Privacy

Buffi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using Buffi, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

Account Information

When you create an account, we collect your email address and display name. We use Firebase Authentication to manage sign-in. We do not store passwords - authentication is handled via email magic links.

Scan Data

When you scan a product, we process the information you provide - product URLs, tag photos, or manual entries - to generate material analysis. We store anonymous aggregate scan data at the product level (brand, fiber composition, markup range, verdict) to improve Buffi's analysis over time. We do not store tag photos after analysis is complete.

Usage Data

We collect basic usage information such as scan count, save count, and account creation date to operate the service and enforce free tier limits.

Waitlist Data

If you join our waitlist, we collect your first name and email address solely to notify you when Buffi launches or expands access.

2. How We Use Your Information

• To provide and operate the Buffi service
• To generate material analysis and verdicts for scanned products
• To enforce free tier limits and manage Pro subscriptions
• To send you product updates and launch notifications if you have joined our waitlist
• To improve the accuracy of our material cost estimates and verdict logic over time using anonymous aggregate data
• To respond to support requests

3. Third Party Services

Buffi uses the following third party services to operate. Each has its own privacy policy governing how they handle data:

• Firebase (Google) - authentication and database storage
• Anthropic Claude API - AI-powered material analysis
• Google Cloud Vision API - optical character recognition for tag photos
• SerpAPI - Google Shopping price lookups

We share only the minimum data necessary with each service to perform its function. We do not sell your personal information to any third party.

4. What We Do Not Do

We want to be explicit about our commitments:

• We do not sell your personal data to brands, advertisers, or any third party
• We do not accept payment from brands to influence scan verdicts or product recommendations
• We do not display advertising in the Buffi app
• We do not share individual scan history with any brand whose products you have scanned
• We do not store tag photos after analysis is complete

5. Data Retention

Scan history is retained for 24 hours for free users and indefinitely for Pro users until deleted. Saved items are retained until you delete them or close your account. Waitlist data is retained until you request removal or Buffi launches publicly. Anonymous aggregate product scan data may be retained indefinitely as it contains no personal information.

6. Your Rights and Choices

You may request deletion of your account and associated personal data at any time by contacting us at heybuffi@gmail.com. Upon request we will delete your account data, scan history, and saved items. Anonymous aggregate product data that does not identify you personally cannot be deleted as it is not linked to your account.

You may unsubscribe from waitlist communications at any time using the unsubscribe link in any email we send.

7. Data Security

We use industry-standard security practices including Firebase security rules, server-side API key management, and encrypted data transmission. API keys and credentials are never exposed to the client. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

8. EU Users - GDPR

If you are located in the European Union or European Economic Area, the following additional rights apply to you under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data on the following legal bases: contract performance (to provide the Buffi service you have signed up for), legitimate interests (to improve our service using anonymous aggregate data), and consent (for waitlist communications, which you may withdraw at any time).

Your GDPR Rights

• Right of access - you may request a copy of the personal data we hold about you
• Right to rectification - you may request correction of inaccurate personal data
• Right to erasure - you may request deletion of your personal data (the right to be forgotten)
• Right to restriction - you may request that we limit how we use your data
• Right to data portability - you may request your data in a machine-readable format
• Right to object - you may object to processing based on legitimate interests

To exercise any of these rights, contact us at heybuffi@gmail.com. We will respond within 30 days. If you are unsatisfied with our response you have the right to lodge a complaint with your local data protection authority.

Data Transfers

Buffi is operated from the United States. If you are located in the EU, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses and the data processing agreements of our third party providers (Google/Firebase, Anthropic) for lawful transfer of EU personal data.

Data Protection Contact

For GDPR-related inquiries contact us at heybuffi@gmail.com with the subject line "GDPR Request".

9. Children's Privacy

Buffi is not directed at children under the age of 13 (or 16 in certain EU member states). We do not knowingly collect personal information from children below these ages. If you believe a child has provided us with personal information, please contact us at heybuffi@gmail.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before changes take effect. Continued use of Buffi after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or your data, please contact us at:
Buffi
heybuffi@gmail.com
North Carolina, United States

Buffi - Material intelligence for the conscious shopper.