Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains what information Cashd, operated by LocalBloom AI Marketing LLC ("we", "us"), collects, how we use it, and who we share it with. See also our Terms of Service.

1. Information We Collect

You can try Cashd's scan, pricing, and listing-builder features without an account or providing any personal information. We only collect the following:

• Account information — if you sign in, your name, email address, and profile photo as provided by Google (via Supabase Auth). We don't receive or store your Google password.
• Item photos and details — photos you capture or upload, and the category, brand, condition, price, and other details you enter, are stored so your saved items persist across visits/devices once you're signed in.
• Scan usage — how many scans and batch scans you've used this month, so we can apply the free monthly limit. For guests this is a small counter cookie (see §4); for signed-in users it's stored with your account.
• Advertising data (iOS app only) — if you choose to watch a short video ad for extra scans, Google AdMob collects device information (such as device model, operating system, IP address and approximate location derived from it) and how you interact with the ad. If you allow tracking when iOS asks, it also receives your device's advertising identifier (IDFA). We store a record of each completed ad (your account ID, a transaction ID and the reward) so we can credit the extra scan.
• Usage data — standard technical logs (e.g. IP address, browser type, pages visited) collected automatically by our hosting provider.

2. How We Use It

• To operate the Service — authenticate you, save and display your items;
• To generate item recognition, pricing estimates, and listing drafts (see §3 — this involves sending data to third-party providers);
• To apply free monthly scan limits and credit extra scans earned by watching ads;
• To show optional rewarded video ads in the iOS app (see §5);
• To maintain and improve the Service, including diagnosing errors.

We do not sell your personal information for money. If you allow tracking in the iOS app, Google can use your device's advertising identifier to show you personalized ads, which some U.S. state laws treat as "sharing" for targeted advertising. You can turn this off at any time (see §5).

3. Third-Party Service Providers

To provide the Service, we share data with the following processors. Each operates under its own privacy policy, linked below.

• Supabase — authentication, database, and photo storage. Handles your account info and saved items. Privacy policy.
• Google — sign-in (via Supabase Auth, using Google OAuth). Privacy policy.
• OpenRouter, and the underlying AI model it routes your request to (currently Google's Gemini) — receives the photo(s) you scan (including any optional tag/label photo) to identify the item, and receives item category/brand/condition text to generate a price estimate when no real market-data source applies. OpenRouter privacy policy.
• KicksDB, eBay, Scryfall, and pokemontcg.io — receive item category/brand/model text (never your photos) to look up real market pricing data for shoes, general items, and trading cards respectively.
• Google AdMob (iOS app only) — serves the optional rewarded video ads and receives the advertising data described in §1. It also sends our server a signed confirmation, including your account ID, when you finish an ad. How Google uses data from apps that use its services.

None of these providers receive your name, email, or any other account information unless you are signed in and it's inherent to the request (e.g. Supabase necessarily associates saved items with your account).

4. Cookies & Local Storage

We use an essential session cookie (via Supabase Auth) to keep you signed in. If you start scanning an item as a guest and are asked to sign in before saving it, your in-progress scan is held temporarily in your browser's session storage — this never leaves your device and is cleared automatically once you're back in the app. Guests also get a small cookie that counts their free scans for the month. The website doesn't use advertising or cross-site tracking cookies; ads appear only in the iOS app, as described in §5.

5. Ads in the iOS App & Your Choices

The iOS app can show a short video ad when you choose to watch one for an extra scan. Ads are never required to use Cashd, and you're never shown one you didn't ask for.

• Tracking permission — iOS asks whether Cashd may track you across other companies' apps and websites. If you choose "Ask App Not to Track," Google doesn't receive your advertising identifier and you'll see non-personalized ads. You can change this anytime in Settings → Privacy & Security → Tracking.
• EEA, UK and Switzerland — you'll be asked for consent through Google's consent form before any personalized ads are shown.
• More about Google ads — see how Google uses information in advertising.

6. Data Retention

We retain your account and saved items for as long as your account is active. You can delete individual items at any time; to delete your entire account and associated data, contact admin@cashd.us.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing.

• EEA/UK residents (GDPR): [state your legal basis for processing per category of data — e.g. contract necessity for account data, legitimate interest for usage logs — and name an EU representative/DPO if required].
• California residents (CCPA/CPRA): [add the specific disclosures CCPA requires — categories of personal information collected/sold/shared in the last 12 months, and how to submit a Do-Not-Sell/Share or deletion request].

To exercise any of these rights, contact us at admin@cashd.us.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

9. Data Security

We use reasonable technical and organizational measures to protect your information, but no method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. International Users

Your information may be processed in the United States or other countries where our service providers operate, which may have different data-protection laws than your own. [If you have EU/UK users, add your transfer mechanism here — e.g. Standard Contractual Clauses with each processor.]

11. Changes to This Policy

We may update this policy from time to time; the "Last updated" date above will change accordingly.

12. Contact

Questions about this policy or your data? Contact admin@cashd.us.