WorthIt

Privacy Policy

Last updated 15 August 2026

WorthIt helps you decide whether a product is worth buying. This policy explains exactly what we store to do that, who processes it on our behalf, and how to get it deleted.

Who we are

WorthIt is operated by Apexium Systems. For any privacy question, or to exercise any of the rights below, write to support@worthit.cloud.

What we collect

We collect only what the product needs to work. There is no advertising network in WorthIt, and we do not sell personal data.

  • Account details — your email address and, if you provide one, a display name. Sign-in is handled by Clerk; we store an identifier that links your account to your data.
  • Preferences — language, timezone, primary and secondary currency, theme, and your notification settings.
  • What you ask us to analyse — the product links, search terms and photos you submit, plus the resulting analyses, the products you save, and the items you add to a watchlist.
  • Product photos — if you scan by photo, the image is uploaded to private storage that only your account can read, and sent to our AI provider to identify the product.
  • Usage events — a record of actions such as running a scan, used to enforce free-plan limits and to understand which features are used.
  • Device push token — if you enable price-drop notifications, so we can deliver them.
  • Subscription status — whether your plan is active, via RevenueCat. Payments are processed by Apple, Google or our payment provider; we never receive or store your card details.

What we do not collect

  • We do not track your general browsing. The browser extension reads the page only on supported retailer product pages, and only to identify the product you are looking at.
  • We do not collect precise location.
  • We do not use advertising identifiers, and we do not share data with advertisers or data brokers.
  • We never receive your payment card details.

Why we are allowed to process it

Under the GDPR we rely on performance of a contract for everything needed to deliver the service you asked for (your account, your scans, your analyses and your subscription), on your consent for optional push notifications, and on our legitimate interest in keeping the service secure and within its usage limits.

Who processes data for us

These providers act on our instructions. Product names and search terms are shared with the review sources below; your identity is not.

  • Clerk — authentication and session management.
  • Microsoft Azure OpenAI — identifies products from photos and writes the assessment. Azure OpenAI does not use this content to train models.
  • YouTube Data API and Reddit API — we query these for public reviews and discussion about a product. Only the product name is sent.
  • RevenueCat — subscription and entitlement status.
  • Expo push service — delivery of price-drop notifications.
  • Apple and Google — app distribution and in-app purchases.

Where your data is stored

Your account data, scans and analyses are stored on servers operated by Apexium Systems in Portugal, inside the European Union. Some of the providers above process data outside the EU; where they do, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your account data for as long as your account exists. Uploaded scan photos are kept only as long as needed to identify the product and are removed afterwards. When you delete your account, your personal data is erased within 30 days, except records we are legally required to retain — such as purchase and tax records, which are kept for the statutory period.

Your rights

You can request access to your data, correction, erasure, a portable copy, or restriction of processing, and you can object to processing based on legitimate interest. Email support@worthit.cloud and we will respond within one month. You may also lodge a complaint with your national data protection authority — in Portugal, the CNPD.

You can delete your account and all associated data yourself at any time. See Delete your account.

Children

WorthIt is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we make a material change we will update the date at the top of this page and notify you in the app before the change takes effect.