Privacy Policy

This Privacy Policy explains how Say Adios LLC, doing business as Zozy (“Zozy,” “we,” “us,” “our”) collects, uses, discloses, and safeguards information when you use our websites, mobile applications (iOS), and related services that link to this Policy (collectively, the “Services”).

By using the Services, you agree to this Policy. This Policy is incorporated into our Terms of Use.

Company and Contact

Say Adios LLC (d/b/a Zozy) 2209 South First Street, Austin TX 78704, USA support@zozy.app

Table of Contents

1. Notice at Collection

2. Information We Collect

3. Sources of Information

4. How We Use Information

5. Sharing & Disclosures

6. Cookies, Analytics & Tracking (Website)

7. AI, Reverse-Image Search & Model Improvement

8. Your Choices & Controls

9. Data Retention

10. Your Privacy Rights (U.S. State Laws)

11. International Users (GDPR/EEA/UK)

12. Security

13. Children’s Privacy

14. Changes to This Policy

15. Contact Us

1) Notice at Collection

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular person or device (“Personal Information”). The categories of Personal Information we collect, why we collect it, whether it is “sold” or “shared” for cross-context behavioral advertising, and our retention approach are summarized below and described in more detail throughout this Policy.

Categories we collect

• Identifiers: name, email address, account IDs, and — if you choose to add a property — the street address of that property

• User Content / Item Data: photos you capture or upload, the items you evaluate, item details, asking prices and other values you enter, your decisions (bought, wishlisted, passed) and decision history, and any serial numbers, receipts, warranty documents, or notes you choose to add

• Transaction & Subscription Data: plan tier, subscription status and expiration, and App Store transaction identifiers and receipt data (payment card details are processed by Apple; we never see or store card numbers)

• Usage & Device Data: app/website interactions, IP address, device identifiers, browser/app version, timestamps, crash and error logs

• Approximate Location: general location inferred from IP address. We do not request or collect precise device location (GPS), and the app does not ask for location permission.

• Communications: messages you send to us (support requests, feedback, and messages you send through the in-app Chat)

Purposes

• Provide the Services (helping you evaluate purchases, identifying items, generating value estimates and comparable listings, and tracking your decisions and inventory)

• Customer support

• Security and fraud prevention

• Metering free-plan usage and administering subscriptions

• Analytics and product improvement

• Marketing communications (if you opt in or subscribe; you can opt out anytime)

Selling / Sharing

We do not sell Personal Information.

We do not share Personal Information for cross-context behavioral advertising in the sense used by certain state laws. If we add any, we will update this Policy and provide appropriate controls.

We disclose Personal Information to service providers who help us operate the Services, as identified in Section 5, and — only at your direction — to recipients you choose when you share a result.

Retention

We retain Personal Information as described in Data Retention below, generally for as long as your account is active and as needed for legitimate business and legal purposes.

2) Information We Collect

A. Information you provide to us

Account Information

• First and last name (optional)

• Email address (from your sign-in provider, or Apple’s private relay address if you use “Hide My Email”)

• Profile photo, if you choose to upload one

Property Information (optional)

If you choose to organize items by location, you can add one or more properties. We store the label and address you select, including street, city, state, and postal code. Addresses are chosen using Apple’s address search — see Section 5.

Item Information (User Content)

• Photos you capture or upload (items you are evaluating, and any receipts, warranties, or documentation you choose to attach)

• Item attributes you enter (brand, model, category, condition, age/purchase date, quantity, serial number)

• The asking prices and other values you enter (e.g., price paid), if you choose to provide them

• Your decisions for each item (bought, added to wishlist, or passed), your decision history, and the “money avoided” total recorded when you pass

• “Additional notes” you write about items

Camera and photos

With your permission, Zozy accesses your device camera so you can photograph items you are evaluating. These photos are sent to third-party providers for processing as described in Sections 5 and 7, and are stored with your account only if you choose to save the item.

Chat Messages

If you use the in-app Chat to message our team, we collect the message text you send and the time you sent it, together with your name, email address, and account ID so we know who we are talking to and can respond. Chat is text only; you cannot send photos or attachments through it. Chat messages are delivered to our team as described in Section 5.

Push Notifications

If you allow notifications, we store a push token for your device, which Apple service it uses, and when it was registered. We use it to tell you when a support reply arrives, when a scan you took has finished, and when your Watchlist finds new listings. Notifications are delivered through Apple Push Notification service. You can turn them off at any time in iOS Settings, and signing out removes the token from our systems.

Watchlist

If you add an item to your Watchlist, Zozy checks for new listings of it about once a week until you stop watching it. Each check re-sends the item’s stored photo to SerpApi (Google Lens) and sends a short search phrase describing the item (never your name, email, or account) to Anthropic, whose Claude model searches the web. We keep a record of each check and the listings it found so we can show you what is new. You can stop these checks at any time by removing the item from your Watchlist.

Feedback on Estimates

If you rate an estimate as accurate or inaccurate, we store your rating, the item it was about, and any reason you type. If you correct an item’s details and ask Zozy to search again, the text you enter is sent to Anthropic along with the item photo to re-identify the item.

B. Information we collect automatically

Usage & Device Information

• App interactions (screens viewed, features used, taps, swipes, and screen transitions), collected via PostHog analytics and session replay

• Device and browser information, operating system, app version

• IP address, timestamps, log data

• Crash reports, error and exception reports, and performance diagnostics

Usage metering

We record the number of AI Estimates you run so we can administer the free plan’s monthly allowance. This count is associated with your account and resets each calendar month.

Approximate Location

General location inferred from IP address (city/region) by our analytics provider. We do not request or collect precise GPS location, and the app does not ask for location permission. Adding a property address (Section 2A) is a manual entry you control, not a device-location reading.

App Store Region

We read your App Store storefront country (not your location) so we can tell whether a price tag showing a bare “$” is in Canadian dollars. Currency exchange rates come from a public rates service; no information about you is sent to it.

C. Valuation-related information

Zozy generates valuation outputs (estimated value ranges, comparable listings, and a verdict on the asking price) using:

• The photo you capture and the item information you provide (category, condition, age, model/serial)

• Visually matching products and their current listed prices, returned by a third-party reverse-image search provider (Section 5)

• An asking price, which you may enter yourself or which may be read automatically from a price tag visible in your photo (Section 7)

• Internal logic

These outputs are primarily provided to you. If you input your own “price paid” or other values, that information is treated as Personal Information.

D. De-identified and aggregated data

We may create de-identified or aggregated data (e.g., “typical categories evaluated”) to understand product performance and improve the Services. We do not attempt to re-identify de-identified data except as permitted by law.

3) Sources of Information

We collect Personal Information from:

• You directly (when you sign up, evaluate or upload items, enter item details, add a property, contact support, or message us through the in-app Chat)

• Your selected login provider, which handles authentication tokens; Apple private relay email addresses are supported

• Your devices automatically (usage analytics, logs, device data)

• Service providers who support our operations (hosting, AI processing, reverse-image search, analytics, chat delivery, email delivery, payments)

4) How We Use Information

We use Personal Information to:

Provide and operate the Services

• Create and manage accounts

• Identify items you photograph and generate value estimates, comparable listings, and verdicts

• Store and organize your items, properties, and decisions

• Check items on your Watchlist for new listings and let you know when there are some

• Send the push notifications you have allowed

Administer plans

• Meter the free plan’s monthly AI Estimate allowance

• Validate and maintain subscription entitlements

Support

• Respond to questions, troubleshoot issues, and provide customer support, including responding to messages you send through the in-app Chat

Improve and protect the Services

• Analyze performance and usage

• Debug, repair, and improve features

• Prevent fraud and abuse, enforce our Terms, and secure accounts

Communications

• Send operational messages (account verification, feature updates, support replies)

• Send marketing emails if you opt in (you can unsubscribe anytime)

Legal and compliance

• Comply with applicable laws, lawful requests, and legal processes

• Maintain records required for business, tax, accounting, and dispute resolution purposes

5) Sharing & Disclosures

A. Service providers

We use the following third-party services, which may process your data on our behalf. Three of them receive the photo you capture: OpenAI, Anthropic, and SerpApi. We ask for your agreement to this processing in the app before you take your first photo.

Supabase — Database hosting, authentication, and file storage (PostgreSQL, Auth, Storage). Your account, items, photos, and properties are stored here.

OpenAI — Identification for multi-photo scans, and safety screening of Chat messages. When you scan several items at once, each photo and its related item details are sent to OpenAI’s API to identify and categorize the item and read any visible price tag. The text of each in-app Chat message you send is also checked by OpenAI’s moderation service to screen out hate speech, threats, and sexual content before it reaches our team; only the message text is sent, not your name, email, or photos. See openai.com/policies/privacy-policy.

Anthropic (Claude) — Item identification, price reading, and valuation. Your item photo, a photo of its price tag or label if you take one, any details or corrections you provide, and the market listings we find are sent to Anthropic’s Claude API to identify the item, read its price, and generate a value estimate. Claude also searches the web for places the item is currently sold; those searches use a description of the item, never your name, email, or account. As of our last review, Anthropic does not use API data to train its models, per its Commercial Terms of Service. See anthropic.com/legal/privacy.

SerpApi (Google Lens reverse-image search) — Comparable listings. Your item photo is uploaded to SerpApi, which runs a Google Lens reverse-image search and returns visually matching products with their current listed prices and merchants. This is how Zozy finds market prices for your item. We do not send your name, email, or account information to SerpApi. We do not control SerpApi’s or Google’s retention of images submitted for search. See serpapi.com/legal/privacy-policy and policies.google.com/privacy.

Slack — In-app Chat delivery. When you send a message through the in-app Chat, the message text, your name, email address, and account ID are transmitted to our Slack workspace via webhook and the Slack API, where our team reads and responds. Messages are stored in Slack on our behalf, with access limited to the Zozy team. When you rate an estimate as accurate or inaccurate, the item’s title, your rating, and any reason you type are also sent to our Slack workspace so our team can review estimate quality. Chat messages blocked by our automated screening are not delivered to Slack. Slack does not receive your item photos or authentication tokens. See slack.com/trust/privacy/privacy-policy.

Apple (Sign in with Apple) — Authentication. If you sign in with Apple, an identity token is exchanged with Apple’s authentication servers to verify your identity. If you use “Hide My Email,” we receive and store Apple’s relay email address. See apple.com/privacy.

Google (Google OAuth) — Authentication. If you sign in with Google, an identity token is exchanged with Google’s authentication servers to verify your identity. See policies.google.com/privacy.

Apple (Maps address search) — If you add a property, the address text you type is sent to Apple’s map services to return address suggestions. See apple.com/privacy.

Apple (App Store / StoreKit) — Subscription purchases are processed by Apple. We receive and store transaction identifiers, product and plan information, expiration dates, and receipt data to maintain your entitlement. We never receive your payment card details.

Apple (Push Notification service) — Delivers the notifications you allow. Apple receives your device’s push token and the content of each notification. See apple.com/privacy.

Google (Google Analytics for Firebase) — App usage analytics. Google Analytics collects app opens, screens viewed, in-app purchase and subscription events, an app-instance identifier, device type, operating system and app version, and approximate location derived from your IP address. We use the version of Google’s SDK without advertising features: it does not collect your device’s advertising identifier (IDFA), and we do not use it for advertising. See policies.google.com/privacy.

Vercel — Hosts the share pages you create at share.zozy.app (see “Sharing a result” below). See vercel.com/legal/privacy-policy.

PostHog — Product analytics, session replay, and error tracking. We use PostHog to understand how people use the app and to improve the Services. PostHog collects the following on our behalf:

• Session replay: PostHog records video-like replays of in-app interactions (taps, swipes, screen transitions). Item photos and other images, and any text you type, are automatically masked by PostHog before recording, so we do not see your photos or typed content through session replay.

• Auto-tracked interactions: taps, swipes, and screen changes are captured automatically.

• App lifecycle events: when the app is opened, backgrounded, or returned to.

• Errors and crashes: crash, exception, and performance diagnostics.

• Specific product events: including onboarding steps completed, photos taken, AI identification and estimate results (category, condition, price range, processing time), item actions (saves, edits, deletes), paywall views, subscription events (purchase started, completed, failed, restored), and sharing actions.

• Identity linking: when you sign in, your PostHog event history is associated with your Zozy account. When you sign out, the next session starts fresh and unlinked.

• Device and session metadata: device type, OS version, app version, IP address, and timestamps.

PostHog does not receive your item photos, descriptions, notes, or account credentials through its analytics pipeline. See posthog.com/privacy.

These service providers are authorized to use Personal Information only as needed to provide services to us, under contractual protections.

B. Sharing at your direction

Sharing a result: If you choose to share an item’s result, Zozy creates a web page for it at share.zozy.app with a hard-to-guess link, and you send that link through the channel you choose (for example, Messages, email, or a social app), which is outside Zozy’s control. The page shows your display name, the item’s photo and title, the asking price, Zozy’s estimate, note, and verdict, and the listings we found. Anyone who has the link can view the page, including people it is forwarded to. To have a page you shared removed, email support@zozy.app.

Zozy does not list, sell, or send your items to any third party automatically.

C. Legal, safety, and business transfers

We may disclose information:

• To comply with law or valid legal process

• To protect rights, safety, and security of Zozy, users, or the public

• In connection with a merger, acquisition, financing, or sale of assets (subject to appropriate protections)

6) Cookies, Analytics & Tracking (Website)

Our website may use cookies and similar technologies to operate and understand website performance. You can control cookies in your browser settings, and where applicable, via a cookie preference tool.

We do not track you across other companies’ apps or websites, and the Zozy app does not use advertising identifiers.

If we implement advertising pixels or cross-context behavioral advertising on the website in the future, we will provide appropriate notice and choices and update this Policy.

7) AI, Reverse-Image Search & Model Improvement

Zozy uses automation, AI, and reverse-image search to power features such as item identification, categorization, valuation estimates, and verdicts.

Consent

Before you take your first photo, the app tells you that your photos will be sent to third-party AI and image-search providers and asks you to agree. If you do not agree to this processing, the Services cannot identify items or produce estimates.

What is sent where

SerpApi / Google Lens (reverse-image search)

• Your item photo is uploaded to SerpApi, which runs a Google Lens search and returns visually matching products, their current listed prices, and the merchants offering them

• This is the source of the market prices Zozy shows you

• We do not control SerpApi’s or Google’s data handling; please review their privacy policies

OpenAI Processing

• For multi-photo scans, your item photos and related item details are sent to OpenAI’s API to identify and categorize each item and read any visible price tag

• The text of your in-app Chat messages is checked by OpenAI’s moderation service before it reaches our team

• As of our last review, OpenAI does not use data submitted via their API for model training, per their API terms

• We do not control OpenAI’s data handling; please review their privacy policy

Anthropic Claude Processing

• Your item photo, a photo of its tag or label if you take one, any details or corrections you provide, and the market listings we find are sent to Anthropic’s Claude API to identify the item and generate a value estimate

• Claude searches the web for places the item is currently sold, using a description of the item and never your identity

• If a price tag is visible, the app first reads it on your device using Apple’s built-in text recognition; if that does not work, Claude reads the price from the photo. You can always correct or replace the price.

• As of our last review, Anthropic does not use API data to train its models, per its Commercial Terms of Service

• We do not control Anthropic’s data handling; please review their privacy policy

Data Minimization

• We send only what each provider needs: your item photo and item details to Anthropic (and, for multi-photo scans, OpenAI) for identification and estimates, your item photo to SerpApi for the image search, and a short description of the item for web search

• We do not send your name, email, or account information to these AI and image-search providers

• Authentication tokens are not shared with these providers

• The text of your in-app Chat messages is checked by OpenAI’s moderation service and then delivered to our team via Slack, as described in Section 5. It is not sent to any other AI or image-search provider.

Training on user content

Default position: We do not use your private content (photos, receipts, warranties, notes) to train generalized AI models unless you opt in (for example, via an in-app setting or explicit consent flow). If you opt in, we may use your content to help improve valuation accuracy, categorization, and related functionality. We will describe the opt-in scope and provide a way to withdraw consent.

De-identified/aggregated learning: We may use de-identified and aggregated information (e.g., statistical patterns across categories) to improve the Services without identifying you.

Automated outputs are estimates

Item identification, price readings, estimates, and verdicts are automated and may be wrong. They are decision-support outputs, not appraisals. See our Terms of Use for the full disclaimer.

8) Your Choices & Controls

You may:

• Access and update your account and item information in the app

• Delete individual items, properties, or uploaded attachments

• Turn off push notifications at any time in iOS Settings

• Stop Watchlist checks for an item by removing it from your Watchlist

• Delete your account at any time from within the app (Account → Delete Account), subject to the retention notes below

• Opt out of marketing emails via the unsubscribe link

• Request access to, correction of, or a portable copy of your information by emailing support@zozy.app

Zozy does not currently offer a self-serve data export. You can request a copy of the personal data we maintain about you at support@zozy.app, and we will provide it as required by applicable law.

9) Data Retention

We retain Personal Information for as long as necessary to:

• Provide the Services (typically for as long as your account remains active)

• Maintain security and prevent abuse

• Comply with legal obligations

• Resolve disputes and enforce agreements

Account deletion takes effect after a 30-day grace period, during which you can cancel it by signing back in. After that, we delete or de-identify Personal Information consistent with our operational and legal requirements. Some data may persist for limited periods in backup systems; we will protect it and delete it when feasible.

Deleting your Zozy account does not delete copies of a photo that a third-party provider may hold as a result of processing it. Those providers’ retention is governed by their own policies, linked in Section 5.

Chat messages you send to our team are stored in our Slack workspace and retained for as long as needed to provide support and keep a record of our communications with you. If you delete your account or submit a verified deletion request, we delete your chat messages from Slack, subject to the legal exceptions described in this Policy.

Storage Location

• Database: Supabase (PostgreSQL), cloud hosted

• Item photos: Supabase Storage, private bucket, access-controlled

• Profile photos and the images on share pages you create: Supabase Storage, public bucket, viewable by anyone with the link

• Share pages: hosted by Vercel at share.zozy.app

• Chat messages: Slack workspace, access limited to the Zozy team

• Backups: Managed by Supabase with their standard retention policies

10) Your Privacy Rights (U.S. State Laws)

Depending on where you live, you may have rights to:

• Know the categories and specific pieces of Personal Information we collected

• Access/port your information

• Correct inaccurate information

• Delete information (subject to legal exceptions)

• Opt out of certain processing in some states (where applicable)

• Not be discriminated against for exercising your rights

How to exercise rights: Email support@zozy.app with subject “Privacy Request.” We will verify your request (which may include confirming control of the account). Authorized agents may submit requests where permitted by law (we may require proof of authorization).

Selling/sharing: We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising as defined by certain state laws.

Additional Notice for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) provides you with specific rights regarding your Personal Information. Zozy does not sell or share Personal Information as those terms are defined under California law. We also do not use or disclose sensitive personal information for purposes beyond providing the Services and as otherwise permitted by law. California residents may exercise their rights to know, access, correct, or delete Personal Information by contacting us at support@zozy.app. We will not discriminate against you for exercising your privacy rights.

11) International Users (GDPR / EEA / UK)

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. Our AI, image-search, hosting, chat, and analytics providers are located in the United States, so using the photo and Chat features involves a transfer of your information to the United States.

Legal bases (where GDPR applies)

• Contract necessity (to provide the Services you request)

• Legitimate interests (security, product improvement, analytics)

• Consent (marketing communications; optional AI training on user content; optional cookies where required)

• Legal obligation (compliance and recordkeeping)

Cross-border transfers

Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses.

GDPR rights

Where applicable, you may have rights to access, correct, delete, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.

12) Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no system can be guaranteed 100% secure.

Security Measures

• Credentials are handled by your sign-in provider; we do not store passwords

• API communications use HTTPS/TLS encryption

• Row-level security (RLS) policies ensure users only access their own data

• JWT token-based authentication

• Private, access-controlled storage for item photos

• Rate limiting to prevent abuse

13) Children’s Privacy

Zozy is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child has provided Personal Information, contact support@zozy.app and we will take appropriate steps to delete it.

14) Changes to This Policy

We may update this Policy from time to time. We will update the “Updated” date at the top. If changes are material — including adding a new third party that receives your photos or other Personal Information — we will provide additional notice where required.

15) Contact Us

For questions or requests regarding privacy, contact:

support@zozy.app

Say Adios LLC (d/b/a Zozy) 2209 South First Street, Austin TX 78704