StoleIt (stoleit.app) helps you scan a product in a store and compare prices. This policy explains what we collect, why, and the choices you have. We collect as little as we can to make the app work.
The short version
- You can scan without an account.
- The camera only reads barcodes on your phone. Images are never uploaded.
- Location is off unless you turn it on, is rounded to about half a mile, and is never stored.
- We don't sell your information or use it for targeted ads. There are no ad trackers or session recording.
- You can delete your account and its data at any time from the Account page.
What we collect and why
- Barcodes you scan. Used to look up the product and its prices. Product details and prices are kept in a shared cache so repeat lookups are faster; the cache isn't linked to you.
- Approximate location (optional). If you turn on “Nearby store prices,” your phone rounds your location to about 1 km before sending it. We use it for that one lookup to find nearby stores, share it with Kroger to get store prices, and don't save it.
- Your email (optional). If you create an account, we use your email only to sign you in.
- What you save. Saved items, shelf prices you enter, and purchases you log with “I bought it” are stored in your account so you can see them on any device. Without an account, your savings total is kept only on your phone.
- Retailer link taps. When you tap “View at …” we record the retailer, the product, the time, and your account if you're signed in. For retailers where we have an affiliate arrangement, we pass a random click number to that retailer's affiliate network so it can confirm a purchase for commission. We don't send your name or email.
- Technical data. A sign-in cookie keeps you signed in. Your phone also stores a few preferences (like whether nearby prices are on). Our hosting provider keeps standard server logs, such as IP addresses, for security and troubleshooting.
Who we share it with
We share only what each service needs to do its job:
- Supabase — our database and sign-in provider.
- Vercel — hosts the app.
- Resend — sends sign-in emails.
- ShopSavvy, Best Buy and Kroger — receive the barcode you scanned to return product and price data. Kroger also receives your rounded location if nearby prices are on.
- Retailers and affiliate networks — when you tap a retailer link, you go to their site, and their own privacy policies apply.
We may also disclose information if the law requires it.
How long we keep it
Account data (email, saved items, purchases) is kept until you delete it or your account. Records of retailer link taps are kept for accounting with affiliate programs; when you delete your account they're no longer linked to you.
Your choices
- Use StoleIt without an account.
- Turn nearby store prices off at any time on the Scan screen.
- Remove saved items and purchases individually.
- Delete your account and its saved items and purchases from the Account page. This can't be undone.
- Email us to ask what we hold about you or to correct it.
Children
StoleIt isn't meant for children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app.