Privacy Policy

Effective Date: 2025-09-24

At Shelfnote, we care about your privacy. This policy explains how we collect, use, and protect your personal data in line with the General Data Protection Regulation (GDPR).

1. Who We Are

Shelfnote is offered by Nagy Artúr e.v., who is the controller of your personal data.

2. What Data We Collect

We may collect:

• Account information: chosen username, automatically generated user ID. Optionally, email and password.
  
  

• Usage data: product barcodes if you scan any.
  
  

• Device data: device type, operating system, app version, IP address.
  
  

• Optional data: your reviews and personal notes of products, and attached media if you upload any. Your feedback if you submit any. Whether you have purchased a PRO membership.
  
  

3. Why We Collect Data (Lawful Basis)

We use your data to:

• Provide and operate the app (contract basis): authenticate you as a unique user and provide access to the app, serve and display the pages.
  
  

• Improve the app (legitimate interest): we use your feedback to develop new features.
  
  

• Comply with legal obligations.
  
  

4. How We Store and Protect Data

Some of our data tables with rows about your profile, allow only you to create/view/update/delete your content content to keep your data safe from other users. Data is stored in Supabase, who use encryption to protect your data. We recommend studying their privacy policies and security features.

We protect your previous reviews and attached media data in case of account deletion by anynomizing your reviews and removing any links to your profile, as well as deleting your profile. If you left any personal information in your reviews (which we do not recommend), other users will be able to report it, so it can be hidden/updated/removed.

5. Sharing Data

We do not sell your personal data. We may share data with:

• Service providers who help us run the app (under GDPR-compliant agreements).
  
  

• Authorities if required by law.
  
  

6. International Transfers

If data is transferred outside the EU/EEA, we ensure adequate protection under GDPR (e.g., Standard Contractual Clauses).

7. Your Rights

Under GDPR, you have the right to:

• Access your data.
  
  

• Correct your data.
  
  

• Delete your data (“right to be forgotten”).
  
  

• Restrict or object to processing.
  
  

• Data portability.
  
  

• Withdraw consent (if applicable).
  
  

You can exercise these rights by contacting us at thenagartworks@gmail.com.

8. Data Retention

We keep your data only as long as necessary for the purposes described, or as required by law.

9. Changes to This Policy

We may update this policy. If major changes are made, we will notify you in the app or by email.

10. Contact

If you have questions or complaints, contact us at thenagartworks@gmail.com.
If you are in the EU, you may also contact your local Data Protection Authority.