1. Data Controller

Juan José Montiel Pérez
Email: info@tagfit.app
Location: Ireland

2. What data we collect

2.1 Data you provide directly

• Email address: To identify you and enable account access via magic link.
• Display name (optional): If you choose to add it to your profile.
• Inventory content: The spaces, categories, sets, and items you create in the app, including names, descriptions, photos, and voice notes you add.

2.2 Data generated automatically

• Device identifiers: To manage push notifications and error diagnostics.
• Error data: Technical information about app crashes to improve stability.
• Feature usage statistics: Generic usage events — for example, which screen was opened or whether a scan succeeded — linked to your account, so we can understand which features are used and improve them. These statistics never include the content of what you create, edit, or delete: no item names, descriptions, photos, or voice notes.
• Subscription data: Your premium subscription status (managed through Apple).
• Device location (optional): If you enable it, your approximate GPS coordinates are stored locally on your device and used to know which of the spaces you have chosen is closest to you, so the app (and its AI features) can suggest the most relevant space first when creating items. By default, this data stays on your device. If you opt in to location sharing in Settings, the approximate location of your spaces will be shared with the people you collaborate with for the same purpose.

3. Artificial intelligence features

TagFit includes features powered by artificial intelligence, such as creating items by voice or with the camera, identifying objects, describing garments from photos, and reading expiry dates when on-device recognition is not enough. When you use these features, we send to our servers only the data needed to answer your request, which may include:

• Photos you take — for example, of a garment or of an object you want the AI to identify or describe.
• Text extracted from product labels by the camera (OCR).
• The transcription of your voice description when creating items by voice.
• The names of your spaces and, if you have enabled location, an indication of which of your spaces is closest to you, so the AI can suggest where to store the item.

This data is processed on Microsoft Azure (Azure AI Foundry), acting as our data processor, and is used solely to generate the response you requested. It is not used to train AI models. For more information, see the Microsoft Privacy Statement and the Azure OpenAI data privacy documentation.

If you enable the optional "Help improve the app" program in Settings, when you correct an AI result we also receive the transcription and the AI response so we can improve recognition. You can disable this at any time in Settings.

4. Why we use your data

• Enable you to access your account (Contract performance)
• Sync your inventory across devices (Contract performance)
• Provide the AI features you request, such as identifying objects or creating items with AI (Contract performance)
• Manage your premium subscription (Contract performance)
• Suggest the nearest space when creating items, on-device by default (Legitimate interest)
• Share space location with collaborators if you opt in (Consent)
• Send you app notifications (Consent)
• Measure overall feature usage to improve the app (Legitimate interest)
• Diagnose and fix technical errors (Legitimate interest)
• Comply with legal obligations (Legal obligation)

5. How long we keep your data

• While your account is active: We retain all your data so you can use the service.
• 30 days after account deletion: We keep your data during a grace period to allow you to reactivate your account if you sign in again.
• After 30 days: Your data is permanently deleted from our systems.
• If your premium subscription lapses: the cloud copy of your data (spaces, photos and voice notes) is deleted 180 days after expiry. We notify you 30 days and 7 days in advance, and renewing at any time before the deletion keeps everything. The data stored locally on your device is never affected.
• Anonymous accounts (premium without an email): the whole account and its cloud data are deleted 180 days after the subscription expires.
• Usage statistics: Usage events are periodically purged from our systems.

6. Who we share your data with

We use the following service providers who may access your data as data processors:

• Supabase: Database storage and authentication (Ireland, EU)
• Microsoft Azure (Azure AI Foundry): AI processing of the photos, text, and transcriptions you send when using AI features (EU — Sweden Central)
• Expo: Push notifications (United States*)
• Apple Inc.: In-app purchases and subscriptions (United States*)
• Sentry: Error monitoring and stability (United States*)

*Transfers outside the European Union are made under appropriate safeguards pursuant to GDPR (Standard Contractual Clauses or EU-US Data Privacy Framework).

We do not sell or share your data with third parties for commercial or advertising purposes.

7. Your rights

As a user, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interest.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at info@tagfit.app. We will respond to your request within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.

8. Data security

We implement technical and organisational measures to protect your data:

• Encrypted communications via HTTPS/TLS.
• Secure authentication via magic links (no stored passwords).
• Database access restricted through Row Level Security policies.
• Primary data stored in data centres within the European Union.

9. User-generated content

TagFit allows you to store information about your personal belongings through text fields, images, and voice notes. You are responsible for the content you enter in the app.

This app is not designed to store special categories of personal data (health data, sexual orientation, religious beliefs, etc.). We recommend not entering this type of sensitive information.

10. Children

TagFit is not directed at children under 16 years of age. We do not knowingly collect data from children under this age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any significant changes through the app or by email. The last update date appears at the top of this document.

12. Contact

If you have questions about this privacy policy or about how we process your data, contact us at info@tagfit.app.