Privacy Policy

1. Who we are

Warrantify.me ("Warrantify", "we", "us") is run by Harsh Sharma, a sole trader in the United Kingdom, trading as Warrantify.me and NeutronX Innovation. Under UK data protection law we are the controller of your personal data, which means we decide how it's used and are responsible for protecting it.

Contact us at hello@warrantify.me or by post at 9 Nearside, Northampton, NN5 5FJ, United Kingdom.

2. What we collect

• Your account: your name and email address. If you sign up with a password, our sign-in provider stores it only in a scrambled (hashed) form; we never see it. If you sign in with Google, Google shares your name, email address and profile picture with us.
• What you add: your products and their details (such as name, description, serial number, price, purchase date and where you bought it), their warranties (provider, dates and notes), and the photos and documents you upload. Receipts can contain other details, such as your address or part of a card number, so only upload what you're happy for us to store. Photos are stored resized, without the hidden details cameras add to them, such as where a photo was taken.
• Your settings: your reminder preferences, and a record of the reminders we've sent you.
• Your devices: if you use our Android app and allow notifications, a token that lets us send push notifications to that device.
• Technical information: your IP address, browser or device type and the times you use the service. We use it to keep the service secure (including a check on our sign-in forms that you're not a bot) and working.

We don't ask for, and don't want, sensitive information such as health details. We don't receive payment details: Warrantify is currently free.

3. How we use it, and our legal reasons

• To provide Warrantify: storing your products and documents, showing what's still covered, and sending reminders by email and push notification. We need to do this to provide the service you signed up for (performing our contract with you).
• To send account messages, such as confirming your email address, resetting your password or telling you about important changes. This is also part of providing the service.
• To keep Warrantify secure and working: preventing abuse and fraud, and finding and fixing problems. This is in our legitimate interest in running a safe, reliable service, and it protects you too.
• To meet legal obligations, such as answering a lawful request from the authorities.
• To fill in a new product's details for you: when you add receipts or photos while adding a product, they're sent to a reading service that suggests the product's name, serial number, price, purchase date, shop and warranty. You check the suggestions before saving, and can always type the details yourself. This is part of providing the service you asked for.
• To keep Warrantify for what it's for: every photo and document you add is checked by the same reading service to be about a product (a receipt, warranty paper, manual or photo of the thing itself), and what you write about a product is checked for illegal or harmful content. Files that aren't about a product aren't stored. We keep only a fingerprint of each checked file and what it was found to be, for a week, so the same file isn't checked twice. This is our legitimate interest in preventing misuse of the service.
• Push notifications are sent only if you allow them on your device (your consent). You can turn them off at any time in the app or in your phone's settings.

We don't use your data for advertising, sell it, build marketing profiles of you, make automated decisions about you that have legal or similar effects, or use it to train AI models. We won't send you marketing emails unless you ask for them.

4. Google sign-in

If you sign in with Google, we receive only your name, email address and profile picture, and use them only to create your account and sign you in. We don't access your Gmail, Google Drive, contacts or any other Google data. Warrantify's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share it with

We share your data only with the providers below, who process it on our behalf to run Warrantify. Each is bound by a contract to protect it and to use it only on our instructions.

• Supabase, Inc. (servers in Switzerland): sign-in and account security.
• Contabo GmbH (Germany): the servers, database and file storage that hold your account, products and documents.
• Cloudflare, Inc.: delivering our website, protecting it from attacks, the bot check on our sign-in forms, and storing database backups.
• Zoho Corporation (ZeptoMail, EU data centre): sending reminder emails.
• Google LLC: Google sign-in, if you use it; Firebase Cloud Messaging, which delivers push notifications to your phone; and the Gemini API, which reads the receipts and photos you add to suggest a product's details, and checks that the files and text you add are about your products. We don't keep the files and text sent for reading, and Google doesn't use them to improve its products.

We may also share data if the law requires it, to protect the rights and safety of our users or others, or with anyone who takes over Warrantify, who would have to keep to this policy. We'd tell you before your data moved to a new owner.

6. Where your data is stored

Your data is stored in Europe. Your account, products, photos and documents are on Contabo's servers in Germany, in the European Union; your sign-in details are held by Supabase in Switzerland; and reminder emails are sent from Zoho's EU data centre. UK law recognises both the EU and Switzerland as protecting personal data to the same standard as the UK, so no extra safeguards are needed for this.

A few services work globally and may handle some of your data elsewhere, including in the United States: Google (for Google sign-in, delivering push notifications and reading receipts) and Cloudflare (which delivers our website, runs the bot check and stores our database backups). When that happens, your data is protected by UK adequacy regulations (such as the UK–US data bridge) or by the UK's International Data Transfer Agreement or Addendum, which require the same level of protection as in the UK. Email us for a copy of the safeguards that apply.

7. How long we keep it

• We keep your data while your account is open.
• When you remove a product, warranty, photo or document, it's deleted from our live systems straight away.
• When you ask us to close your account, we delete your account and everything in it within 30 days. Copies in our backups are removed as the backups expire, within 90 days.
• Security logs are kept only as long as they're needed to protect the service, and no longer than 90 days.

We keep data for longer only if the law requires us to.

8. Your rights

Under UK data protection law, you have the right to:

• get a copy of your data;
• have it corrected if it's wrong;
• have it deleted;
• limit how we use it, or object to how we use it;
• receive it in a format you can take to another service;
• withdraw your consent where we rely on it, such as for push notifications.

To use any of these rights, email hello@warrantify.me. It's free, and we'll reply within one month. We may need to confirm it's you before acting on a request.

If you're unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Cookies and storage

We don't use advertising or analytics cookies, and this website sets no cookies of its own. The web app keeps you signed in using your browser's storage, which is cleared when you close the tab; the Android app keeps you signed in on your phone until you sign out. Cloudflare may set cookies that are strictly necessary for security and its bot check. Because nothing else is stored, we don't need to ask for your consent to cookies.

10. Keeping your data safe

All connections to Warrantify are encrypted (HTTPS). Your photos and documents are stored privately and are only ever shown to you when you're signed in, and access to our systems is restricted. No system is perfectly secure, but if a breach ever puts your data at risk, we'll tell you and the ICO as the law requires.

11. Children

You must be 13 or older to use Warrantify, and if you're under 18 you need a parent's or guardian's permission. We don't knowingly collect data from children under 13. If you believe a child under 13 has given us their data, email hello@warrantify.me and we'll delete it.

12. Changes to this policy

When we update this policy, we'll change the date at the top of this page. If a change is important, we'll email you before it takes effect.

13. Contact

Questions about your privacy or this policy? Email hello@warrantify.me or write to Harsh Sharma, Warrantify.me, 9 Nearside, Northampton, NN5 5FJ, United Kingdom.