Privacy Policy

Last updated: April 16, 2026

Shelfie ("we", "the app") analyzes photos of retail store shelves using AI and generates suggested restock orders. This policy explains what data we collect, how we use it, and your rights.

What we collect

Email address

We collect your email address when you sign in. It's used solely to identify your account so you can access your reports across devices. We don't send marketing emails — only one-time sign-in links.

Shelf photos

When you submit an analysis, your photos are sent to the AI provider you selected (Google Gemini or OpenAI) for processing. Shelfie does not store your photos after the analysis is complete. They are held in memory only for the duration of the AI call and then discarded.

Reports

The generated reports (summary, observations, recommendations, and CSV order suggestions) are stored on our server so you can review past analyses. You can delete any report at any time from the app.

API keys

If you provide an API key for Gemini or OpenAI, it's stored on our server tied to your account. It's used only to authenticate with the AI provider on your behalf. You can reset or delete your key at any time from Settings.

Business description

The optional business description you provide (e.g. "small organic grocery store") is stored with your account and included in AI prompts to tailor recommendations. You can change or clear it at any time.

What we don't do

• We don't track you across apps or websites.
• We don't use advertising trackers, analytics SDKs, or fingerprinting.
• We don't sell, rent, or share your data with third parties.
• We don't use your photos or reports to train AI models.

Third-party services

Your photos are sent to the AI provider you choose (Google or OpenAI) for analysis. Their own privacy policies apply to how they handle the data they receive:

• Google Privacy Policy
• OpenAI Privacy Policy

Data storage and security

Your account data, reports, and API keys are stored on a server hosted on Amazon Web Services (AWS) in the US West (Oregon) region. All communication between the app and the server is encrypted via HTTPS. API keys are stored server-side and never transmitted back to the app after being saved.

Data retention and deletion

Reports are kept until you delete them. You can delete individual reports from the app at any time. To delete your entire account and all associated data, contact us at the email below.

Children

Shelfie is not directed at children under 13. We don't knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects when the most recent changes were made.

Contact

Questions about this policy? Email privacy@dkgi.io.