Overview

Warranty Drawer ("the App") is developed by Adelyons Software LLC ("we," "us," or "our"). It is a local-first warranty and receipt filing app: you photograph a receipt, a warranty card or a product label, the App reads the merchant, product, purchase date, price and warranty term, works out the expiry, files the item under a category and reminds you before the warranty lapses. This policy explains exactly what leaves your phone, when, and why.

Information Stored On Your Device

The following is created and stored locally on your device, in a private database (SQLite) and the App's private photo folder. It is not transmitted to us unless you turn on backup & sync (below):

• Items: merchant, product, category, purchase date, price and currency, serial number, notes.
• Clocks: warranty, return-window and extended-plan dates and their source (read from the paper, a category default, or entered by you).
• Photos: the receipt, warranty card, serial plate or product photos you take or choose.
• Extracted text: the text read from a photo on the device, kept only until the item has been refined, then discarded.
• Reminders & settings: your local notification schedule and in-app preferences.

The App also keeps a random installation identifier (a UUID generated on first launch). It is not derived from your device or from you; it is used to validate purchases and to apply a fair-use daily cap on the extraction service.

Reading Receipts: On Your Phone First, Text Only Online

Extraction happens in three stages, and the design choice matters for your privacy:

• Stage 1 — on your phone, always. Text recognition (OCR) runs on the device. This is what makes capture work offline and instantly.
• Stage 2 — text only, when online. The App sends the recognised text — never the photo — to our extraction service (an edge function hosted on Supabase that calls Google's Gemini model) together with your installation identifier, your locale and today's date. The service returns a suggested merchant name, a short item title, the purchase date, the total, the warranty term, a category and a serial number if one was printed. We do not store the text, the response, or anything about the receipt. The service keeps only a counter per installation per day, a daily token budget, and an audit row holding the installation identifier, a timestamp, the action, the suggested category and a token count. Google processes the text under its own API terms and does not receive your identity.
• Stage 3 — on your phone. The App compares the service's answer with its own on-device readers and shows you every field to confirm or correct. Nothing is filed without you.

The one exception: when the on-device reader finds almost nothing (a warranty card that is mostly logo, a photo too dark), the App offers Read the picture instead?. Only if you tap to consent is that one downscaled image sent, once, for that one item. It is processed and not stored.

If you are offline, the item is filed from the on-device reading and refined later; you can also turn off the online step entirely by staying offline — the App never requires it.

Optional Backup & Sync

Sign-in is offered — never required. Every feature works without it. If you choose to back up, there are three ways to do it, and what we store is the same in each:

• Sign in with Google or Apple. We receive the identity token from the provider and store your user id and, if the provider shares it, your email address and display name. We do not receive your password.
• Back up without an account (guest). An anonymous account is created with no email, name or password. You are given a recovery code; we store only a one-way hash of it, so we cannot read it back — if you lose the code and the phone, the guest copy cannot be recovered.
• What is synced: your items, clocks, categories and photos, plus the household you belong to, in our cloud storage (Supabase, United States region). Photos are stored in a private bucket readable only by members of your household through short-lived signed links. Extracted text and reminder schedules are not synced.
• Household sharing: if you join a household, its members can see and add the same items. A household is joined only by entering a code the owner shares.
• Device records: a short device name and a last-synced time, so you can see which devices are connected.

Your drawer stays on your phone whether or not you are signed in. Signing out never deletes the phone's copy.

Optional Purchases (Warranty Drawer+)

The free tier files ten items with the full flow, reminders and backup. Warranty Drawer+ adds unlimited items, multiple photos per item, extra clocks, the claim helper, household sharing and exports. Purchases are handled by trusted providers:

• Apple App Store / Google Play: the transaction is processed entirely by Apple or Google under their own privacy policies. We never receive or store your payment-card details.
• RevenueCat: we use RevenueCat to validate and restore your entitlement. It receives a purchase token, the App's installation identifier (and, if you sign in, your account id so the purchase follows you across devices), and basic device and purchase metadata. It does not receive any of your drawer.

Invite a Friend (Optional)

Warranty Drawer includes an optional invite feature: if a friend enters your invite code, you both receive 30 days of Warranty Drawer+ at no charge. It is entirely optional.

When — and only when — you open the invite screen or enter a code, the App sends the following to our invite service (hosted on Supabase) so the free month can be granted through RevenueCat:

• A random installation identifier generated on your device. It is a random value, not a device or advertising ID.
• Your RevenueCat anonymous customer identifier, so the free month is applied to the right installation.
• The six-character invite code being created or redeemed.

That is the entire payload. None of your drawer is involved. Records of invite codes and redemptions are kept only to grant the reward, to prevent abuse, and as an audit trail; email us and we will delete yours.

What We Do NOT Collect

• We do not store receipt photos or extracted text on our servers — not from the extraction service, and not at all unless you turn on backup & sync.
• We do not require an account, email address, name or login.
• We do not collect location data.
• We do not use advertising identifiers or cross-app tracking, and we do not show ads.
• We do not use third-party analytics or crash-reporting SDKs that send your usage or personal data to us.
• We do not sell or rent your personal information to anyone.

Data Retention & Deletion

• On your phone: delete individual items in the App, export and clear, or uninstall the App to remove everything it stored locally.
• In the cloud (only if you signed in): Settings → Backup & sync → Delete cloud account removes your cloud copy, your household membership (or the household and its photos if you were its only member), your recovery-code hash and your account — immediately, and the phone's copy stays. You can also request deletion at delete-account.html; we complete requests within 30 days.
• Extraction service: nothing about a receipt is retained. Daily counters and the audit rows described above are kept for abuse prevention and cost control.
• Purchase records held by Apple, Google or RevenueCat are retained under their respective policies.

Security

Local data stays within the App's private storage, protected by your device's operating system. Every connection — to the extraction service, to cloud storage, to the stores and to RevenueCat — is encrypted (TLS). Cloud rows and photos are protected by row-level security so that only members of your household can read them. No system can guarantee absolute security; keeping the drawer on your device by default means there is no central store of your receipts unless you choose one.

Children's Privacy

Warranty Drawer is intended for a general adult audience and is not directed to children under 13 (or under 16 where applicable). If you believe a child has provided information to us, email us and we will delete it.

Your Rights

Privacy laws such as the GDPR (EU/EEA/UK) and CCPA/CPRA (California) give you rights to access, correct, delete and port your personal data. Everything the App holds locally is under your direct control and exportable as a ZIP. For a cloud copy, use Delete cloud account in the App or email us; we hold no other personal data about you.

Changes to This Policy

We may update this policy as the App evolves. Material changes will be reflected by updating the "Effective date" above and, where appropriate, through an in-app notice.

Contact Us

Questions about this policy or your data? Email dev@adelyons.com.

Adelyons Software LLC
https://adelyons.com