Privacy Policy

Updated August 20th, 2026

This Privacy Policy explains how Say Adios LLC, doing business as Zozy (“Zozy,” “we,” “us,” “our”) collects, uses, discloses, and safeguards information when you use our websites, mobile applications (iOS and Android), and related services that link to this Policy (collectively, the “Services”).

By using the Services, you agree to this Policy. This Policy is incorporated into our Terms of Use.

Company and Contact

Say Adios LLC (d/b/a Zozy) 2209 South First Street, Austin TX 78704, USA support@zozy.app

1. Notice at Collection

2. Information We Collect

3. Sources of Information

4. How We Use Information

5. Sharing & Disclosures

6. Cookies, Analytics & Tracking (Website)

7. AI, Reverse-Image Search & Model Improvement

8. Your Choices & Controls

9. Data Retention

10. Your Privacy Rights (U.S. State Laws)

11. International Users (GDPR/EEA/UK)

12. Security

13. Children’s Privacy

14. Changes to This Policy

15. Contact Us

1) Notice at Collection

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular person or device (“Personal Information”). The categories of Personal Information we collect, why we collect it, whether it is “sold” or “shared” for cross-context behavioral advertising, and our retention approach are summarized below and described in more detail throughout this Policy.

Categories we collect

• Identifiers: name, email address, account IDs, and — if you choose to add a property — the street address of that property

• User Content / Item Data: photos you capture or upload, the items you evaluate, item details, asking prices and other values you enter, your decisions (bought, wishlisted, passed) and decision history, and any serial numbers, receipts, warranty documents, or notes you choose to add

• Transaction & Subscription Data: plan tier, subscription status and expiration, and App Store transaction identifiers and receipt data (payment card details are processed by Apple; we never see or store card numbers)

• Usage & Device Data: app/website interactions, IP address, device identifiers, browser/app version, timestamps, crash and error logs

• Approximate Location: general location inferred from IP address. We do not request or collect precise device location (GPS), and the app does not ask for location permission.

• Communications: messages you send to us (support requests, feedback, and messages you send through the in-app Chat)

Purposes

• Provide the Services (helping you evaluate purchases, identifying items, generating value estimates and comparable listings, and tracking your decisions and inventory)

• Customer support

• Security and fraud prevention

• Metering free-plan usage and administering subscriptions

• Analytics and product improvement

• Marketing communications (if you opt in or subscribe; you can opt out anytime)

Selling / Sharing

We do not sell Personal Information.

We do not share Personal Information for cross-context behavioral advertising in the sense used by certain state laws. If we add any, we will update this Policy and provide appropriate controls.

We disclose Personal Information to service providers who help us operate the Services, as identified in Section 5, and — only at your direction — to recipients you choose when you share a result.

Retention

We retain Personal Information as described in Data Retention below, generally for as long as your account is active and as needed for legitimate business and legal purposes.

2) Information We Collect

A. Information you provide to us

Account Information

• First and last name (optional)

• Email address (from your sign-in provider, or Apple’s private relay address if you use “Hide My Email”)

• Profile photo, if you choose to upload one

Property Information (optional)

If you choose to organize items by location, you can add one or more properties. We store the label and address you select, including street, city, state, and postal code. Addresses are chosen using Apple’s address search — see Section 5.

Item Information (User Content)

• Photos you capture or upload (items you are evaluating, and any receipts, warranties, or documentation you choose to attach)

• Item attributes you enter (brand, model, category, condition, age/purchase date, quantity, serial number)

• The asking prices and other values you enter (e.g., price paid), if you choose to provide them

• Your decisions for each item (bought, added to wishlist, or passed), your decision history, and the “money avoided” total recorded when you pass

• “Additional notes” you write about items

Camera and photos

With your permission, Zozy accesses your device camera so you can photograph items you are evaluating. These photos are sent to third-party providers for processing as described in Sections 5 and 7, and are stored with your account only if you choose to save the item.

Chat Messages

If you use the in-app Chat to message our team, we collect the message text you send and the time you sent it, together with your name, email address, and account ID so we know who we are talking to and can respond. Chat is text only; you cannot send photos or attachments through it. Chat messages are delivered to our team as described in Section 5.

B. Information we collect automatically

Usage & Device Information

• App interactions (screens viewed, features used, taps, swipes, and screen transitions), collected via PostHog analytics and session replay

• Device and browser information, operating system, app version

• IP address, timestamps, log data

• Crash reports, error and exception reports, and performance diagnostics

Usage metering

We record the number of AI Estimates you run so we can administer the free plan’s monthly allowance. This count is associated with your account and resets each calendar month.

Approximate Location

General location inferred from IP address (city/region) by our analytics provider. We do not request or collect precise GPS location, and the app does not ask for location permission. Adding a property address (Section 2A) is a manual entry you control, not a device-location reading.

C. Valuation-related information

Zozy generates valuation outputs (estimated value ranges, comparable listings, and a verdict on the asking price) using:

• The photo you capture and the item information you provide (category, condition, age, model/serial)

• Visually matching products and their current listed prices, returned by a third-party reverse-image search provider (Section 5)

• An asking price, which you may enter yourself or which may be read automatically from a price tag visible in your photo (Section 7)

• Internal logic

These outputs are primarily provided to you. If you input your own “price paid” or other values, that information is treated as Personal Information.

D. De-identified and aggregated data

We may create de-identified or aggregated data (e.g., “typical categories evaluated”) to understand product performance and improve the Services. We do not attempt to re-identify de-identified data except as permitted by law.

3) Sources of Information

We collect Personal Information from:

• You directly (when you sign up, evaluate or upload items, enter item details, add a property, contact support, or message us through the in-app Chat)

• Your selected login provider, which handles authentication tokens; Apple private relay email addresses are supported

• Your devices automatically (usage analytics, logs, device data)

• Service providers who support our operations (hosting, AI processing, reverse-image search, analytics, chat delivery, email delivery, payments)

4) How We Use Information

We use Personal Information to:

Provide and operate the Services

• Create and manage accounts

• Identify items you photograph and generate value estimates, comparable listings, and verdicts

• Store and organize your items, properties, and decisions

Administer plans

• Meter the free plan’s monthly AI Estimate allowance

• Validate and maintain subscription entitlements

Support

• Respond to questions, troubleshoot issues, and provide customer support, including responding to messages you send through the in-app Chat

Improve and protect the Services

• Analyze performance and usage

• Debug, repair, and improve features

• Prevent fraud and abuse, enforce our Terms, and secure accounts

Communications

• Send operational messages (account verification, feature updates, support replies)

• Send marketing emails if you opt in (you can unsubscribe anytime)

Legal and compliance

• Comply with applicable laws, lawful requests, and legal processes

• Maintain records required for business, tax, accounting, and dispute resolution purposes

5) Sharing & Disclosures

A. Service providers

We use the following third-party services, which may process your data on our behalf. Three of them receive the photo you capture: OpenAI, Anthropic, and SerpApi. We ask for your agreement to this processing in the app before you take your first photo.

Supabase — Database hosting, authentication, and file storage (PostgreSQL, Auth, Storage). Your account, items, photos, and properties are stored here.

OpenAI (GPT-4o) — Item identification, description generation, and categorization. Your item photo and related item details are sent to OpenAI’s API. If a price tag, sticker, or shelf label is visible in your photo, OpenAI also reads the price from that photo so we can pre-fill the asking price. See openai.com/policies/privacy-policy.

Anthropic (Claude) — Item valuation. Your item photo, the details you provide (title, category, condition, and notes), and the market listings retrieved for the item are sent to Anthropic’s Claude API to generate a value estimate. As of our last review, Anthropic does not use API data to train its models, per its Commercial Terms of Service. See anthropic.com/legal/privacy.

SerpApi (Google Lens reverse-image search) — Comparable listings. Your item photo is uploaded to SerpApi, which runs a Google Lens reverse-image search and returns visually matching products with their current listed prices and merchants. This is how Zozy finds market prices for your item. We do not send your name, email, or account information to SerpApi. We do not control SerpApi’s or Google’s retention of images submitted for search. See serpapi.com/legal/privacy-policy and policies.google.com/privacy.

Slack — In-app Chat delivery. When you send a message through the in-app Chat, the message text, your name, email address, and account ID are transmitted to our Slack workspace via webhook and the Slack API, where our team reads and responds. Messages are stored in Slack on our behalf, with access limited to the Zozy team. Slack does not receive your item photos, item data, or authentication tokens. See slack.com/trust/privacy/privacy-policy.

Apple (Sign in with Apple) — Authentication. If you sign in with Apple, an identity token is exchanged with Apple’s authentication servers to verify your identity. If you use “Hide My Email,” we receive and store Apple’s relay email address. See apple.com/privacy.

Google (Google OAuth) — Authentication. If you sign in with Google, an identity token is exchanged with Google’s authentication servers to verify your identity. See policies.google.com/privacy.

Apple (Maps address search) — If you add a property, the address text you type is sent to Apple’s map services to return address suggestions. See apple.com/privacy.

Apple (App Store / StoreKit) — Subscription purchases are processed by Apple. We receive and store transaction identifiers, product and plan information, expiration dates, and receipt data to maintain your entitlement. We never receive your payment card details.

PostHog — Product analytics, session replay, and error tracking. We use PostHog to understand how people use the app and to improve the Services. PostHog collects the following on our behalf:

• Session replay: PostHog records video-like replays of in-app interactions (taps, swipes, screen transitions). Item photos and other images, and any text you type, are automatically masked by PostHog before recording, so we do not see your photos or typed content through session replay.

• Auto-tracked interactions: taps, swipes, and screen changes are captured automatically.

• App lifecycle events: when the app is opened, backgrounded, or returned to.

• Errors and crashes: crash, exception, and performance diagnostics.

• Specific product events: including onboarding steps completed, photos taken, AI identification and estimate results (category, condition, price range, processing time), item actions (saves, edits, deletes), paywall views, subscription events (purchase started, completed, failed, restored), and sharing actions.

• Identity linking: when you sign in, your PostHog event history is associated with your Zozy account. When you sign out, the next session starts fresh and unlinked.

• Device and session metadata: device type, OS version, app version, IP address, and timestamps.

PostHog does not receive your item photos, descriptions, notes, or account credentials through its analytics pipeline. See posthog.com/privacy.

These service providers are authorized to use Personal Information only as needed to provide services to us, under contractual protections.

B. Sharing at your direction

Sharing a result: If you choose to share an item’s result with someone, the item details and image you select are transmitted to the recipient through the channel you choose (for example, Messages, email, or a social app), which is outside Zozy’s control.

Zozy does not list, sell, or send your items to any third party automatically.

C. Legal, safety, and business transfers

We may disclose information:

• To comply with law or valid legal process

• To protect rights, safety, and security of Zozy, users, or the public

• In connection with a merger, acquisition, financing, or sale of assets (subject to appropriate protections)

6) Cookies, Analytics & Tracking (Website)

Our website may use cookies and similar technologies to operate and understand website performance. You can control cookies in your browser settings, and where applicable, via a cookie preference tool.

We do not track you across other companies’ apps or websites, and the Zozy app does not use advertising identifiers.

If we implement advertising pixels or cross-context behavioral advertising on the website in the future, we will provide appropriate notice and choices and update this Policy.

7) AI, Reverse-Image Search & Model Improvement

Zozy uses automation, AI, and reverse-image search to power features such as item identification, categorization, valuation estimates, and verdicts.

Consent

Before you take your first photo, the app tells you that your photos will be sent to third-party AI and image-search providers and asks you to agree. If you do not agree to this processing, the Services cannot identify items or produce estimates.

What is sent where

SerpApi / Google Lens (reverse-image search)

• Your item photo is uploaded to SerpApi, which runs a Google Lens search and returns visually matching products, their current listed prices, and the merchants offering them

• This is the source of the market prices Zozy shows you

• We do not control SerpApi’s or Google’s data handling; please review their privacy policies

OpenAI GPT-4o Processing

• Your item photo and related item details are sent to OpenAI’s GPT-4o API for item identification, description generation, and categorization

• If a price tag or shelf label is visible in your photo, OpenAI also transcribes the price from the photo. This reading happens at OpenAI, not on your device. You can always correct or replace the price.

• OpenAI processes data according to their API data usage policy

• As of our last review, OpenAI does not use data submitted via their API for model training, per their API terms

• We do not control OpenAI’s data handling; please review their privacy policy

Anthropic Claude Processing

• Your item photo, the details you provide (title, category, condition, and notes), and the market listings retrieved for the item are sent to Anthropic’s Claude API to generate a value estimate

• As of our last review, Anthropic does not use API data to train its models, per its Commercial Terms of Service

• We do not control Anthropic’s data handling; please review their privacy policy

Data Minimization

• We send only what each provider needs: your item photo and item details to OpenAI and Anthropic for identification and estimates, and your item photo to SerpApi for the image search

• We do not send your name, email, or account information to these AI and image-search providers

• Authentication tokens are not shared with these providers

• Your in-app Chat messages are not sent to any AI or image-search provider; they go only to our team via Slack, as described in Section 5

Training on user content

Default position: We do not use your private content (photos, receipts, warranties, notes) to train generalized AI models unless you opt in (for example, via an in-app setting or explicit consent flow). If you opt in, we may use your content to help improve valuation accuracy, categorization, and related functionality. We will describe the opt-in scope and provide a way to withdraw consent.

De-identified/aggregated learning: We may use de-identified and aggregated information (e.g., statistical patterns across categories) to improve the Services without identifying you.

Automated outputs are estimates

Item identification, price readings, estimates, and verdicts are automated and may be wrong. They are decision-support outputs, not appraisals. See our Terms of Use for the full disclaimer.

8) Your Choices & Controls

You may:

• Access and update your account and item information in the app

• Delete individual items, properties, or uploaded attachments

• Delete your account at any time from within the app (Account → Delete Account), subject to the retention notes below

• Opt out of marketing emails via the unsubscribe link

• Request access to, correction of, or a portable copy of your information by emailing support@zozy.app

Zozy does not currently offer a self-serve data export. You can request a copy of the personal data we maintain about you at support@zozy.app, and we will provide it as required by applicable law.

9) Data Retention

We retain Personal Information for as long as necessary to:

• Provide the Services (typically for as long as your account remains active)

• Maintain security and prevent abuse

• Comply with legal obligations

• Resolve disputes and enforce agreements

If you delete your account, we will delete or de-identify Personal Information consistent with our operational and legal requirements. Some data may persist for limited periods in backup systems; we will protect it and delete it when feasible.

Deleting your Zozy account does not delete copies of a photo that a third-party provider may hold as a result of processing it. Those providers’ retention is governed by their own policies, linked in Section 5.

Chat messages you send to our team are stored in our Slack workspace and retained for as long as needed to provide support and keep a record of our communications with you. If you delete your account or submit a verified deletion request, we delete your chat messages from Slack, subject to the legal exceptions described in this Policy.

Storage Location

• Database: Supabase (PostgreSQL), cloud hosted

• Images: Supabase Storage, private bucket, access-controlled

• Chat messages: Slack workspace, access limited to the Zozy team

• Backups: Managed by Supabase with their standard retention policies

10) Your Privacy Rights (U.S. State Laws)

Depending on where you live, you may have rights to:

• Know the categories and specific pieces of Personal Information we collected

• Access/port your information

• Correct inaccurate information

• Delete information (subject to legal exceptions)

• Opt out of certain processing in some states (where applicable)

• Not be discriminated against for exercising your rights

How to exercise rights: Email support@zozy.app with subject “Privacy Request.” We will verify your request (which may include confirming control of the account). Authorized agents may submit requests where permitted by law (we may require proof of authorization).

Selling/sharing: We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising as defined by certain state laws.

Additional Notice for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) provides you with specific rights regarding your Personal Information. Zozy does not sell or share Personal Information as those terms are defined under California law. We also do not use or disclose sensitive personal information for purposes beyond providing the Services and as otherwise permitted by law. California residents may exercise their rights to know, access, correct, or delete Personal Information by contacting us at support@zozy.app. We will not discriminate against you for exercising your privacy rights.

11) International Users (GDPR / EEA / UK)

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. Our AI, image-search, hosting, chat, and analytics providers are located in the United States, so using the photo and Chat features involves a transfer of your information to the United States.

Legal bases (where GDPR applies)

• Contract necessity (to provide the Services you request)

• Legitimate interests (security, product improvement, analytics)

• Consent (marketing communications; optional AI training on user content; optional cookies where required)

• Legal obligation (compliance and recordkeeping)

Cross-border transfers

Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses.

GDPR rights

Where applicable, you may have rights to access, correct, delete, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.

12) Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no system can be guaranteed 100% secure.

Security Measures

• Credentials are handled by your sign-in provider; we do not store passwords

• API communications use HTTPS/TLS encryption

• Row-level security (RLS) policies ensure users only access their own data

• JWT token-based authentication

• Private storage buckets with access controls

• Rate limiting to prevent abuse

13) Children’s Privacy

Zozy is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child has provided Personal Information, contact support@zozy.app and we will take appropriate steps to delete it.

14) Changes to This Policy

We may update this Policy from time to time. We will update the “Updated” date at the top. If changes are material — including adding a new third party that receives your photos or other Personal Information — we will provide additional notice where required.

15) Contact Us

For questions or requests regarding privacy, contact:

support@zozy.app

Say Adios LLC (d/b/a Zozy) 2209 South First Street, Austin TX 78704