Privacy Policy

What we collect

Account details: your Google account email and the name you sign in with, and the name you pick for your shopping email.

Gmail, only with your permission: we look at the sender, subject and preview of emails to find ones about orders. We read the full text only of emails we have judged to be shopping emails (orders, shipping, deliveries, returns, refunds, cancellations) and loyalty or card-reward emails about points.

What we keep from those emails: store, order number, dates, order total, shipping and delivery status, return windows, and for each product its name, brand, size, color, price, product photo link and store page link. For card rewards, only the points or cash back balance, never balances owed, statements or spending.

What we never keep: health, pharmacy, telehealth, testing, adult, insurance, legal or banking emails; eyewear; carrier notices; phone and cable bills; restaurants; kids' teams, camps and school sign-ups. When we are unsure, we skip the email.

Receipts you photograph (stores, restaurants, groceries): the photo is sent to our AI provider to read the place, date and products, then discarded. We keep only what you confirm (place, date, products, prices and return window), never card or payment details, and we don't store the photo.

Your shopping email: mail sent to your Actually shopping address is forwarded to your inbox. We screen it the same way and keep only the order details above.

Things you add: your profile photo, notes on pieces, outfits, saved pieces, who you follow, brands you follow, points you type in, and your choices about who each piece is for.

Photos of you wearing a piece, if you add them: we shrink each photo on your phone and remove its hidden details (like where and when it was taken) before it is uploaded. We store it and show it only where you share that piece: your feed, to the people who follow you, and on that piece's share link. We delete it when you remove it or delete your data or account. No AI is run on these photos, and we never use them in ads or marketing without asking you separately.

Usage: which sign-up steps you completed, when you open the app, and when you use a few features (like copying your shopping email or sending an invite), counted by step name only, plus basic page visit counts from our hosting provider's analytics, which does not use cookies.

How you found us: if you came from a link with a campaign tag, a creator's code or a friend's invite, we save that tag or code on your account when you sign up, so we can count which links bring people in. If a friend invited you, we save who it was.

Errors: if something breaks, the error message, the screen it happened on and your device type, so we can fix it. Never the contents of your emails.

Shared link taps: when someone taps "Find it" on a piece a friend shared, we record that the link was tapped, when, and the device type (iPhone, Android or computer). Not who tapped it. We use this to count which shared pieces people shop and, later, to credit the friend who shared it.

Earnings from your shares: when a friend buys through a piece you shared, we record the store, date, the amount you earned and its status (pending, ready, returned, paid), so we can show and pay it. These records stay if you delete your orders and closet, because they are money owed to you; deleting your account removes them. Never who bought it or what else they bought.

Store pages: for pieces you share, we look up the piece's page on the store's website so friends land on it.

Sponsored products: when you see a sponsored product from a brand you follow, we count that you saw it (once a day) and when you tap a product, so we can tell the brand how many people saw and tapped it. Brands get totals only, never who you are.

Brand offers and Actually credit: when you add an offer from a brand you follow, we record that you added it. To confirm it, we look for your next order from that brand among the order emails Actually already reads for you, and record the order, which store sent the email and when (as your email provider checked it), its total when the email shows one, and whether it was returned, refunded or cancelled. When you keep a piece for a brand's offer, we record which piece. We keep a record of the credit you earn (brand, amount, why, and pending, ready, paid or void) so we can show and pay it. These records stay if you delete your orders and closet, because they are money owed to you; deleting your account removes them.

Quick questions: if you answer a brand's quick question, we record your answer so you can't be paid twice. Brands and our team see only how many people chose each answer, never who.

Feedback: if you send feedback, what you write or say (turned into text on your phone), an optional screenshot you choose, the screen you came from and your device type. Only the team sees it.

How we use it

To run Actually for you: build your closet and order list, track deliveries and return windows, find points, estimate what pieces are worth and show your feed.

So friends see what you choose to share. Shared pieces and outfits show the photo, brand, name, store link and your note, and a shared piece shows your photo wearing it if you added one. Never prices, sizes or order details.

To keep the service safe, fix problems and understand, in aggregate, how people use it.

Sponsored products: some brands pay to show new products in Actually, marked "Sponsored". We choose them only from brands you follow. Never from your email, your orders or your closet. Unfollow a brand and its sponsored products stop.

Offers, keep offers and quick questions from brands you follow are marked "Sponsored" too. Your order emails are used only to confirm an offer you chose to add, never to pick what you're shown. We tell brands totals (how many added, bought, kept or answered), never who.

We do not sell your personal information, and we do not use your Gmail data for advertising.

Google user data

Actually's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

What we read: with your permission, Actually has read-only access to your Gmail. It can't send, delete or change your email. We look at the sender, subject and preview of emails to find ones about shopping, and read the full text only of order, shipping, delivery, return, refund and cancellation emails and points emails.

Why: only to give you Actually's features: your order list and closet, deliveries, return windows, points you can still use, and confirming a brand offer you chose to add. Never for ads, and never sold.

What we keep, and for how long: the order details listed above, plus each email's subject line, the sender's web address, its date and a reference so you can open it in Gmail. We don't store your emails. Email text is sent to our AI provider to pull out the order details and is not kept by us after that. We keep the details until you disconnect Gmail or delete your data or account.

How to delete it: Settings > Disconnect Gmail cancels our access at Google and deletes the orders, pieces and points we found in your Gmail. Orders from your shopping email, scanned receipts and points you typed stay until you use Delete my orders and closet. Delete my account removes everything. If you remove our access at myaccount.google.com/permissions instead, what we already saved stays until you delete it in Settings.

We do not use Gmail data, or anything derived from it, to develop, improve or train general AI or machine learning models, and our AI provider does not train on it. [Counsel: confirm the AI provider's retention period for email text it processes.]

Who we share it with

Service providers that run Actually for us, under contracts that limit how they use your data: database and storage hosting [Supabase], app hosting and visit counts [Vercel], AI that reads order emails and receipt photos [Anthropic], and email forwarding for your shopping address [Resend]. [Counsel: confirm each provider's data processing terms, including that the AI provider does not train on our data.]

Friends and anyone with your profile link see only what you choose to share.

Invites: once you send or copy your invite link, anyone with it can see your first name, how many pieces you share on your feed, and the photo, brand and name of a few of them. Never prices, sizes or order details. When a friend joins from your invite, you follow each other, and you can unfollow anytime.

Links you share: when you share an outfit or a piece by link, anyone with the link can see its photo, brand, name, your note, your first name and, for a piece, your photo wearing it if you added one. Never prices, sizes or order details. You can turn a link off any time.

Styling: to suggest outfits, we send the type, brand, name and color of your pieces to our AI provider. Never your emails.

Stores you tap through to may receive that visit. When cash back is live, a shopping partner may learn that a purchase came from Actually.

If the law requires it, or to protect people's safety, or as part of a sale or merger of our business, with notice where required.

Your choices

Disconnect Gmail anytime in Settings. We stop reading, cancel our access at Google, and delete the orders, pieces and points we found in your Gmail.

Remove a photo of you wearing a piece anytime from that piece in your closet.

Delete your data (orders, closet, points, saved pieces and outfits, and photos of you wearing pieces) or your whole account anytime in Settings. Deleting your account also deletes your profile photo, cut-out photos and photos of you wearing pieces.

Everything you share is private until you choose to share it, and pieces for kids or others are always private.

You can also email [privacy@actually.shop] to ask what we hold about you, to correct it, or to delete it.

How long we keep it

We keep your data while your account is open. What we found in your Gmail is kept until you disconnect Gmail. When you disconnect Gmail or delete data or your account, we delete it from our live systems right away and from backups within [30] days.

Records of earnings and credit you're owed stay after you disconnect Gmail or delete your orders and closet, because they are money owed to you. Deleting your account removes them.

Security

Data is encrypted in transit, access is limited by account, and our Gmail access is stored only on our servers, encrypted, with the key kept apart from the data. No system is perfectly secure; tell us at [security@actually.shop] if you find a problem.

Children

Actually is not for children under [13]. We do not knowingly collect information from them. Pieces you mark as bought for your kids are kept private and are never shared.

Your state privacy rights

[Counsel: add California (CCPA/CPRA) and other state disclosures: categories collected, sources, purposes, the right to know, delete, correct and opt out, no sale or sharing for cross-context ads, and how to submit requests.]

Changes

We'll post changes here and tell you in the app before important changes take effect.

Contact

[Company legal name], [mailing address]. [privacy@actually.shop]