Privacy Policy

SproutCloset ("we," "our," or "the app") is designed with privacy as a core principle. This Privacy Policy explains how SproutCloset handles information when you use the app.

Summary

SproutCloset does not collect, sell, or share the personal content you add to the app. Children's profiles, names, photos, clothing items, sizes, notes, preferences, and settings are stored locally on your device.

SproutCloset does not operate user accounts, logins, advertising, tracking technologies, or analytics tools. The only information transmitted outside your device relates to App Store or Google Play purchase validation through RevenueCat, and — only if you opt in — optional Cross-Device Sync through Supabase, both described below.

Information Stored Locally on Your Device

Any information you enter into SproutCloset — including children's profiles, photos, clothing items, sizes, notes, preferences, and settings — is stored locally on your device using the device's local storage.

We do not have access to this information. It is not uploaded to our servers, and we do not sell, share, analyze, or use it for advertising.

You can delete individual children, items, or photos at any time. You can also remove all app data by using the app's reset option or by uninstalling the app.

Information We Do Not Collect

SproutCloset does not collect your name, email address, location, contacts, device contacts, advertising identifiers, browsing history, or usage analytics.

SproutCloset does not use advertising SDKs, tracking SDKs, or analytics SDKs.

Camera Access

SproutCloset requests access to your device's camera only when you explicitly tap the camera button while adding or editing a child profile or clothing item.

The camera is used only to capture a still photo that you choose to attach to that specific child profile or item. The photo is saved only to the app's private local storage on your device.

SproutCloset does not:

• record video;
• access the camera in the background;
• stream camera content;
• use camera images for facial recognition, biometric identification, age estimation, analytics, advertising, or machine-learning training;
• upload camera images to our servers, except as part of the optional Cross-Device Sync feature you choose to enable; or
• share camera images with third parties.

You may decline camera access and continue using SproutCloset. You may revoke camera access at any time in your device settings.

Photo Library Access

SproutCloset requests photo library access only when you explicitly choose to select an existing photo for a child profile or clothing item.

Only the photo you select is imported into the app and stored locally on your device. SproutCloset does not scan, browse, upload, or analyze your photo library. The app does not access photos you do not select.

On iOS, SproutCloset supports Limited Photos access. If you grant limited access, the app will only be able to access the photos you choose to make available.

Selected photos are not used for advertising, analytics, facial recognition, biometric identification, age estimation, or AI/machine-learning training. Selected photos are not shared with third parties.

You may revoke or change photo library access at any time in your device settings.

Saving Photos to Your Library

If you choose to export, save, or share a photo from SproutCloset, the app may request permission to add that photo to your photo library. This occurs only in response to an action you take, and only the file you choose is saved.

Optional Cross-Device Sync (Account)

SproutCloset offers an optional Cross-Device Sync feature. This feature is off by default and only activates if you choose to create an account.

To use Cross-Device Sync you provide an email address and a password. We use Supabase, an independent third-party service provider, to host the account system and store an encrypted snapshot of the App data you choose to sync. Supabase processes the email address, a hashed password, and an authentication session token on our behalf.

The synced snapshot contains the data you have entered in the App: children profile fields (name, birth date, gender, sizes), clothing/shoe item fields, custom item types, size categories, your in-app preferences, and the photos you have attached to children and items so that they appear on every family device you sign in to. Photos are automatically compressed on-device before upload (resized to a maximum of 1280 pixels on the long edge and saved as a quality-optimized JPEG) so each image is a small file, typically a few tens to a couple of hundred kilobytes, and only new or changed photos are transmitted on subsequent syncs.

Cross-Device Sync does not upload:

• device identifiers, advertising identifiers, or location;
• contacts or any other photos from your photo library beyond those you have attached inside the App;
• any data outside the App.

We do not sell, rent, or share your account information or synced snapshot with advertisers or data brokers. We do not use it for advertising, profiling, or AI training.

You can sign out, change your account email address (verified via a confirmation link sent to the new address), change your password (which requires entering your current password and meets our strength rules: at least 8 characters including uppercase, lowercase, and a number), upload your local data to the cloud, replace your local data with the cloud snapshot, merge local and cloud data, delete only the cloud snapshot, or delete the entire account at any time from Settings → Cross-Device Sync & Backup. Deleting your account removes the cloud snapshot — including any synced photos — from our Supabase project; authentication credentials may take up to thirty (30) days to be fully purged from our authentication provider, and you may contact us to request immediate removal.

See Supabase's privacy policy at supabase.com/privacy.

Optional Marketing Emails

If you create a Cross-Device Sync account you can optionally opt in to receive occasional tips and product updates from SproutCloset by email. The toggle is off by default and is presented at signup and again in Settings → Cross-Device Sync & Backup, where you can turn it off at any time. When you opt in (or later change your choice) we store, alongside your account, only: your opt-in status, the timestamp of your choice, the source of the choice (e.g. "signup" or "settings"), and the consent version. We do not store any other profile or behavioural information for marketing purposes.

Marketing emails are limited to occasional tips and product updates. We do not sell or share your email address with advertisers or data brokers, and we do not use it for cross-context behavioural advertising. Every marketing email includes an unsubscribe link, and you can withdraw consent at any time from inside the app. Withdrawing consent does not affect transactional emails required to operate the service, such as email verification, password resets, and security notices.

If you delete your Cross-Device Sync account, your marketing-consent record is removed together with the rest of your account data (subject to the same up-to-thirty-day purge window described above for authentication credentials).

Backup and Import

SproutCloset provides a local Backup & Import feature so you can export your app data as a file and restore it later.

The export file is saved wherever you choose, such as your device's Files app, iCloud Drive, Google Drive, or another location made available through your device's system share options.

We do not receive, store, or process backup files. If you choose to store a backup file with a third-party cloud provider, that provider's own privacy policy and security practices apply.

In-App Purchases

SproutCloset may offer subscriptions or one-time purchases, such as Annual Premium or Lifetime Premium. Purchases are processed by Apple through the App Store or by Google through Google Play.

We do not receive or store your payment card information, billing address, tax information, or App Store / Google Play account credentials.

To validate purchases, restore purchases, and manage subscription entitlements, SproutCloset uses RevenueCat. RevenueCat may receive purchase-related information, such as an anonymous app user identifier, product identifier, purchase status, and receipt or transaction information.

SproutCloset does not send RevenueCat your name, email address, children's information, photos, clothing items, notes, or any other content stored in the app.

See RevenueCat's privacy policy at revenuecat.com/privacy.

Children's Privacy

SproutCloset is intended for parents and guardians to organize their own family's clothing. The app is not directed to children under 13 and is not intended for use by children.

Parents or guardians may choose to enter information about their own children, such as a name, birth date, gender, photo, clothing sizes, and clothing items. This information is stored locally on the parent or guardian's device and is only transmitted off-device if the parent or guardian opts in to Cross-Device Sync.

We do not knowingly collect personal information directly from children. If you believe a child has provided information to us, please contact us.

Data Retention and Deletion

Because SproutCloset stores app content locally on your device, retention is controlled by you. You can delete individual children, items, photos, or other app content at any time. You can also clear app data through the app's reset option, where available, or delete all app data by uninstalling the app.

If you have enabled Cross-Device Sync, you can additionally delete the cloud snapshot — including synced photos — or your entire account at any time from Settings → Cross-Device Sync & Backup.

Purchase records may continue to be maintained by Apple, Google, and RevenueCat as needed for purchase validation, subscription management, refunds, accounting, fraud prevention, and legal compliance.

Data Security

SproutCloset relies on the security features of your device, including operating system app sandboxing and device encryption when enabled.

Cross-Device Sync data is transmitted to and from Supabase over TLS (HTTPS). Synced snapshots and photos are stored in your private Supabase project and access is restricted by row-level and bucket-level security so that only your authenticated account can read or write them.

You are responsible for protecting access to your device, your account password, and any backup files you choose to export.

Third-Party Services

SproutCloset does not use advertising networks, analytics networks, or tracking tools.

The only third-party services involved in normal app operation are:

• Apple, for App Store distribution on iOS;
• Google, for Google Play distribution on Android;
• Supabase, only if you opt in to Cross-Device Sync, for account hosting and snapshot/photo storage;
• RevenueCat, for purchase validation, subscription entitlement management, and purchase restoration.

Your Choices

You can:

• use SproutCloset without creating an account;
• use SproutCloset without adding photos;
• decline camera or photo library access;
• revoke camera or photo library access in your device settings;
• delete individual app content at any time;
• reset app data where available;
• delete your Cross-Device Sync snapshot or account at any time; and
• uninstall the app to remove locally stored app data from your device.

Your Rights (GDPR / UK GDPR / CCPA)

Depending on where you live, you may have rights under data protection laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), or similar laws. These rights may include the right to access, correct, delete, port, or restrict processing of your personal information, and the right to withdraw consent.

Because SproutCloset stores your family content locally on your device, you can exercise most of these rights directly inside the app — by editing or deleting children, items, or photos, by exporting a backup file, or by resetting all app data. If you have created a Cross-Device Sync account, you can additionally download, delete the cloud snapshot, or delete the entire account from Settings → Cross-Device Sync & Backup. For any other request, contact us at the email below.

We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA. We do not use personal information for cross-context behavioral advertising.

International Transfers

If you opt in to Cross-Device Sync, your account information, synced snapshot, and synced photos may be processed by Supabase on servers located outside your country of residence, including in the United States. Where required by law, such transfers are protected by appropriate safeguards (such as the EU Standard Contractual Clauses) maintained by Supabase.

Data Breach Notification

In the unlikely event of a security incident affecting your Cross-Device Sync account, snapshot, or photos, we will notify affected users and the relevant supervisory authorities where required by law and within the timeframes required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version. Continued use of SproutCloset after changes take effect means you accept the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

• hello@sproutcloset.app
• www.sproutcloset.app