Privacy Policy

Effective date: September 27, 2026 · Last updated: September 27, 2026

1. Who we are

MyWarranty ("MyWarranty", "we", "us" or "our") provides the MyWarranty mobile application for Android and iOS and the website at mywarrantyapp.info (together, the "Service") — a warranty and document expiry tracker. For the purposes of the EU/UK General Data Protection Regulation ("GDPR") and similar laws, we are the data controller responsible for the personal data described in this Privacy Policy.

Privacy contact: mywarrantyapppro@gmail.com.

2. Data we collect

2.1 Data you give us

• Account data — your email address, password (stored only in hashed form), account creation date, your app language and currency/region preferences, and subscription status.
• Vault content — the information you choose to enter, such as product or document names, purchase and expiry dates, prices, categories, stores, notes and claim history. It is stored on your device and, when you are signed in, also in your private account in our cloud so it can sync and be restored.
• Generated documents — claim letters, reports and exports are generated from your vault content.

2.2 Data collected automatically

• Device and technical data — device model and operating system, app version, language settings, IP address, timestamps and server logs used for security, reliability and troubleshooting; crash and diagnostic data where such reporting is enabled.
• Notification data — the push notification token provided by your device/platform and the reminder schedule necessary to deliver your reminders.

2.3 Data processed only on your device

• Receipt images and OCR processing — receipt photos are read on your device. The images are not uploaded to our servers today. The fields you save from a scan (for example store, product, date or total) become part of your vault and sync like any other vault data.
• App lock — your 4-digit PIN and any fingerprint/face data used for unlock are handled by your device. We never receive your biometric data.

2.4 Purchases

Premium purchases are processed by the app store through which you installed the app (for example Google Play Billing, or the Apple App Store for iOS). We do not receive or store your payment card details. We receive limited transaction information — such as subscription status and subscription identifiers — to activate and manage Premium.

2.5 Cloud photo backup (when available)

An optional Premium feature will allow backup of receipt photos to your private account. It will be off by default, enabled only with your consent, and we will update this policy before it launches.

2.6 What we do not intentionally collect

We do not intentionally collect your contacts, calendar, precise location, health data, or photos from your library beyond the receipt images you deliberately scan.

3. How we use your data, and why (legal bases)

• Providing the Service — account, sync, backup, restore, reminders and claims: performance of our contract with you.
• Security — abuse prevention, logs, access control, account protection: our legitimate interests and legal obligations.
• Notifications — delivering expiry reminders: your settings and consent (you can turn them off at any time in your device settings).
• Support — responding to your requests: our contract with you and legitimate interests.
• Reliability and improvement — fixing bugs and improving the Service using diagnostics: our legitimate interests.
• Legal compliance — complying with applicable law and lawful requests: legal obligation.
• Legal claims — establishing, exercising or defending legal claims: our legitimate interests.

Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before withdrawal.

4. What we do not do

• We do not sell your personal data.
• We do not use your vault content for advertising, profiling or marketing.
• We do not read your receipt images — they are processed on your device.
• We never receive your biometric data.

5. Sharing your data

We share personal data only with the parties described below, and only to the extent necessary:

• Infrastructure and cloud providers that host our backend and store your data on our instructions.
• Push notification providers that deliver your reminders.
• The relevant app store for billing and subscription management.
• Advisers and authorities where we are required to disclose data by law, or to establish, exercise or defend legal claims.
• A buyer or successor in connection with a merger, acquisition or sale of assets, subject to this policy remaining applicable.

Our service providers act on our instructions under written contracts and may not use your data for their own purposes. Where data is transferred outside the EEA or the UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and adequacy decisions.

6. How long we keep your data

• Account and vault data — for as long as your account is active.
• After account deletion — removed from live systems promptly (normally within 30 days) and from backups within 90 days.
• Server logs — normally no longer than 30 days.
• Legal records — limited records may be kept longer where the law requires (for example tax or accounting rules) or to resolve disputes.
• Aggregated or anonymized data that can no longer identify you may be kept indefinitely.

7. Security

We use technical and organizational measures including encryption in transit (TLS), hashed passwords, per-account isolation so that each account can only access its own vault, and on-device processing for scanning and app lock. However, no method of transmission or storage is completely secure. You are responsible for keeping your device, PIN and credentials safe, and — to the extent permitted by applicable law — we are not liable for unauthorized access resulting from your failure to do so.

8. Your rights

Depending on where you live, you may have some or all of the following rights:

• EU/EEA/UK (GDPR) — access, correction, deletion, restriction, portability, objection, withdrawal of consent and the right to lodge a complaint with your local data protection authority.
• California (CCPA/CPRA) — to know, delete and correct personal information, and to opt out of sale or sharing. We do not sell or share personal data for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights.
• Other regions — similar rights granted by your local law (for example Brazil's LGPD).

To exercise your rights, email mywarrantyapppro@gmail.com. We normally respond within one month and may ask you to verify your identity first. Some data can be managed directly in the app at any time.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

10. App permissions

• Camera — to scan receipts (processed on your device).
• Notifications — to deliver expiry reminders; you can disable them at any time in your system settings.
• Biometrics — for local app unlock; biometric data is handled by your device and never reaches us.
• Files/photos — only for images you choose to import or export.

11. Deleting your account and your data

You can delete your account and your cloud data directly in the app (Settings → Delete account) or by emailing us. Deletion is permanent and irreversible. Before deleting, you can export your data as CSV, a PDF report or a complete JSON backup.

12. The website

Our website is a static information page. It does not set advertising cookies. If we introduce analytics or other tools, we will update this policy and, where required, ask for your consent first.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and where changes are material we will provide additional notice (for example, in the app or by email). Where the law requires your consent, we will ask for it.

14. General provisions

• Translations. Any translated version of this policy is provided for convenience only; to the extent permitted by law, the English version prevails.
• Severability. If any provision is found unenforceable, the remaining provisions remain in full effect.
• No waiver. Our failure to enforce a provision is not a waiver of it.
• No third-party beneficiaries. This policy does not create rights for anyone other than you and us.
• Mandatory rights. Nothing in this policy limits rights you have under mandatory consumer or data protection laws of your country of residence.
• Other agreements. This policy describes our data practices; it does not modify any separate agreement between you and us.

Contact us

MyWarranty — Privacy Team
Email: mywarrantyapppro@gmail.com