Privacy Policy

What we collect

Account details: your Google account email and the name you sign in with, and the name you pick for your shopping email.

Gmail, only with your permission: we look at the sender, subject and preview of emails to find ones about orders. We read the full text only of emails we have judged to be shopping emails (orders, shipping, deliveries, returns, refunds, cancellations) and loyalty or card-reward emails about points.

What we keep from those emails: store, order number, dates, order total, shipping and delivery status, return windows, and for each product its name, brand, size, color, price, product photo link and store page link. For card rewards, only the points or cash back balance, never balances owed, statements or spending.

What we never keep: health, pharmacy, telehealth, testing, adult, insurance, legal or banking emails; eyewear; carrier notices; phone and cable bills; restaurants; kids' teams, camps and school sign-ups. When we are unsure, we skip the email.

Receipts you photograph (stores, restaurants, groceries): the photo is sent to our AI provider to read the place, date and products, then discarded. We keep only what you confirm (place, date, products, prices and return window), never card or payment details, and we don't store the photo.

Your shopping email: mail sent to your Actually shopping address is forwarded to your inbox. We screen it the same way and keep only the order details above.

Things you add: your profile photo, notes on pieces, outfits, saved pieces, who you follow, brands you follow, points you type in, and your choices about who each piece is for.

Photos of you wearing a piece, if you add them: we shrink each photo on your phone and remove its hidden details (like where and when it was taken) before it is uploaded. We store it and show it only where you share that piece: your feed, to the people who follow you, and on that piece's share link. We delete it when you remove it or delete your data or account. No AI is run on these photos, and we never use them in ads or marketing without asking you separately.

Usage: which sign-up steps you completed, when you open the app, and when you use a few features (like copying your shopping email or sending an invite), counted by step name only, plus basic page visit counts from our hosting provider's analytics, which does not use cookies.

How you found us: if you came from a link with a campaign tag, a creator's code or a friend's invite, we save that tag or code on your account when you sign up, so we can count which links bring people in. If a friend invited you, we save who it was.

Errors: if something breaks, the error message, the screen it happened on and your device type, so we can fix it. Never the contents of your emails.

Shared link taps: when someone taps "Find it" on a piece a friend shared, we record that the link was tapped, when, and the device type (iPhone, Android or computer). Not who tapped it. We use this to count which shared pieces people shop and, later, to credit the friend who shared it.

Earnings from your shares: when a friend buys through a piece you shared, we record the store, date, the amount you earned and its status (pending, ready, returned, paid), so we can show and pay it. These records stay if you delete your orders and closet, because they are money owed to you; deleting your account removes them. Never who bought it or what else they bought.

Store pages: for pieces you share, we look up the piece's page on the store's website so friends land on it.

Feedback: if you send feedback, what you write or say (turned into text on your phone), an optional screenshot you choose, the screen you came from and your device type. Only the team sees it.

How we use it

To run Actually for you: build your closet and order list, track deliveries and return windows, find points, estimate what pieces are worth and show your feed.

So friends see what you choose to share. Shared pieces and outfits show the photo, brand, name, store link and your note, and a shared piece shows your photo wearing it if you added one. Never prices, sizes or order details.

To keep the service safe, fix problems and understand, in aggregate, how people use it.

We do not sell your personal information, and we do not use your Gmail data for advertising.

Google user data

Actually's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. See our Google Data Use page for details.

We do not use Gmail data, or anything derived from it, to develop, improve or train general AI or machine learning models, and our AI provider does not train on it.

Who we share it with

Service providers that run Actually for us, under contracts that limit how they use your data: database and storage hosting [Supabase], app hosting and visit counts [Vercel], AI that reads order emails and receipt photos [Anthropic], and email forwarding for your shopping address [Resend]. [Counsel: confirm each provider's data processing terms, including that the AI provider does not train on our data.]

Friends and anyone with your profile link see only what you choose to share.

Invites: once you send or copy your invite link, anyone with it can see your first name, how many pieces you share on your feed, and the photo, brand and name of a few of them. Never prices, sizes or order details. When a friend joins from your invite, you follow each other, and you can unfollow anytime.

Links you share: when you share an outfit or a piece by link, anyone with the link can see its photo, brand, name, your note, your first name and, for a piece, your photo wearing it if you added one. Never prices, sizes or order details. You can turn a link off any time.

Styling: to suggest outfits, we send the type, brand, name and color of your pieces to our AI provider. Never your emails.

Stores you tap through to may receive that visit. When cash back is live, a shopping partner may learn that a purchase came from Actually.

If the law requires it, or to protect people's safety, or as part of a sale or merger of our business, with notice where required.

Your choices

Disconnect Gmail anytime in Settings. We stop reading and delete our access to your Gmail.

Remove a photo of you wearing a piece anytime from that piece in your closet.

Delete your data (orders, closet, points, saved pieces and outfits, and photos of you wearing pieces) or your whole account anytime in Settings. Deleting your account also deletes your profile photo, cut-out photos and photos of you wearing pieces.

Everything you share is private until you choose to share it, and pieces for kids or others are always private.

You can also email [privacy@actually.shop] to ask what we hold about you, to correct it, or to delete it.

How long we keep it

We keep your data while your account is open. When you delete data or your account, we delete it from our live systems right away and from backups within [30] days.

Security

Data is encrypted in transit, access is limited by account, and our Gmail access token is stored only on our servers. No system is perfectly secure; tell us at [security@actually.shop] if you find a problem.

Children

Actually is not for children under [13]. We do not knowingly collect information from them. Pieces you mark as bought for your kids are kept private and are never shared.

Your state privacy rights

[Counsel: add California (CCPA/CPRA) and other state disclosures: categories collected, sources, purposes, the right to know, delete, correct and opt out, no sale or sharing for cross-context ads, and how to submit requests.]

Changes

We'll post changes here and tell you in the app before important changes take effect.

Contact

[Company legal name], [mailing address]. [privacy@actually.shop]