Privacy Policy

1. Who we are

SortedSam is a home inventory app developed and operated by LetMeCodeThat (company registration BE1022.754.637), Steenakkerlaan 36, 9080 Lochristi, Belgium. LetMeCodeThat is the data controller for the personal data described in this policy. For any privacy question or request, contact support@sortedsam.app.

2. What data we collect

SortedSam collects the following information when you use the app:

• Your email address, used for authentication via Google Sign-In or email magic link (handled by our authentication provider).
• Your display name, if provided by Google Sign-In or edited in the app, and your internal account ID, used to manage your account and show your profile to other Home members.
• The content you add to your Home: room names, closet names, box names, item names and descriptions.
• Photos you attach to items (stored with our cloud storage provider, one per item).
• Your subscription status, billing tier, Google Play subscription product ID, purchase token, and renewal or expiry status. Google Play manages payment details directly; we do not receive your card, bank, or payment account details.
• Basic usage data (number of items, members, and rooms) to enforce subscription limits.

3. How we use your data

We use your data solely to provide the SortedSam service:

• Creating and managing your account, profile, Home membership, and access permissions.
• Storing and displaying your household inventory.
• Verifying Google Play subscriptions and enforcing subscription limits (item count, member count) per your active plan.
• Sending transactional emails: account invitations, billing confirmations, subscription expiry notices, and service announcements. These are sent via our email delivery provider.
• We do not sell your data, use it for advertising, or share it with third parties for their own purposes.

We process this data on the following legal bases: performance of our contract with you (account, inventory, and billing data), our legitimate interest in operating and securing the service (basic usage data), and compliance with legal obligations (data we must retain for tax or accounting purposes).

4. Third-party services

SortedSam relies on the following categories of external service providers (sub-processors) to operate:

• A cloud database, authentication, and file storage provider, hosted within the EU.
• Google Play Billing, for subscription payment processing — subject to Google's Privacy Policy.
• A cloud hosting provider for our backend API, hosted within the EU.
• An email delivery provider, for transactional emails.
• A domain and DNS provider, based in the EU.

Some sub-processors are located outside the EEA. Our email delivery provider is located in a country that benefits from a European Commission adequacy decision, so no additional safeguard is required. Google (Google Play Billing) is US-based; transfers to Google are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses. Further detail on any specific sub-processor is available on request at support@sortedsam.app.

We do not use analytics, advertising, or tracking cookies on our website or in the app. Fonts used on this website are self-hosted rather than loaded from a third-party CDN.

5. Data storage and security

Your data is stored in our cloud database, hosted within the EU (encrypted at rest, TLS for all data in transit). Access is controlled by row-level security policies — you can only access data belonging to your Home. On your device, all locally cached data is encrypted using AES-256 via the Android Keystore System, unlocked by biometric authentication or PIN.

6. Your rights

Regardless of where you live, you have the following rights over your personal data. If you are in the EU/EEA or UK, these rights are guaranteed under the GDPR / UK GDPR; we extend the same rights to every SortedSam user worldwide:

• Access: Request a copy of the data we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Request deletion of your account and associated data ("right to be forgotten"). In-app account deletion is available from Settings → Account Settings → Delete Account. You can also follow the instructions at sortedsam.app/delete-account.html or email support@sortedsam.app.
• Data portability: Request your data in a machine-readable format.
• Restriction: Ask us to stop processing your data while a dispute is resolved.

We do not sell personal data or share it with third parties for their own purposes, so there is nothing to opt out of in that respect. To exercise any of the rights above, email support@sortedsam.app.

You also have the right to lodge a complaint with a data protection supervisory authority. In Belgium, this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be. If you live outside Belgium, you may instead contact your own country's supervisory authority.

7. Data retention

• Active accounts: data is retained for the lifetime of the account.
• Deleted accounts: your account profile and Home membership records are deleted when account deletion completes.
• Sole-member Homes: if you are the only member of a Home, that Home is scheduled for deletion and its Home content and photos are permanently deleted after the 21-day grace period.
• Shared Homes: if other members remain in a Home, the shared Home content remains available to those members unless it is deleted by a Home Manager or by support where legally required and technically feasible.
• Expired subscriptions with no renewal: after a 3-week grace period with no action, all Home data is permanently and irreversibly deleted.

8. Contact and governing law

These practices are governed by Belgian law and the EU General Data Protection Regulation (GDPR). For privacy questions or requests: support@sortedsam.app.