Privacy Policy

This Privacy Policy explains how Satori Global Ltd. ("Satori", "we", "our", or "us") collects, uses, shares, and protects personal information when you use the Gathrd iPhone application, the Gathrd web app and browser account experience, the Gathrd ChatGPT integration, the Gathrd share extension, the gathrd.uk website and related helper pages, and related services (together, the "Services"). It also explains your choices and privacy rights.

Satori Global Ltd. is a company registered in the United Kingdom. Unless this Privacy Policy says otherwise, Satori Global Ltd. is the controller of the personal information covered by this Privacy Policy.

Scope

This Privacy Policy applies to personal information we collect through:

• the Gathrd iPhone app;
• the Gathrd web app on gathrd.uk, including sign-in, account creation, collection management, item management, and browser-based item import flows;
• the Gathrd ChatGPT integration, including account-linking, collection lookup, retailer-link save flows, and related OAuth approval flows;
• the Gathrd share extension used to save links into the app;
• the gathrd.uk website, legal pages, and helper pages used for actions such as email verification, password reset routing, Open in Gathrd handoff, and ChatGPT connection approval;
• account, support, and product communications with us; and
• features that let you save product links, images, collections, favourites, and related shopping information.

This Privacy Policy does not apply to third-party retailers, websites, sign-in providers, or other services you access through Gathrd. Those third parties operate under their own terms and privacy policies.

Information We Collect

We collect information you provide directly, information generated through your use of the Services, and limited information from third parties that help us operate the Services.

2.1Information you provide directly

Depending on how you use Gathrd, you may provide:

• Account details, such as your first name, last name, email address, and password when you sign up with email and password through the app or web app.
• Profile information, such as a profile photo URL supplied by a sign-in provider, if available.
• Saved content, such as collections, collection names, item names, product links, retailer names, prices, currencies, favourite status, images, notes, and related metadata you choose to save, edit, or delete.
• Uploaded or captured images, including photos or screenshots you add to saved items.
• Connected-service approvals, such as ChatGPT connection approvals, requested scopes, and related account-linking information.
• ChatGPT integration response data, such as collection names, item counts, saved item titles, retailer names, retailer links, prices, currencies, preview images, favourite flags, and open-in-Gathrd links that are returned when you ask ChatGPT to work with your Gathrd account.
• Support and feedback information, including bug reports, feature requests, screenshots, contact details, and any other information you send to us.

2.2Information from sign-in providers

If you sign in using Google Sign-In or Sign in with Apple, we receive information from those providers such as:

• your name;
• your email address;
• a provider-specific account identifier; and
• your profile photo URL, where available.

The information we receive depends on the provider and your settings with that provider.

2.3Information collected automatically

When you use the Services, we and our service providers may automatically collect certain technical, operational, and usage information, including:

• device, browser, and app information, such as device type, operating system, browser type, app version, language, and region;
• service-provider or app-instance identifiers used to operate analytics, authentication, storage, and related cloud services;
• authentication and security information, such as sign-in events, account creation, password reset requests, and verification flows;
• usage information about how users interact with the app, web app, ChatGPT integration, share extension, and website;
• log data, including IP address, timestamps, request information, crash information, and error information; and
• website and web-app analytics information for visits to gathrd.uk.

2.4Product-link import and background processing

When you add, paste, or share a retailer or product link into Gathrd, including through the iPhone app, the web app, or the ChatGPT integration, we may process that link and related page data to help create or refresh an item record for you. This may include:

• the original link you provide and a normalized or canonical version of that link;
• product title, images, price, currency, and retailer or store name;
• status, warning, confidence, or issue information generated during import;
• review fields and manual adjustments you make before saving an imported item;
• background import or refresh jobs used to improve saved item data over time; and
• diagnostic records used to troubleshoot failed, incomplete, or review-required imports.

To provide these features, we may use direct page fetching, rendered-page fallback techniques, backend refresh processing for saved items, and analytics or operational records relating to saved or imported product links.

If you connect Gathrd to ChatGPT, we may also store OAuth approval records, requested scopes, client identifiers, and refresh-token records needed to maintain that connection until you revoke it or it expires.

When you then ask ChatGPT to browse or save with Gathrd, we may return the minimum account-linked data needed for that request, such as collection names, collection counts, saved item titles, retailer names, retailer URLs, prices, currencies, preview images, favourite flags, and relevant open-in-Gathrd links.

We do not intend to return passwords, raw access tokens, refresh tokens, session IDs, trace IDs, request IDs, or raw server logs to ChatGPT as part of normal tool responses.

2.5Device permissions and local processing

The app may request access to device features where needed to provide user-requested functionality, including:

• Camera access if you choose to capture an image for a saved item;
• Photo library access if you choose to upload an image from your device; and
• Clipboard-assisted paste detection in the add-item flow, where the app or web app may compare the URL field to the current pasted value at the moment you paste a link in order to trigger import assistance. We do not describe this as ongoing clipboard monitoring.

If you choose to save login credentials, the app may store them locally in the device Keychain and may also update shared web credentials for gathrd.uk to support saved-login or autofill experiences where available.

The website and web app may also store limited browser-based preferences, such as your selected light or dark theme mode, to keep the interface consistent across visits on that browser.

2.6Transactional communications

We collect information required to send essential account-related communications, such as:

• verification emails;
• password reset emails; and
• account security or service-related notices.

We do not currently describe Gathrd as sending marketing newsletters or promotional email campaigns through the Services.

How We Use Your Information

We use personal information to:

• create and manage your account;
• authenticate users and support sign-in with email and password, Google, or Apple across the app and web app;
• route verification and password reset actions between email links, the website helper pages, and the app;
• let you connect ChatGPT to your Gathrd account and save product links from supported chat experiences;
• respond to the ChatGPT prompts you choose to make by returning the collections, saved items, links, and related metadata needed to fulfil that request;
• let you save, organise, edit, favourite, archive, export, and delete collections and items in the app and web app;
• store and retrieve uploaded or captured images;
• extract, populate, refresh, and display metadata from product links;
• support the share extension save flow, including collection selection or creation;
• support Open in Gathrd and browser-to-app handoff experiences;
• sync your data across your use of the Services;
• send transactional emails and account security communications;
• provide customer support and handle bug reports or feature requests;
• monitor, maintain, secure, debug, and improve the Services;
• understand app, ChatGPT integration, share extension, and website usage through analytics;
• detect, investigate, and prevent fraud, abuse, or security incidents; and
• comply with legal obligations and enforce our Terms of Use.

UK and EEA Legal Bases for Processing

If you are in the UK, EEA, or another jurisdiction that requires a legal basis for processing, we rely on one or more of the following:

4.1Performance of a contract

We process personal information where necessary to provide the Services you request, including to:

• create and manage your account;
• authenticate you and keep you signed in;
• save, organise, sync, export, archive, and delete your collections and items;
• upload, store, and retrieve your images;
• process product-link imports and refresh saved item data; and
• send account verification and password reset communications.

4.2Legitimate interests

We process personal information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests. This includes to:

• secure the Services and prevent fraud or abuse;
• troubleshoot bugs, failed imports, sync issues, and operational problems;
• improve the performance, design, and functionality of the Services;
• understand how users interact with the app, ChatGPT integration, share extension, and website;
• respond to support requests, bug reports, and feature requests; and
• maintain diagnostic and operational records needed to run import and refresh tooling responsibly.

4.3Legal obligation

We process personal information where necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4.4Consent

Where required by law, we rely on your consent for certain processing, such as certain analytics or device-permission based features. Where we rely on consent, you may withdraw it at any time, although this will not affect processing already carried out before withdrawal.

Analytics, Tracking, and Similar Technologies

5.1In-app analytics

Based on Gathrd's current implementation, the app uses Google Analytics for Firebase / Firebase Analytics to understand product usage and improve the Services.

These app analytics may include events relating to account creation, password reset requests, collection creation, product import outcomes and issues, add-to-wishlist actions, item moves or duplicates, list view openings, collection-assignment changes, and similar product-interaction events. These analytics may include information such as authenticated account identifiers, sign-in provider metadata, interaction events, and in some cases saved or imported product-link information needed to understand product-import behaviour and feature usage.

We do not currently describe the app as using advertising SDKs, in-app ad networks, or targeted advertising.

5.2Website analytics

The gathrd.uk website uses Vercel Analytics, Vercel Speed Insights, and Google Analytics via the Google tag / gtag.js for website-level analytics and performance monitoring. This includes the public website, legal pages, account pages, helper pages, and the browser-based Gathrd web app served from gathrd.uk. It does not apply to all in-app behaviour within the iPhone app.

5.3Cookies and similar technologies

Our website and service providers may use cookies, similar technologies, log files, and comparable tools to operate the website, understand traffic, measure performance, and maintain security.

Because the Services may evolve over time, we may update these analytics and tracking disclosures as our implementation changes.

Automated Processing, Ranking, and Profiling

Gathrd currently performs limited automated processing, including extracting metadata from product links, refreshing saved item data, and flagging imports that may need review because information appears incomplete or uncertain.

At present, Gathrd does not use solely automated decision-making that produces legal effects or similarly significant effects on users.

How We Share Information

We do not sell your personal information. We share information only as described below.

7.1Service providers and infrastructure partners

We use third-party providers to help operate the Services, such as:

• Firebase / Google for authentication, database hosting, cloud functions, cloud storage, and app analytics;
• Google Sign-In and Sign in with Apple for optional login methods;
• Linear for handling bug reports and feature requests submitted through the app; and
• Vercel for website hosting, website analytics, and website performance monitoring; and
• Google for website analytics delivered through the Google tag / Google Analytics where enabled on gathrd.uk.

These providers may process information on our behalf or as independent providers, depending on the service and context.

If you choose to use the ChatGPT integration, your use of ChatGPT / OpenAI is also subject to that platform's own terms and privacy policies as an independent third-party platform. In that context, OpenAI acts as a recipient of the Gathrd response data needed to fulfil the prompts you choose to make through ChatGPT, such as collection names, saved item titles, retailer names, retailer links, prices, currencies, preview images, favourite flags, and open-in-Gathrd links.

7.2Retailers and third-party sites

Gathrd helps you save and organise links to products and retailers, but we are not the retailer, seller, marketplace, payment processor, or fulfilment provider for those products.

When you click through to a third-party retailer or website:

• that third party is independently responsible for its own site and services;
• that third party's privacy policy and terms apply to your interaction with it; and
• we are not responsible for third-party pricing, availability, checkout, payments, delivery, or returns.

7.3Legal and safety disclosures

We may disclose information where reasonably necessary to:

• comply with law or legal process;
• respond to enforceable requests by public authorities;
• protect the rights, property, or safety of Satori, our users, or others;
• detect, investigate, or prevent fraud, abuse, or security issues; or
• enforce our Terms of Use or other legal rights.

7.4Business transfers

If we are involved in a merger, acquisition, financing, reorganisation, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

International Transfers

Because our providers and infrastructure may operate internationally, your personal information may be transferred to and processed in countries outside your country of residence, including outside the UK and EEA.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or other lawful transfer mechanisms.

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain security, comply with law, resolve disputes, and enforce agreements.

Our retention approach generally reflects the type of data involved. For example:

• Account profile information, collections, saved items, favourites, and stored images are generally retained while your account remains active, subject to deletion requests and operational limits.
• Account deletion flows are designed to remove live account data and associated saved content, although limited residual copies may temporarily remain in backups or disaster-recovery systems.
• Import, refresh, diagnostic, security, and operational records may be retained for as long as reasonably necessary to monitor, secure, debug, and improve the Services.
• Analytics data may be retained according to the settings and practices of the relevant analytics provider.
• Support, bug-report, and feature-request submissions may be retained for as long as reasonably necessary to respond, investigate, improve the Services, and keep appropriate business records.
• Local exports generated on your device are not retained by us merely because you created the export locally.

We may retain information for longer where required or permitted by law, or where reasonably necessary to establish, exercise, or defend legal claims.

Security

We use technical and organisational measures designed to protect personal information, including access controls, authentication safeguards, and secure cloud infrastructure.

No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for using the Services responsibly.

Your Rights and Choices

Depending on where you live, you may have rights under applicable privacy laws. These may include the right to:

• access personal information we hold about you;
• correct inaccurate or incomplete personal information;
• delete your personal information;
• restrict or object to certain processing;
• request portability of personal information you provided to us; and
• withdraw consent where processing is based on consent.

11.1In-app controls

Gathrd currently provides users with the ability to do the following in-app, in the web app, or both, depending on the feature:

• update profile details and manage email or password settings in-app;
• create, edit, archive, and delete collections and items in-app;
• archive all collections or delete all collections from the app's data controls;
• export a local JSON copy of collections and saved items; and
• delete an account in-app; and
• disconnect or revoke the ChatGPT integration through connected-service settings or the relevant ChatGPT connection controls, where available.

11.2Regional rights

If you are in the UK or EEA, you may also have the right to complain to your local data protection authority.

If you are in the United States or another jurisdiction with local privacy laws, you may have additional rights depending on where you live. We do not currently describe Gathrd as selling personal information or using the app for targeted advertising.

11.3Exercising your rights

To exercise privacy rights that are not available directly in-app, contact us at: support@gathrd.uk

We may need to verify your identity before fulfilling certain requests.

Children's Privacy

The Services are not intended to knowingly collect personal information from children in violation of applicable law. If local law requires parental or guardian consent for a child to use the Services or provide personal information, that consent must be obtained. If you believe a child has provided personal information to us in circumstances that do not comply with applicable law, contact us and we will investigate and take appropriate steps.

Third-Party Services and Links

The Services may contain links to third-party sites, retailers, or services. We are not responsible for the privacy, security, or content practices of third parties. Please review their policies before interacting with them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may provide additional notice where appropriate.

Your continued use of the Services after an update becomes effective means you accept the updated Privacy Policy, to the extent permitted by law.

Contact Us

If you have questions about this Privacy Policy or want to make a privacy-related request, contact us at:

Satori Global Limited
61 Bridge Street
Kington
HR5 3DJ
United Kingdom
Email: support@gathrd.uk