Privacy Policy

Data controller

The data controller responsible for any processing described here is:

• Name: Gainify
• Contact: Support page

Who this policy covers

We publish two different kinds of software, and they handle data differently. This policy covers both:

• Our iOS apps, downloaded from the Apple App Store by individual users — these work on-device.
• Our Shopify apps, installed by merchants on their Shopify store — these run as a hosted service connected to the merchant’s store.
• This website, gainifyapps.com.

Our iOS apps store your data on your device

Our iOS apps are built to work on-device. The content you create and the data the app reads (for example device scans, settings and preferences) stays on your phone — we don’t run a server that receives it, and we don’t have user accounts for it. We don’t sell your personal data. The one exception is purchases: if an app offers a subscription or in-app purchase, that is handled by Apple and our subscription provider RevenueCat, as described below.

Some of our apps use Bluetooth and your local network to find nearby devices, trackers and earbuds and to list the devices on your Wi-Fi. This scanning runs on your device and the results are not sent to us.

Permissions our iOS apps may request

Where an app asks for a system permission, it is used only to provide the feature you requested and is processed on your device:

• Bluetooth — to find nearby Bluetooth devices, trackers and earbuds.
• Local Network — to list the devices on your Wi-Fi network.
• Location — only where iOS requires it to scan for nearby devices; your location is not stored or shared.

Microphone access

Some of our apps request access to your device’s microphone to provide their core function. Audio is processed entirely on your device. It is not transmitted to us or to any third party, and we have no servers that receive it. Where an app lets you save a recording, that file is stored only on your own device, remains under your control, and can be deleted by you at any time. Microphone access is only active while you are using the relevant feature.

Purchases and subscriptions (iOS)

If an iOS app offers a subscription or in-app purchase, the payment is processed by Apple through the App Store under Apple’s terms and privacy policy. We never receive your payment-card details.

To unlock features and keep your subscription status in sync we use RevenueCat, Inc., a US provider acting as our processor. When you buy or restore a purchase, RevenueCat receives purchase and receipt information, an app-generated user identifier (not your name or email) and basic device/app data, in order to validate the purchase and manage entitlements. This may be processed in the United States under appropriate safeguards. See Apple’s and RevenueCat’s privacy policies for details.

Our Shopify apps

When a merchant installs one of our Shopify apps, the app runs as a hosted service that connects to their Shopify store through Shopify’s official APIs, using only the access scopes shown on the installation screen, if any. The merchant can revoke that access at any time by uninstalling the app from their Shopify admin.

Our Shopify apps do not store merchant or shopper data on our own infrastructure. We hold no database of stores, no merchant settings and no access tokens. Where an app calls Shopify’s Admin API, it does so only while the merchant has the app open in their Shopify admin, using a short-lived token that is not retained after the request.

The settings a merchant configures — such as the content, colours and placement of anything the app displays — are saved in the merchant’s own Shopify theme, not on our servers, and are removed when the app is uninstalled.

Some of our apps write a small amount of app-owned data into the merchant’s own Shopify store — for example a flag recording which pricing plan the store is on, so the storefront knows which features to display. This contains no personal information, is stored in the merchant’s Shopify store rather than ours, and is removed with the app.

Where an app displays content on a storefront, that content is rendered from the merchant’s own settings. Our storefront code does not set cookies, does not build shopper profiles and does not send shopper personal data to us.

Shopify apps: our role, subprocessors and deletion

For the merchant’s own account and store data we are the data controller. Where an app processes personal data belonging to a merchant’s customers, we act as a processor on the merchant’s documented instructions — the merchant remains the controller and is responsible for their own privacy notice and any consent required from their shoppers.

We use a small number of subprocessors to run the service: Cloudflare as our hosting provider, and Shopify itself as the platform the app runs on. Subprocessors are bound by written terms and may process data outside the EU under appropriate safeguards such as standard contractual clauses.

We support Shopify’s mandatory privacy webhooks. Because we hold no merchant or customer data on our own systems, a customer data request returns nothing and a redaction request has nothing to delete; we acknowledge and respond within the periods Shopify requires. Uninstalling an app immediately ends our ability to access the store.

Billing for paid Shopify apps is handled by Shopify and appears on the merchant’s Shopify invoice. We never see or store payment-card details.

This website

gainifyapps.com is a static site. It has no accounts and no forms that send data to a server. We use Cloudflare Web Analytics, which is privacy-first and cookieless: it does not use cookies, does not fingerprint visitors, and does not collect personal data. As our hosting provider, Cloudflare may process limited technical data (such as IP address) to deliver and secure the site; see Cloudflare's privacy documentation.

With your consent, we also use Google Analytics (Google Ireland Limited / Google LLC). It loads only after you accept our cookie banner, sets cookies, and may transfer data to the United States under appropriate safeguards. You can withdraw consent at any time via “Cookie settings” in the footer. See our Cookie Policy for the details.

Legal basis

For our iOS apps (data processed only on your device) and the cookieless website analytics, our processing relies on your use of the software (performance of the service you requested) and our legitimate interest in operating a secure, functional site.

For purchases, subscriptions and our Shopify apps, the legal basis is performance of our contract with you or with the merchant (GDPR Art. 6(1)(b)), together with our legitimate interest in keeping the service secure and preventing abuse (Art. 6(1)(f)). Where we process a merchant’s customers’ personal data, we do so as a processor under Art. 28 on the merchant’s instructions.

For the optional Google Analytics on this website, the legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. Because iOS app data lives on your device, you can exercise most of these directly — by editing or deleting data in the app, or by deleting the app. For purchase data, you can also contact Apple or RevenueCat. For anything else, reach us via our Support page.

If you are a merchant using one of our Shopify apps, contact us and we will action your request; uninstalling the app removes our access and any app-owned data stored in your shop. If you are a shopper who bought from a store that uses one of our apps, the merchant is the controller of your data — please contact the store directly, and we will assist them as their processor.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Data retention

For our iOS apps we don’t keep your personal data on our own servers. Data created in an app stays until you delete it or remove the app. Purchase records held by Apple and RevenueCat are retained under their policies and as needed for accounting, tax and subscription management.

For our Shopify apps we hold no store data on our own systems, so there is nothing for us to retain or delete after uninstall. Settings and any app-owned data live in the merchant’s Shopify store and are removed with the app. We keep billing and tax records for the period required by law. Technical logs are kept for a short period for security and troubleshooting and then deleted.

Children's privacy

Our apps are not directed to children under 13, and we do not knowingly collect personal data from children. Some apps carry a higher age rating on the App Store — our wine-related apps are rated 18+ — and should only be used by people old enough for that rating. If you believe a child has provided personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about privacy? Reach us via our Support page.