored securely in cloud storage
1.3 Information from Third-Party Services
• AI Processing Services: We send images and item data to third-party AI services (such as OpenAI and Google Cloud Vision) for object recognition and analysis. These services process data according to their own privacy policies.
• Analytics Services: We may use third-party analytics to understand Service usage patterns.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. HOW WE USE YOUR INFORMATION
2.1 Service Delivery
• Providing and maintaining the Service
• Processing AI-powered item recognition and analysis
• Managing your inventory data and item records
• Facilitating item sharing between users
• Processing subscriptions and credit transactions
2.2 Service Improvement
• Analyzing usage patterns to improve features
• Debugging and resolving technical issues
• Developing new features and functionality
• Conducting research and analysis (using anonymized data)
2.3 Communication
• Sending service notifications and updates
• Responding to your inquiries and support requests
• Delivering important account-related notices
• Providing security alerts
2.4 Safety and Legal
• Detecting and preventing fraud, abuse, or security threats
• Enforcing our Terms of Service
• Complying with legal obligations
• Protecting the rights and safety of our users
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. DATA SHARING AND DISCLOSURE
3.1 We Do Not Sell Your Personal Data. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
3.2 Service Providers. We share data with trusted third-party service providers who assist in operating the Service, including:
• Cloud infrastructure and storage providers
• AI and machine learning services for item recognition
• Payment processing services
• Analytics and monitoring services
• Email and notification services
3.3 User-Directed Sharing. When you share items with other users, the shared item data (images, descriptions, details) is accessible to those users according to the permissions you grant.
3.4 Legal Requirements. We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to:
• Comply with applicable law or legal process
• Protect the safety of any person
• Address fraud, security, or technical issues
• Protect our rights, property, or safety
3.5 Business Transfers. In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. DATA STORAGE AND SECURITY
4.1 Storage. Your data is stored on secure cloud servers. Images and files are stored using encrypted cloud storage services. Database records are stored in encrypted, access-controlled databases.
4.2 Security Measures. We implement industry-standard security measures including:
• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt with high iteration counts)
• Optional two-factor authentication (TOTP)
• JWT-based authentication with token blacklisting
• Regular security assessments and monitoring
• Access controls and least-privilege principles
4.3 Data Breach Response. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law within 72 hours of becoming aware of the breach.
4.4 No Guarantee. While we implement robust security measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. DATA RETENTION
5.1 Active Accounts. We retain your data for as long as your account remains active and as needed to provide you with the Service.
5.2 Account Deletion. When you delete your account, we will delete or anonymize your personal data within 30 days, except:
• Data required for legal compliance or legitimate business interests
• Anonymized or aggregated data that cannot be re-identified
• Backup copies, which are purged according to our backup rotation schedule (typically within 90 days)
5.3 Shared Data. Data you have shared with other users may persist in their accounts even after you delete your account.
5.4 Legal Hold. We may retain data for longer periods if required by law, regulation, or legal proceedings.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6. YOUR RIGHTS AND CHOICES
6.1 Access and Portability. You have the right to access and receive a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
6.2 Correction. You can update or correct your account information at any time through the Service settings.
6.3 Deletion. You have the right to request deletion of your personal data. You can delete your account through the Service, which will trigger deletion of your associated data.
6.4 Restriction and Objection. You may request that we restrict or stop processing your personal data in certain circumstances.
6.5 Withdraw Consent. Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
6.6 Exercising Rights. To exercise these rights, contact us through the Service or use the account management features. We will respond to requests within 30 days.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7. AI AND AUTOMATED PROCESSING
7.1 AI Features. The Service uses AI and machine learning to:
• Identify and categorize items from photographs
• Suggest item details (make, model, category)
• Detect multiple objects in a single image
• Generate item descriptions and notes
7.2 Third-Party AI. Images and related data may be sent to third-party AI providers (such as OpenAI GPT-4o and Google Cloud Vision API) for processing. These providers:
• Process data in accordance with their own privacy policies and data processing agreements
• Are contractually bound to use data only for providing the requested services
• Do not use your data to train their general-purpose models under our API agreements
7.3 Human Review. AI-generated results may occasionally be reviewed by our team for quality assurance and improvement purposes. Such reviews use anonymized data whenever possible.
7.4 Opt-Out. While AI features are central to the Service, you can choose not to use AI-powered features and manually enter item information instead.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
8. CHILDREN'S PRIVACY
8.1 The Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16.
8.2 If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.
8.3 If you believe a child under 16 has provided us with personal information, please contact us immediately.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
9. INTERNATIONAL DATA TRANSFERS
9.1 Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located.
9.2 When we transfer data internationally, we implement appropriate safeguards, including standard contractual clauses approved by relevant authorities.
9.3 By using the Service, you consent to the transfer of your data to jurisdictions that may have different data protection laws than your home jurisdiction.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
10. REGION-SPECIFIC PROVISIONS
10.1 European Economic Area (EEA) and United Kingdom
• Legal bases for processing: contract performance, legitimate interests, consent, and legal obligations
• You have rights under GDPR including access, rectification, erasure, restriction, portability, and objection
• You may file a complaint with your local supervisory authority
10.2 California (CCPA/CPRA)
• You have the right to know, delete, and opt-out of the sale of personal information
• We do not sell personal information as defined under the CCPA
• You may designate an authorized agent to make requests on your behalf
• We will not discriminate against you for exercising your privacy rights
10.3 Other Jurisdictions. We comply with applicable data protection laws in all jurisdictions where the Service is available.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
11. COOKIES AND TRACKING TECHNOLOGIES
11.1 We use essential cookies and local storage for authentication and session management.
11.2 We may use analytics tools to understand how users interact with the Service.
11.3 You can manage cookie preferences through your browser or device settings, though some features may not function properly without essential cookies.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
12. CHANGES TO THIS PRIVACY POLICY
12.1 We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy in the Service and, where appropriate, via email notification.
12.2 Your continued use of the Service after changes indicates your acceptance of the updated Privacy Policy.
12.3 We encourage you to review this Privacy Policy periodically for any updates.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
13. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the Service application or at the contact information provided within the application.
For data protection inquiries in the EEA, you may also contact our Data Protection Officer through the Service.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
By using WORTHEK, you acknowledge that you have read, understood, and agree to this Privacy Policy.
© 2026 WORTHEK. All rights reserved.
WORTHEK