Warranty Watch — Privacy Policy

1. Who We Are

Warranty Watch is a mobile app for iPhone, iPad, and Android published by Olaverse Labs ("we", "us", or "our"), which also maintains this website at olaverse.co.uk. This policy covers the app only. Our website privacy policy covers olaverse.co.uk separately.

Warranty Watch tracks the things you buy and their warranties. It scans receipts, reminds you before a warranty ends, and exports documents you can use to make a claim.

2. What Stays on Your Device

The app saves the following in its private storage on your device, as a data file and JPEG photos. None of it is ever sent to us or to any server. We do not have any servers for the app.

• Item details: item name, store, category, purchase date, price, warranty length, and any notes you add.
• Receipt photos you take in the app.

Other apps cannot read this storage. Because there is no account and no copy on our side, we cannot see your items and cannot recover them if you delete the app or lose your phone.

3. What Leaves Your Device

Your items and receipt photos never leave your device unless you export and share them yourself (see section 6). Three third-party components inside the app do connect to the internet:

• Google AdMob, which shows ads on the free plan. See section 7.
• RevenueCat, together with the App Store or Google Play, which handles Warranty Watch Pro subscriptions. See section 8.
• Google ML Kit, on Android only, which may send Google diagnostic data about the text recognition feature. See section 4.

We never give any of them your items, prices, notes, or receipt photos.

4. Camera and Receipt Scanning

The app asks for camera access only so you can photograph receipts. It uses the camera only when you choose to take a photo.

Reading the text on a receipt happens on your device:

• iPhone and iPad: the app uses Apple's Vision framework, which is built into iOS.
• Android: the app uses Google's ML Kit text recognition, which runs on your phone.

Receipt images are not uploaded to us, to Apple, or to Google for this. On Android, ML Kit may send Google basic diagnostic and usage information, such as device and app details and how well the feature performs, so that Google can maintain and improve it. This does not include your receipt images or the text read from them. Google handles it under the ML Kit terms and the Google Privacy Policy.

If you decline camera access, you can still add items by hand. You can change the permission in your device settings at any time.

5. Warranty Reminders

Reminders before a warranty ends are local notifications, scheduled by your phone's own operating system. No push server is involved, and no device token is sent to us. If you turn notifications off, the app keeps working but cannot remind you.

6. Exporting Claim Documents

Warranty Watch Pro can create a claim packet as a PDF and export your library as a CSV file. These files are created in temporary storage on your device.

A file leaves your device only when you pick where to send it in the system share sheet, for example email, a messaging app, or Files. We do not receive a copy. Once you share a file, the app or service you sent it to handles it under its own privacy policy.

7. Advertising on the Free Plan

The free plan shows ads supplied by Google AdMob. To show, measure, and possibly personalise those ads, Google's SDK collects:

• your device's advertising ID, where your device makes it available;
• your IP address;
• device and app information, such as device model, operating system, and app version; and
• ad interactions, such as which ads were shown and tapped.

Google handles this data as its own controller, under the Google Privacy Policy. Google explains how it uses data from apps like this one in How Google uses information from sites or apps that use its services. We do not receive this data about you as an individual. We see only totals, such as how many ads were shown and what they earned.

• Consent: where the law requires it, including in the UK, EEA, and Switzerland, Google's consent prompt asks for your choice before personalised ads are shown. You can change your choice at any time from Privacy Choices on the Home screen.
• iPhone and iPad: iOS only gives Google your advertising identifier (IDFA) if you allow this app to track you through Apple's App Tracking Transparency setting. If you have not allowed it, Google does not receive the IDFA and cannot use it to track you across other companies' apps and websites.
• Android: the AdMob SDK can read your Android advertising ID. You can delete or reset it in your device settings. See section 10.
• Pro subscribers: while Warranty Watch Pro is active, the app loads no ads, so the ad SDK sends nothing to Google.

We never send Google your items, receipts, or anything that identifies you by name.

8. Warranty Watch Pro

The free plan lets you track up to 10 items and shows ads. Warranty Watch Pro is an optional subscription that removes ads, removes the item limit, and unlocks exports.

• Plans: Monthly at $2.99 or Yearly at $19.99 (US prices). Prices in other countries are shown in local currency in the App Store or Google Play before you buy. There is no free trial.
• Renewal: the subscription renews automatically until you cancel. Cancel in your Apple ID subscription settings or in Google Play subscriptions. Deleting the app does not cancel your subscription.

How your data is handled when you subscribe:

• Apple or Google takes the payment, not us. Your card number, billing address, and payment details go to the App Store or Google Play under their own privacy policies. Neither we nor RevenueCat ever see them. See Apple's privacy policy and the Google Privacy Policy.
• RevenueCat records the subscription. RevenueCat, Inc. checks whether your subscription is active, including after you reinstall or change phones, and acts as our data processor. It receives an anonymous user ID that the app generates, your purchase and subscription history from Apple or Google, and device and app information. The app does not log you in, so RevenueCat never receives your name or email address. See RevenueCat's privacy policy.
• What we see: subscription counts, revenue, and renewal events tied to those random IDs. We cannot work out who you are from it, and we do not try.

Restoring purchases. If you reinstall or move to a new device, use Restore Purchases to get Pro back. This restores the subscription only, not your items, which were stored on your old device.

Refunds are handled by the store you paid. For the App Store, go to reportaproblem.apple.com. For Google Play, request a refund from your order history in Google Play.

9. What We Never Collect

• No account. No sign-up, sign-in, name, email address, phone number, or password. Subscribing does not create an account.
• No analytics or crash reporting. There is no Firebase, Mixpanel, Sentry, or similar tool in the app. We do not know what you track or how often you open the app.
• No purchase records of yours. The items, prices, stores, and receipts you enter stay on your device.
• No other permissions. Beyond the camera and notifications, the app does not ask for access to your location, contacts, or microphone. On Android, the ad SDK also uses permissions for internet access and the advertising ID, which do not show a prompt.
• No payment details. Apple and Google handle all payments.
• No selling. We do not sell your personal information. Google's use of data for personalised ads may count as "sharing" under some US state laws. See section 10 to opt out, and Appendix D.

If we ever change what the app sends off your device, we will update this policy and the app's store privacy disclosures before that version ships, not after.

10. Your Choices

• Ad consent: open Privacy Choices on the Home screen to review or change your ad consent choice.
• Tracking on iPhone and iPad: check or change whether the app may track you under Settings → Privacy & Security → Tracking.
• Advertising ID on Android: delete or reset it. On most phones this is under Settings → Privacy → Ads, or Settings → Security & privacy → More privacy settings → Ads.
• No ads at all: subscribe to Warranty Watch Pro.
• Camera and notifications: turn either on or off in your device settings.
• Your items and receipts: edit or delete them in the app, or delete the app. See section 12.
• Data held by Google or RevenueCat: use those companies' controls through the links in sections 7 and 8, or email us and we will help.

11. Device Backups

iCloud Backup on iPhone and iPad, and Google's backup on Android, are usually switched on by default. When they are on, your backup may include the app's data, receipt photos included, along with everything else on the device. Restoring that backup may bring your items back. The backup is created and held by Apple or Google under their own privacy policies and encryption. We have no access to it and no involvement in it. You can turn backups off in your device settings.

12. Deleting Your Data

For anything the app stores, you do not need to ask us:

• Delete an item in the app to remove it and its receipt photo.
• Delete the app to remove everything it stores at once.
• Cancel an active subscription in your App Store or Google Play settings. Uninstalling alone does not do this.

Some records can persist after you uninstall. RevenueCat and Apple or Google keep the subscription record, and Google keeps the ad data it holds under its own policy. You can ask us to erase our side of the subscription record by emailing us. It is held under a random ID, so you may need to send us that ID or your store receipt for us to find it, and we may need to keep the underlying transaction record where tax or accounting law requires. Copies in your device backup are removed through Apple or Google, not us.

13. If You Email Us

The one case where we receive personal information directly is when you choose to contact us. If you email us for support, we receive your email address and whatever you write. We use it only to reply, keep it only as long as needed to resolve the matter and for basic records, and do not add you to a mailing list.

14. Children

The app is not directed at children under 13, or under 16 in countries that set a higher age for consent to data processing, and it is not registered as a child-directed app in the App Store or Google Play. We do not knowingly collect personal information from children. If you believe a child has used the app in a way that caused their data to be collected, contact us and we will help. Subscriptions should only be bought by the holder of the App Store or Google Play account, or with the account holder's permission. Both stores provide parental controls for purchases.

15. App Stores

Downloading the app and subscribing are transactions between you and Apple or Google. They collect their own data about downloads, purchases, renewals, and crashes under their own policies, which we do not control. Any crash reports Apple or Google share with us are aggregated and provided by the platform, not gathered by the app.

16. Changes to This Policy

If we change this policy, we will update the date at the top of this page. We will do so before shipping any version of the app that changes what data is handled.

17. Contact

Questions about this policy: contact@olaverse.co.uk

Appendix: Legal Detail

The sections above are the whole picture in plain English. This appendix restates the same facts in the formal terms that data protection law uses, for anyone who needs them.

A. Controller, Processors, and Scope

For the purposes of the UK GDPR and EU GDPR, the controller is Olaverse Labs, contactable at contact@olaverse.co.uk. The items and receipt photos you enter are processed entirely on your own device and are never transmitted to us, so they are not personal data under our control. Files you export and share are sent by you to a destination you choose, which acts as its own controller.

For subscription data we are the controller, and RevenueCat, Inc. acts as our processor under a data processing agreement. Apple and Google act as their own controllers for the payment itself.

For advertising, Google acts as an independent controller for the data its AdMob SDK collects from your device. On Android, Google also acts as its own controller for any diagnostic data ML Kit sends. We do not receive either at the individual level.

We are also the controller for correspondence you send us directly.

B. Lawful Basis for Processing

• Items and receipt photos: no lawful basis is required of us, as we carry out no processing. Processing on your own device, under your sole control, is not processing by us.
• Subscription and entitlement data: performance of a contract (Article 6(1)(b)), to provide and restore the subscription you bought. For the underlying transaction records, compliance with a legal obligation (Article 6(1)(c)) under tax and accounting law.
• Advertising in the UK, EEA, and Switzerland: consent (Article 6(1)(a)), and consent under the UK PECR and the EU ePrivacy Directive for storing or accessing information on your device, collected through Google's consent prompt. You can withdraw consent at any time from Privacy Choices on the Home screen. Where you decline, Google may serve non-personalised or limited ads under its own policies.
• Email correspondence: legitimate interests (Article 6(1)(f)), to respond to a request you chose to send us.

C. Your Rights Under UK and EU GDPR

You have the right to request access to your personal data, and its rectification, erasure, restriction, or portability, and to object to processing. For your items and receipts these rights are exercised directly on your device, since we hold no copy: you already have full access, you can edit anything, Pro exports give you a portable copy, and deleting an item or the app is immediate erasure.

For subscription records and any email correspondence you have sent us, you can exercise all of these rights by writing to contact@olaverse.co.uk. We respond within one month, as required. Subscription records are keyed to a random identifier rather than to you, so we may need you to supply that identifier or your store receipt to locate them. For advertising data, Google is the controller, and you can exercise your rights with Google directly.

If you believe we have handled your personal data unlawfully, you may complain to the UK Information Commissioner's Office at ico.org.uk, or to your national supervisory authority if you are in the EEA.

D. United States State Privacy Rights

Under laws including the California Consumer Privacy Act as amended by the CPRA, and the comprehensive privacy laws of states such as Virginia, Colorado, Connecticut, Utah, and Texas, we disclose the following:

• Categories of personal information collected through the app: identifiers, limited to a random, app-generated subscriber identifier; commercial information, being your subscription history; and device and app information accompanying subscription requests. All of these reach us only through RevenueCat. Items and receipt photos remain on your device and are not collected by us.
• Advertising: on the free plan, Google's AdMob SDK collects your advertising ID, IP address, device and app information, and ad interactions. Google may use this to personalise ads, which some state laws treat as "sharing" for cross-context behavioural advertising or as "targeted advertising". You can opt out through Privacy Choices on the Home screen, by not allowing tracking on iOS, or by deleting your Android advertising ID, as described in section 10. Subscribing to Pro stops ads from loading.
• Sensitive personal information: none. Neither we nor the app collect precise geolocation.
• Sold: we do not sell personal information.
• Sources: your device, via RevenueCat, for subscription data; and you directly, when you email us.
• Retention: subscription records for as long as the subscription is active and thereafter only as long as tax and accounting law requires; email correspondence for as long as needed to handle your enquiry.

You may exercise your rights of access, correction, deletion, opt-out, and appeal by emailing contact@olaverse.co.uk. We will not discriminate against you for doing so. Because we hold none of your items or receipts, a request about them will be answered by confirming that we hold none.

E. International Transfers

Your items and receipt photos are not transferred anywhere by us: they stay on your device. Subscription data is processed by RevenueCat, Inc. in the United States, and advertising and ML Kit diagnostic data are processed by Google in the United States and elsewhere. Both rely on the Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable. Email you send us is handled by our email provider in the course of ordinary email delivery.

F. Security

Your items and receipt photos are protected by your device's own security: the app's private storage, your passcode, biometrics, and platform encryption. We recommend keeping a device passcode enabled, since anyone who can unlock your phone can open the app. Subscription data travels over encrypted connections to RevenueCat and to the app stores, and ad requests travel over encrypted connections to Google. No system is perfectly secure, but because we hold none of your items or receipts, a breach of our systems could not expose them.

G. Automated Decision-Making

The app reads receipts and calculates warranty end dates on your device. We make no automated decisions producing legal or similarly significant effects and do not profile you. Where Google personalises ads, it does so as its own controller under its own policies.