PRIVACY POLICY

Bricktelligence collects what it needs to run the product and nothing else. We don't sell your data, we don't run ads, and we don't share your collection with anyone for marketing purposes. This document is written in plain language — no weasel words.

• Account info: email address, password (hashed by Supabase — we never see it).
• Collection data: set names, statuses, bag events, notes, photos you upload.
• Usage data: which features you use, when you last built (for pace tracking).
• Device info: app version, OS (for crash reporting only).
• Payment info: processed by Stripe — we never see your card number.

• We don't sell your data.
• We don't show ads.
• We don't share your data with the LEGO Group or any third party for marketing.
• We don't track you across other sites.

• To power Bricktelligence features (recommendations, bag tracking, the Brickarchivist).
• To send product updates if you opt in.
• To process payments via Stripe.
• To improve the product based on aggregate usage patterns.

• Supabase — database, authentication, file storage. EU and US data centers.
• Anthropic — AI features (The Brickarchivist). Prompts include your collection data; box-scan and built-set photos are sent for inference.
• Google (Gemini AI) — AI features for vision scanning and the annual review. Box-scan photos are sent for inference.
• Stripe— payment processing for web subscriptions. Stripe's privacy policy governs payment data.
• RevenueCat — mobile subscription management for iOS and Android in-app purchases. Receives your account ID and subscription state.
• Resend — transactional email delivery (welcome, weekly digest, build-complete, account notifications).
• Sentry — error monitoring. Receives crash and error reports including anonymized session and device metadata.
• Rebrickable — LEGO set data. Read-only, no personal data shared.
• Vercel — web hosting.

Your data is retained as long as your account is active. If you delete your account, all personal data is removed within 30 days. Anonymized aggregate stats may be retained for product improvement.

• Access: request a copy of your data — email info@bricktelligence.com.
• Correction: update your data in account settings.
• Deletion: delete your account in settings, request deletion publicly at bricktelligence.com/delete-account, or email us. We will delete all your data within 30 days.
• Portability: request your data in JSON format.
• EU / European users: you have additional rights under GDPR. We are a data controller.

• Session cookie for authentication (required).
• Auth provider cookie (short-lived, analytics only).
• No tracking cookies, no advertising cookies.

Bricktelligence is not directed at children under 13. We do not knowingly collect data from children.

Email: info@bricktelligence.com. We respond within 48 hours.