Privacy Policy

1. Introduction

Welcome to MerchPatrol ("App," "we," "us," "our," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our App. This Privacy Policy explains our information practices, what data we collect, how we use it, and what rights you have regarding your information.

This Privacy Policy applies to the MerchPatrol iOS application. By downloading, installing, or using MerchPatrol, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Authentication Information

• Apple Sign-In: MerchPatrol uses Apple's Sign In with Apple authentication system. We do not store your Apple ID, password, name, or email address on our servers. Authentication is handled entirely by Apple's CloudKit infrastructure.
• Apple ID: Your unique Apple ID is used to identify your account and is managed securely by Apple.

2.2 CloudKit Data Storage

• User Preferences: Any user preferences and settings you configure within the App are stored exclusively in Apple's CloudKit.
• Subscription Data: Information about your FCM topic subscriptions is stored in CloudKit.
• No Personal Data: We do not store your name, email address, profile picture, or any identifying personal information on our servers.

2.3 Device Notification Information

• Device Token: When you enable notifications, your device's FCM (Firebase Cloud Messaging) token is used to deliver push notifications to your device.
• Topic Subscriptions: Records of which notification topics you are subscribed to (e.g., specific merchandise alerts).
• No Sensitive Data: We do not store any sensitive personal information associated with your notification preferences.

2.4 Automatic Data Collection

• Device Information: Device model and operating system version for app compatibility and debugging purposes.
• Usage Analytics: Anonymous usage data to understand how the App is being used and to improve the service.
• Error Logs: Crash reports and error logs to identify and fix technical issues.

3. How We Use Your Information

We use the information we collect for the following limited purposes:

• Authenticating your identity through Apple Sign-In
• Delivering push notifications to your device based on your subscribed topics
• Storing your preferences and notification subscriptions in CloudKit
• Improving app performance and fixing technical issues
• Complying with legal obligations

4. Data Storage and Security

4.1 CloudKit Infrastructure

MerchPatrol leverages Apple's CloudKit framework to store user data. All data stored in CloudKit is:

• Encrypted in transit and at rest
• Protected by Apple's enterprise-grade security
• Subject to Apple's privacy controls and policies
• Accessible only to your device and the MerchPatrol app using your CloudKit credentials

4.2 What We Don't Store

MerchPatrol does not store:

• Your name or personal identity information
• Your email address (except what Apple provides via Sign In with Apple)
• Profile pictures or photos
• Location data
• Any personally identifiable information on our servers

4.3 Data Minimization

We follow a strict data minimization principle and only collect and store the minimum information necessary to provide the MerchPatrol notification service.

5. Push Notifications and FCM

5.1 How Notifications Work

When you subscribe to notification topics in MerchPatrol, your device receives real-time alerts about merchandise releases and updates. These notifications are delivered via Firebase Cloud Messaging (FCM).

5.2 Managing Notifications

You can manage your notification preferences within the App or through your device's notification settings. You can:

• Subscribe to or unsubscribe from specific merchandise topics
• Enable or disable notifications entirely through device settings
• Manage notification permissions for the MerchPatrol app

5.3 No Third-Party Marketing

We do not sell your notification preferences or device information to third parties for marketing or advertising purposes.

6. Data Sharing and Disclosure

6.1 Apple

We work with Apple's CloudKit and Sign In with Apple services. Your data stored in CloudKit is subject to Apple's privacy policies and security practices.

6.2 Firebase Cloud Messaging

We use Google Firebase to deliver push notifications. Your device token is used solely for delivering notifications you have subscribed to.

6.3 Legal Requirements

We may disclose information if required by law or if we reasonably believe that disclosure is necessary to:

• Comply with applicable laws, regulations, or court orders
• Enforce our Terms of Service
• Protect the security or integrity of the App
• Protect the rights, privacy, safety, or property of MerchPatrol or the public

6.4 No Business Transfers of Personal Data

Since we do not store personal data on our servers, there is no personal information to transfer in the event of a business transaction. Any user data would remain in Apple's CloudKit under your Apple ID.

7. Your Privacy Rights

7.1 Access and Control

You have complete control over your data stored in CloudKit. You can access your data through your Apple ID and CloudKit settings.

7.2 Deletion

You can delete your MerchPatrol account and all associated data at any time. This will remove your preferences and notification subscriptions from CloudKit.

7.3 Opt-Out of Notifications

You can unsubscribe from notification topics or disable all notifications without losing access to the App.

7.4 California Privacy Rights (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). Since MerchPatrol does not collect or store personal information on its servers, we do not "sell" your personal information. For questions about your CloudKit data, please refer to Apple's privacy policies.

7.5 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Since we do not store personal data, your data remains under your control via your Apple ID. For questions about your rights, please contact us or visit Apple's privacy center.

8. Third-Party Services

8.1 Google Firebase

MerchPatrol uses Google Firebase Cloud Messaging to deliver push notifications. Firebase does not receive personal identification information; it only receives your device token for notification delivery.

8.2 Apple CloudKit

User preferences and data are stored in Apple CloudKit. Please refer to Apple's privacy policy for information about how CloudKit handles your data.

8.3 Third-Party Websites

The App may contain links to third-party websites. This Privacy Policy does not apply to those external websites, and we are not responsible for their privacy practices.

9. Children's Privacy

MerchPatrol is intended for users 13 years of age and older. We do not knowingly collect information from children under 13. If you are aware that a child under 13 is using the App without parental consent, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last Updated" date and notify you of any material changes. Your continued use of the App following the posting of changes means you accept those changes.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

12. Apple App Store Compliance

This Privacy Policy complies with Apple's App Store Review Guidelines. MerchPatrol:

• Uses only Apple Sign In with Apple for authentication
• Does not collect or store personal data on third-party servers
• Stores user data exclusively in Apple's CloudKit
• Does not request unnecessary permissions
• Does not sell user data for advertising or marketing
• Provides clear controls for managing notifications and preferences

---

© 2026 MerchPatrol. All rights reserved.