Privacy Policy

This Privacy Policy explains how GunDex (“we”, “our”, or “us”) collects, uses, and protects personal information when you use the GunDex mobile app, website, and related services (collectively, the “Service”).

1. Information We Collect

• Account Information: email address, username, and profile details you provide.
• Usage Information: basic technical information required to operate, understand, and improve the Service, including app interactions, screen views, app and device information, approximate location derived from IP address, and a pseudonymous Firebase app-instance identifier.
• Subscription and Purchase Information: product, price, currency, purchase date, renewal status, cancellation status, expiration status, billing status, platform, transaction identifiers, and a RevenueCat app-user identifier.
• Communications: messages you send when contacting support.

2. How We Use Your Information

• Provide and maintain app features
• Authenticate users and manage accounts
• Provide customer support
• Improve security and reliability
• Measure feature adoption, onboarding completion, collection engagement, subscription performance, and product reliability
• Comply with legal obligations

Legal Basis for Processing (EU/UK)

Where required by applicable data protection laws, we process personal data under the following legal bases:

• Contractual necessity: to provide the Service
• Consent: where you choose to provide it
• Legitimate interests: to secure, understand, and improve the Service
• Legal obligation: to comply with applicable laws

3. Data Storage and Security

We use reasonable administrative and technical safeguards to protect your information. No system is completely secure.

We retain personal data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Data is securely deleted or anonymized when no longer required.

4. Sharing of Information

We do not sell personal data. Information is shared only when necessary to operate the Service, including with:

• Supabase (authentication and application-data services)
• Firebase Analytics, provided by Google (app analytics and product-reliability reporting)
• RevenueCat (subscription, purchase, and entitlement management)
• Apple App Store and Google Play (payment processing)
• Legal authorities when required by law

Supabase remains GunDex’s authentication and application-data provider. RevenueCat remains the authority for subscription status and purchase lifecycle information.

5. Analytics and Tracking

GunDex uses Firebase Analytics to understand app usage, onboarding, feature engagement, subscription conversion, and product reliability. Analytics information is used to measure feature adoption, onboarding completion, collection engagement, subscription performance, and product reliability.

Firebase Analytics

Firebase Analytics may process app interactions, screen views, app and device information, approximate location derived from IP address, and a pseudonymous Firebase app-instance identifier. This information is pseudonymous and is not completely anonymous.

After authentication, GunDex associates analytics activity with the user’s Supabase UUID. GunDex does not use the user’s email, name, username, or phone number as the analytics user ID.

GunDex does not intentionally send raw search queries, collection notes, authentication tokens, FCM tokens, Firebase installation IDs, or other user-entered content to analytics.

For more information, see Google’s Privacy Policy and the Firebase privacy documentation.

RevenueCat

GunDex uses RevenueCat to manage subscriptions and purchases. RevenueCat may process the product, price, currency, purchase date, renewal status, cancellation status, expiration status, billing status, platform, transaction identifiers, and RevenueCat app-user identifier.

RevenueCat sends verified subscription lifecycle events to Firebase/Google Analytics for reporting. GunDex does not enable hashed-email advertising matching and does not intentionally send customer email addresses to Google Analytics through RevenueCat.

For more information, see RevenueCat’s Privacy Policy. GunDex does not use third-party advertising SDKs or cross-app tracking technologies for advertising, and it does not display advertisements.

6. Your Rights and Choices

• Access, correct, or delete your personal data
• Request restriction or objection to processing
• Request data portability where applicable

To exercise applicable privacy rights, contact privacy@gundex.io. We will respond as required by applicable law, subject to permitted legal and operational retention.

To permanently delete your GunDex account and associated application data in the app, go to Settings, select Edit Profile, scroll down, and tap Delete Account. This deletes your profile and stored user data, including collections, favorites, folders, and preferences. Account deletion cannot be undone, and GunDex does not keep backups of user data after deletion.

If you cannot access the app or need manual assistance, email support@gundex.io and include the email linked to your GunDex account so we can verify and process the request. You can also review the complete account-deletion instructions. Uninstalling the app removes locally stored data but does not delete your GunDex account.

7. Children’s Privacy

GunDex is not intended for children under 13. If such data is discovered, it is deleted promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.