Privacy Policy

At RightBin, we respect your privacy and are committed to protecting the personal data and inventory information you entrust to us. This Privacy Policy describes how RightBin ("we", "us", or "our") collects, uses, stores, and protects your information when you use our mobile application (the "App"), our website located at https://rightbin.app (the "Site"), and related services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect several types of information from and about users of our Services, including:

a. Personal & Account Information

• Authentication Details: To create an account, we collect your email address, display name, and profile photo. This authentication is securely processed through Supabase Auth, including OAuth providers such as Google Sign-In or Apple Sign-In.
• Communication Data: If you contact us directly (e.g., support requests), we collect your name, email address, and the contents of your message.

b. Vault, Storage Bin & Inventory Data

The core functionality of RightBin is to organize your physical possessions. To do this, we store the content you actively input:

• Vaults & Folders: Titles and descriptions of the vaults/folders you create.
• Inventory Items: Titles, detailed descriptions, quantities, conditions, estimated financial costs or values, and additional custom metadata fields (such as serial numbers, purchase dates, brands, or models).
• Physical Storage Bins: Titles and descriptions of physical bins, drawers, or safes, alongside generated unique QR code identifiers.
• Images and Photos: Photographs of your physical items or store receipts that you upload to document proof of ownership or condition.

c. Precise Geolocation Data

RightBin offers optional location tracking to help you catalog and find bins placed in external areas (such as a specific storage unit or yard coordinate).

• GPS Coordinates: If you choose to enable the GPS logging feature ("Cartographer") and grant location permissions in the App, we collect precise latitude and longitude coordinates associated with your physical storage bins.
• Device Permissions: You can withdraw location permissions at any time through your mobile device's settings menu.

d. Payment Information

RightBin offers subscription upgrades (RightBin Pro). Payments are handled entirely by third-party processors:

• Subscriptions and purchases are processed via RevenueCat, the Apple App Store, or the Google Play Store.
• RightBin never collects, reads, or stores your credit card numbers, billing addresses, or payment credentials. We only receive confirmation that a payment transaction succeeded and the tier of your active subscription.

e. Device and Usage Data

When you access the App or Site, we may automatically collect diagnostic data to ensure stability, including: IP address, device model, operating system, application version, error logs, and performance metrics.

2. How We Use Your Information

We use the collected data to operate, maintain, and secure the RightBin platform, including:

• Providing the Service: Enabling you to catalog inventories, map item quantities to physical bins, locate bins via GPS coordinates, and manage vaults.
• Document Generation: Generating PDF reports and exported inventory manifests from your vaults that you can use for insurance claims or personal backups.
• Collaboration: Validating invitation tokens to allow other users to join a shared vault according to your permissions.
• Achievements & Analytics: Tracking action counts (e.g., number of items logged or bins mapped) to calculate gamified achievements and award in-app badges.
• Security and Stability: Monitoring for bugs, security breaches, or server errors, and enforcing our terms of service.

3. Data Sharing & Disclosure

We prioritize your privacy. RightBin does not sell, rent, trade, or lease your personal information or cataloged inventory data to third-party advertising companies or data brokers.

We only share information under the following limited circumstances:

• With Vault Collaborators: If you invite another user to join your Vault (via an invitation link), they will be able to see the vault name, the list of bins, item names, cost values, images, and locations depending on their vault member role.
• Service Providers: We share data with trusted infrastructure providers who perform tasks on our behalf:
  • Supabase: For cloud hosting, Postgres database management, secure storage buckets for photos/PDFs, and user authentication.
  • RevenueCat: For tracking and managing in-app subscription entitlements.
  These providers are strictly bound by contract to protect your data and only use it to deliver their specified services.
• Legal Obligations: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe such action is necessary to protect the safety and rights of our users or the public.

4. Data Security

RightBin is built on a secure database architecture. We employ strict Row Level Security (RLS) rules at the database level. This guarantees that:

• Only authenticated members of a specific vault have permissions to read, write, or delete items within that vault.
• Our storefront website utilizes single-purpose cryptographic resolvers that verify invitation tokens without exposing internal vault configurations or emails to anonymous crawlers or external parties.
• All data is encrypted during transit (SSL/TLS) and at rest within Supabase storage servers.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

5. Data Retention & Deletion

We retain your account and inventory data as long as your account remains active. You maintain complete control over your data:

• You can edit or delete individual inventory items, photos, storage bins, or vaults directly in the App at any time. Deleted contents are instantly removed from active databases.
• You can request the permanent deletion of your entire account and all associated vault contents. To delete your account, navigate to the Settings panel within the App, or contact us at [email protected]. Upon account deletion, all your profile data and personal vaults (where you are the sole owner) will be permanently purged from our active systems.

6. Third-Party Links & Services

Our Services contain integrations or links to third-party storefronts (Apple App Store, Google Play Store) and authentication providers (Google, Apple). We are not responsible for the privacy practices or contents of these external services. We encourage you to read their respective privacy policies.

7. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us at [email protected], and we will take immediate steps to delete such information.

8. International Data Transfers

Your information may be transferred to—and maintained on—servers located outside of your state, province, or country, where privacy laws may differ. If you use our Services from outside the United States, please note that we transfer and process data within secure US-based database regions hosted by Supabase.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this policy periodically for any changes.

10. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data rights, please contact us at:

Email: [email protected] or [email protected]