Privacy Policy

Shelfie is a mobile app that lets you photograph the things you collect, get an AI-estimated value, organize items into folders and collections, and optionally share public profiles at shelfie.bio/@yourusername.

Shelfie is operated by DYM LABS LLC(“Shelfie,” “we,” “us,” or “our”), a US limited liability company. For the purposes of the EU/UK General Data Protection Regulation (GDPR), DYM LABS LLC is the data controller of your personal data. You can reach us at any time at hello@shelfie.bio.

This policy explains what we collect, how and why we use it, who we share it with, and the rights you have. We've tried to write it in plain English.

We collect the following information:

Information you give us

• Account details - your email address, and your display name, username, bio, and avatar if you set them.
• Your content - the photos you upload, the items and collections you create, notes you add, and how you organize your folders.
• Communications - messages you send us, for example when you email support.

Information we generate or receive

• Estimated values - the AI-generated identification and market value range we calculate for your items.
• Device push token - an identifier that lets us send push notifications to your device (if you enable them).
• Basic usage & diagnostics - limited technical and usage information such as app version, device type, crash reports, and interactions needed to keep the app working and improve it.
• Authentication signals - when you sign in with Apple or Google, we receive a verified identifier and your email so we can create and secure your account.

We do notcollect or store your payment card details. Subscriptions are handled by Apple (see “Payments” below).

We use your information to:

• Create and secure your account and sign you in.
• Identify your items and estimate their market value using AI, and show you the results.
• Store and organize your photos, items, collections, and notes so they sync across your sessions.
• Power your public profile and shared folders when you choose to make them public or link-only.
• Send you transactional messages (such as one-time sign-in codes) and, if enabled, push notifications.
• Provide support, fix bugs, prevent abuse, and improve the app's features and performance.
• Comply with legal obligations.

Shelfie's core feature relies on AI. When you scan an item, the photo you upload and the related item text are sent to OpenAI so it can identify the item and help estimate a value. To produce a value range, we may also reference public marketplace data such as recent eBay sold listings.

Estimated values are informational only. They are not professional appraisals and are not a guarantee of what an item is worth or will sell for.

If you are in the EU, UK, or another region with similar laws, we rely on the following legal bases to process your personal data:

• Performance of a contract - to provide the app and the features you ask for, including scanning, storing, and sharing your items.
• Consent - for things you opt into, such as push notifications. You can withdraw consent at any time.
• Legitimate interests- to keep the app secure, prevent abuse, understand how it's used, and improve it, where this isn't overridden by your rights.
• Legal obligation - where we must process data to comply with the law.

We don't sell your personal data. We share it only with the service providers (“subprocessors”) that help us run Shelfie, and only as needed:

• Supabase - database, authentication, file storage, and backend hosting.
• OpenAI - AI identification and valuation (receives the photos and item text you scan).
• Firebase Cloud Messaging (Google) - delivery of push notifications.
• RevenueCat and the Apple App Store - subscription management and payment processing.
• Resend - sending transactional and authentication emails (such as one-time sign-in codes).
• Public marketplace references - we reference public listing data (e.g., eBay sold listings) to estimate values.

We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer (such as a merger or acquisition).

When you make a folder or profile public or link-only, the content in it (including item photos, names, notes, and estimated values) becomes visible to anyone who can view your profile or has the link. Please only make public what you're comfortable sharing.

We're based in the United States, and our service providers may store and process your data in the US and other countries. This means your personal data may be transferred outside your home country, including outside the EU/UK.

Where we transfer personal data internationally, we rely on appropriate safeguards - such as the European Commission's Standard Contractual Clauses or equivalent mechanisms offered by our providers - to protect it.

We keep your personal data for as long as your account is active or as needed to provide the app. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we need to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

We use technical and organizational measures - including encryption in transit, access controls, and reputable infrastructure providers - to protect your data. No method of storage or transmission is completely secure, but we work to safeguard your information and to respond promptly if something goes wrong.

Depending on where you live, you have rights over your personal data. In the EU/UK and many other regions, these include the right to:

• Access the personal data we hold about you.
• Rectifydata that's inaccurate or incomplete.
• Eraseyour data (“delete my account”).
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent at any time, where we rely on consent.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights - including deleting your account and data - email us at hello@shelfie.bio. We'll respond within the timeframes required by law. We won't discriminate against you for exercising your rights.

If you enable push notifications, we use your device push token to send them. You can turn notifications off at any time in your device settings (or within the app), which stops them without affecting the rest of your account.

Shelfie is not directed to children under 13 (or under 16 where a higher age applies under local law), and we don't knowingly collect personal data from them. If you believe a child has provided us personal data, contact hello@shelfie.bioand we'll delete it.

The shelfie.bio website is intentionally lightweight. It serves marketing pages and public profiles and does not set advertising or cross-site tracking cookies. We may use minimal, privacy-respecting measurement and standard server logs to keep the site running and understand aggregate traffic. We'll update this section if that changes.

We may update this Privacy Policy from time to time. When we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of Shelfie after an update means you accept the revised policy.

DYM LABS LLC
Email: hello@shelfie.bio