Privacy & your collection

What the app stores

Signing in creates or restores an account through Supabase. Depending on your sign-in method, the account includes an email address, an account identifier and profile details supplied by your sign-in provider. Google handles Google sign-in; the app does not ask for your Google password.

Your collection contains the artwork and frame details you choose to save, including photos, measurements, notes, favorites and planning projects. Sharing a household also involves its membership and invitation information.

Supabase provides authentication, collection storage and photo storage. Fly.io serves the website. These services process the requests needed to provide the app and may keep operational logs. The free beta does not request a payment card or use Stripe checkout.

A shared household, not a public gallery

Collection access is restricted to your household. A household has at most two accounts, and both members can view its shared artwork, frames and photos. Joining a household does not create a separate personal copy.

Invitations are tied to the intended account. Removing a member preserves the shared records while revoking their online access. It cannot recall photos, exports or screenshots that person already downloaded.

People operating the app and its hosting services may have administrative access needed for support and maintenance. Private collection content is not included in marketing reports.

What stays on your phone or browser

The browser stores sign-in information and preferences. Entry drafts and any offline collection copy you prepare are stored on that device. An offline copy can include photos and may be older than the live collection.

Signing out clears the app's private device copies and drafts. Downloaded backup files, exported images and screenshots are separate files; signing out does not remove them. On a shared device, sign out when you finish and keep downloaded files somewhere appropriate.

Browser storage can be cleared or evicted. Keep a separate backup of anything you want to preserve.

Keeping, exporting and removing records

Your saved collection remains in the service while you keep it. Trashed artwork and archived frames still exist until permanently deleted. An interrupted deletion may need a retry before both its record and photo are removed.

Household settings provide a records-and-photos backup. Keep every downloaded archive part together. Automatic restoration and self-service household/account deletion are not available in the current beta.

Removal from the live collection does not establish when every provider backup or operational log expires. Those retention settings and the public support process still need verification before open signup.

Campaign labels and usage reporting

Optional launch measurement is off by default. If you allow it in this tab, a launch link can store a small set of campaign labels for up to 24 hours, including across sign-in. Signing out or choosing “Keep measurement off” clears those labels. They contain no email, artwork, photo or visitor identifier. This tab's choice is separate from account reporting.

Marketing reporting is not active in this beta. The app does not currently send these campaign labels to a reporting service or record page views, demo use, signup, save, matching or return-use events for marketing.

These marketing measurements are separate from the authentication, collection storage and operational logs needed to run the app. No advertising pixels are installed.

Account reporting is a separate choice in household settings when that feature is available. Allowing launch measurement in this tab does not enable account reporting.

Questions about your information

Contact support@thriftr.pro, or prepare a support message. Include only the information needed to explain your request; do not send passwords or sign-in codes.

This page describes the current beta. Public signup, new measurement features and their privacy choices will be reviewed before they are enabled.