Privacy Policy

1. Who we are

The Service is provided by Heiman Ventures LLC. For the purposes of the EU and UK General Data Protection Regulation (together, "GDPR"), Heiman Ventures is the "data controller" of personal information processed through the Service. You can reach us anytime at Adam@heimanventures.com.

2. Information we collect

a. Information you provide to us

• Product photos and scans. When you scan a product, the photo you capture is processed to identify the item and generate a verdict. If a price tag, label, or screen is visible, information shown on it (such as a price) may be read from the image.
• Saved items and price tracking. When you save or track a product, we store details such as the product name, category, verdict, and prices so we can show your history and monitor price changes.
• Questions you ask. If you use the in-app assistant ("Ask Worth"), the questions you type and the related product context are processed to generate a response.
• Communications. If you email us for support, we receive your email address and the contents of your message.

b. Information collected automatically

• Anonymous installation identifier. Worth automatically creates an anonymous account for your app installation so your history and saved items work. This identifier is not linked to your name or email.
• Device and technical data. We may receive standard technical information such as device type and model, operating system version, app version, language settings, and general diagnostic data needed to operate and troubleshoot the Service.
• Usage data. We may collect information about how you interact with the Service, such as features used and actions taken, to understand and improve how the Service performs.
• Approximate location. We do not collect precise GPS location. Prices are shown for the United States market; general region may be inferred from your device's internet (IP) address for that purpose.
• Crash and performance data. If the app encounters an error, we may receive diagnostic reports to help us fix it.

c. Information from third parties

• Apple. If you purchase a subscription, Apple processes the transaction and provides us with limited, non-sensitive information confirming your subscription status. We never receive your full payment card details.

d. What we do not collect

We do not intentionally collect your name, email address (unless you email us), phone number, contacts, precise location, government identifiers, or payment card numbers.

3. Categories of personal information

Over the past 12 months, we may have collected the following categories of personal information (as defined by the California Consumer Privacy Act, as amended by the CPRA):

We do not use or disclose sensitive personal information for purposes that require an opt-out under the CPRA.

4. How we use information

We use the information described above for the following purposes:

• To identify products from your photos and generate verdicts, scores, and explanations;
• To show real prices, retailers, and where to buy;
• To save items you bookmark and track their prices over time, and to notify you of price changes where that feature is available;
• To provide the in-app assistant and respond to your questions;
• To operate, maintain, secure, debug, and improve the Service;
• To provide customer support and respond to your requests;
• To manage subscriptions and enforce usage limits;
• To detect, prevent, and address fraud, abuse, security incidents, and technical issues;
• To comply with legal obligations and enforce our Terms of Service.

We do not use your product photos or scans to build a profile about you as an individual, and we do not sell your personal information.

5. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

• Performance of a contract — to provide the Service you request (for example, analyzing a photo you scan).
• Legitimate interests — to operate, secure, and improve the Service, prevent abuse, and understand how it is used, provided these interests are not overridden by your rights.
• Consent — where required by law, for example certain optional processing; you may withdraw consent at any time.
• Legal obligation — to comply with applicable laws and lawful requests.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only in these limited circumstances:

• Service providers and subprocessors who process information on our behalf to run the Service (see Section 7). They are permitted to use the information only to provide services to us.
• Legal and safety — when we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; or to protect the rights, property, or safety of Heiman Ventures, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your direction or consent — when you ask us to share information or otherwise consent.

7. Service providers & subprocessors

We rely on a small number of trusted providers to operate the Service. Each processes information only as needed and under its own privacy commitments:

Each provider maintains its own privacy policy. We encourage you to review them for details on their practices.

8. AI processing of your photos

Worth uses artificial intelligence to identify products and generate verdicts. When you scan a product, the image is transmitted to our AI provider (OpenAI) through its business API for the sole purpose of analyzing that image and returning a result to you. Based on OpenAI's applicable API terms, data submitted through the API is not used to train its models. We do not use your photos to identify you, and we do not publish or sell them. AI outputs are automated estimates and may be inaccurate; they are provided for your information and are not a substitute for your own judgment.

9. Data retention

We keep your scans, saved items, and related data for as long as they are needed to provide the Service to your installation, and thereafter only as necessary to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Because your data is tied to an anonymous installation identifier, deleting the app generally ends our ability to associate that data with your device. Diagnostic and log data is typically retained for a limited period and then deleted or aggregated. You may request deletion at any time as described in Section 11.

10. Data security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, and alteration, including encryption in transit and access controls. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your device secure.

11. Your rights & choices

a. Everyone

You can stop all further collection by deleting the app. You can request that we delete data associated with your installation by emailing Adam@heimanventures.com.

b. EEA/UK residents (GDPR)

Subject to applicable law, you have the right to: access your personal information; request correction of inaccurate data; request erasure; restrict or object to certain processing; request portability; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

c. California residents (CCPA/CPRA)

Subject to applicable law, you have the right to: know and access the personal information we have collected; request deletion; request correction; and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CPRA. We will not discriminate against you for exercising your rights.

d. How to exercise your rights

Email us at Adam@heimanventures.com with your request. Because the Service is designed to be anonymous, we may need certain information to locate data associated with your installation and to verify your request. You may use an authorized agent to submit a request on your behalf, subject to verification. We will respond within the timeframes required by applicable law.

12. International data transfers

We operate in the United States, and the providers we use may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

13. Children's privacy

The Service is not directed to children under 13 (or under the minimum age required in your jurisdiction, such as 16 in parts of the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

14. Do Not Track & Global Privacy Control

Because we do not track users across third-party websites for advertising, we do not respond to "Do Not Track" browser signals. We do not sell or share personal information, so there is no cross-context behavioral advertising to opt out of via Global Privacy Control (GPC) signals.

15. Third-party links

The Service may contain links to third-party websites and retailers that we do not operate or control. This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

17. How to contact us

If you have questions, concerns, or requests regarding this Policy or your personal information, contact us at:

Heiman Ventures LLC
Email: Adam@heimanventures.com