1. Who we are
This Privacy Policy explains how Prime Root Labs (“Retroza,” “we,” “us,” or “our”) handles information when you use the Retroza mobile application, website, and related services (collectively, the “Services”).
2. Information we collect
Information you provide
- Photos and user content: clothing photos, scan results, collection items, folders, wishlist items, and notes you choose to create.
- Account information: Retroza begins with an anonymous account. If you choose Sign in with Apple, we may receive your Apple account identifier and, depending on your Apple choices, a name and email address or private relay email.
- Support communications: information you send when contacting us for help or feedback.
Information collected through use
- Account and installation identifiers used to operate accounts, synchronize data, prevent abuse, and enforce free-scan limits. For free-scan limits, we store a server-keyed fingerprint of the local installation identifier, not the raw value. Separate account, installation, and device identifiers are processed by the subscription and measurement services described below.
- Scan status, usage counts, timestamps, app configuration, error information, and service diagnostics.
- Subscription and purchase information, including product and transaction identifiers, trial and subscription status, purchase and renewal dates, price, currency, and entitlement expiration. Apple processes payments; we do not receive your payment card details.
- Advertising-measurement information: app installs and launches, account and AppsFlyer installation identifiers, Apple’s vendor identifier (IDFV), IP address and approximate location derived from it, device model, operating system, app version, language, tracking-permission status, and technical performance data. Apple’s advertising identifier (IDFA) is included only when you permit tracking.
With your iOS tracking permission, advertising identifiers and events may be matched with information from other companies’ apps and services to measure our ads. Without that permission, IDFA is not collected; subscription processing, app analytics, Apple’s aggregated attribution, and supported privacy-preserving measurement can still operate.
3. How we use information
We use information to:
- identify and analyze items submitted for scanning;
- save and synchronize your collection, wishlist, scan history, images, and account settings;
- estimate item characteristics and value ranges and find relevant marketplace comparisons;
- manage free-scan limits, subscriptions, restores, and Pro access;
- provide support, prevent fraud or misuse, secure the Services, and improve reliability;
- understand which Facebook and Instagram ads lead to installs, trials, subscriptions, and revenue, and improve our campaigns;
- comply with legal obligations and protect the rights, safety, and integrity of users and the Services.
4. AI and third-party processing
To provide scans, Retroza sends the image you select and related request data through our secure backend to an AI service provider. These providers process the content to return an analysis.
Retroza may send derived search text—such as likely brand, category, or era, but not the scan image—to eBay to find similar listings. Our cloud service providers support account management, database hosting, and private image storage in an EU region. RevenueCat processes App Store subscription and entitlement information.
We use AppsFlyer to measure installs and app activity. RevenueCat sends trial, subscription, and revenue events to AppsFlyer with identifiers that associate them with your app installation. AppsFlyer shares these events with Meta to measure and improve our Facebook and Instagram ads. This can include account, installation, and device identifiers, IP address, device information, and purchase value. IDFA is shared only with your tracking permission. Aggregated measurement through Apple’s SKAdNetwork and Meta can operate without IDFA.
Photos, scan content, collection items, and support messages are not sent through these advertising-measurement integrations. We do not send your email or phone number to Meta for ad matching. Learn more in the AppsFlyer Services Privacy Policy, RevenueCat Privacy Policy, and Meta Privacy Policy.
These providers handle information under their own agreements and privacy commitments. We share only what is reasonably necessary to provide the applicable feature.
5. Storage and security
Collection and scan data are stored in our hosted database. Images are kept in a private, owner-scoped storage area and are accessed through authenticated requests or short-lived signed links. We use administrative access controls, multi-factor authentication for administrative tools, and audit logging for administrative changes.
No security measure is perfect. We work to protect information using reasonable technical and organizational measures, but cannot guarantee absolute security.
6. Retention
Active account content is kept until you delete individual content or your account, unless a longer period is required for security, legal, or dispute purposes. Empty anonymous accounts that have been inactive for at least 30 days may be deleted.
When an account is deleted, we remove its collection, scan records, and stored images. A server-keyed free-quota counter may be retained to prevent repeated reactivation of a one-time free allowance. Limited deletion and security audit records may also be retained.
7. Your choices and rights
- Advertising tracking:choose whether to allow tracking when iOS asks, or change your choice in Settings → Privacy & Security → Tracking → Retroza. Declining does not prevent scans, purchases, restores, or Pro access. It does not disable the operational and aggregated measurement described above.
- Camera and photo access: manage permissions in iOS Settings. Retroza accesses only the photos you choose for scanning.
- Account deletion: use Settings → Account → Delete Account in Retroza to permanently remove your account and saved content.
- Subscription management: deleting a Retroza account does not cancel Apple billing. Manage or cancel a subscription in Apple ID → Subscriptions.
- Access, correction, or deletion: contact us to request assistance with applicable privacy rights.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to appeal a denied request. We may need to verify your identity before completing a request.
8. Website data and cookies
The Retroza marketing website does not currently use advertising trackers or non-essential analytics cookies. Our hosting provider may process standard request data, such as IP address, browser type, timestamps, and security logs, to deliver and protect the website.
9. Children
Retroza is not directed to children under 13, or the minimum age required in their country. We do not knowingly collect personal information from children below that age. Contact us if you believe a child has provided personal information.
10. International transfers
Our providers may process information in countries other than yours. Where required, we use appropriate safeguards for international data transfers.
11. Changes to this policy
We may update this Privacy Policy to reflect product, legal, or operational changes. We will update the date above and provide additional notice when required by law.
12. Contact us
Questions or privacy requests can be sent to contact@retroza.app.