Diggato Privacy Policy

Last Updated: March 26th, 2026

Developer / Company (Legal Entity):

The Hope Studio LLC

116 Nevada St.

Nevada City, CA 95959

United States

Contact (Privacy & Support): support@diggato.com

Accessibility: If you need to access this Privacy Policy in an alternative format due to a disability, please contact support@diggato.com.

Notice at Collection

At or before the time we collect personal information, California residents have the right to receive notice of our privacy practices, including the categories of personal information we collect, the purposes for which we collect or use it, whether we “sell” or “share” it (as defined by California law), and how long we retain it.

Categories we collect (depending on how you use Diggato):

• Identifiers (e.g., account ID, authentication tokens, device/app identifiers)

• Contact information (e.g., email address)

• User content (e.g., photos/images you upload or capture; item metadata, notes, and edits you create; analysis results shown in Item Details)

• Internet or other electronic network activity (e.g., app interaction events, feature usage)

• Diagnostics information (e.g., crash logs, performance data)

• Commercial information (e.g., subscription/purchase status via Apple/Google and RevenueCat)

Purposes: providing app functionality, AI-assisted features, external lookups (eBay/Discogs), customer support, analytics & reliability, security & fraud prevention, and legal compliance (each described below).

Sale/Sharing: Diggato does not sell personal information and does not share personal information for cross-context behavioral advertising. Diggato does not track you across apps or websites for advertising.

Retention:

• Account data: until account deletion, then up to 30 days

• User content: until account deletion, then up to 30 days

• Diagnostics/analytics: up to 12 months

• Legal/safety holds: we may retain certain information longer when required or permitted by law (e.g., to comply with legal process or protect against fraud/abuse).

1) Scope

This Privacy Policy explains how Diggato (“App”) and related services (collectively, the “Services”) collect, use, share, and protect information. It applies to information processed when you use the App, any related Diggato website(s) (if any), and customer support channels.

2) Summary of What We Collect

Diggato may collect:

• Account data: information used to create and manage your account (e.g., email, authentication tokens).

• User content: images you upload/capture and the metadata you create/edit (such as item details and edits to analysis results).

• Usage & diagnostics: app interactions, crash reports, and performance data.

• Purchases/subscriptions: purchase history and subscription status (via store platforms and RevenueCat).

• Queries & lookups: requests you initiate to external databases (eBay, Discogs).

Tracking: Diggato does not track you across apps or websites for advertising.

3) Information We Collect

3.1 Information You Provide

• Account information: email address and sign-in credentials or tokens (depending on sign-in method).

• User content: photos/images and any text/metadata you enter (e.g., titles, descriptions, tags, notes), including edits made to analysis results shown in the Item Details section.

• Customer support: messages you send to support@diggato.com and any attachments you include.

3.2 Information Collected Automatically

• Device and app info: device type, OS version, app version, language.

• Usage data: feature usage, interaction events, settings/preferences.

• Diagnostics: crash logs and performance data.

3.3 Information From Third Parties

• Sign-in providers: Sign in with Apple and Google Sign-In (authentication tokens and basic account identifiers needed to sign you in).

• App stores / purchase platforms: Apple / Google purchase and subscription signals (via RevenueCat).

• External databases (when you use those features): eBay and Discogs results and item identifiers.

4) How We Use Information (Purposes)

We use information to:

1. 1. Provide core app functionality (saving collections, syncing data, search, export).

2. 2. Run AI-assisted features (analyzing user-submitted content to produce structured metadata and outputs you request).

3. 3. Operate external lookups (eBay/Discogs queries and matching).

4. 4. Provide customer support.

5. 5. Improve analytics & reliability (understanding performance, fixing crashes).

6. 6. Maintain security & prevent abuse.

7. 7. Comply with legal obligations.

5) Data Sharing & Disclosure

5.1 Service Providers (Processors)

We share information with vendors who help operate the Services:

• Firebase (Google) — hosting, databases, authentication (enabled), storage (enabled), analytics and diagnostics (enabled).

• RevenueCat — subscription and purchase management; receives purchase/subscription signals and device/app identifiers needed to validate entitlements.

• OpenAI — Diggato sends certain user-provided content (such as images and/or text) to OpenAI APIs to generate outputs for app functionality when you request analysis.

5.2 External Data Sources (When You Use Those Features)

• eBay — Diggato may send search queries and item parameters to retrieve product and pricing information.

• Discogs — Diggato may send search queries and item parameters to retrieve catalog and metadata information.

5.3 Legal & Business Transfers

We may disclose information to comply with law, protect safety, prevent fraud, or in connection with a business transaction (e.g., merger/acquisition), with appropriate notice where required.

No sale of personal data: Diggato does not sell personal information.

No advertising tracking: Diggato does not track you across apps or websites for advertising.

No sharing for cross-context behavioral advertising: Diggato does not share personal information for cross-context behavioral advertising.

5.4 Legal Process, Safety, and Misuse Investigations

We may access, review, preserve, and disclose information we maintain about you or your use of the Services if we believe, in good faith, that doing so is necessary or appropriate to:

• comply with applicable law, lawful requests, or legal process (such as a court order, subpoena, or other valid legal request);

• respond to requests from law enforcement, regulators, or government authorities (including national security requests, where applicable);

• protect the rights, property, and safety of you, our users, The Hope Studio LLC, or others;

• enforce our terms, policies, and agreements (including investigating potential violations);

• detect, prevent, or address fraud, security incidents, or other harmful, deceptive, abusive, or illegal activity; or

• assist in the investigation or prosecution of suspected or actual illegal activity.

In these circumstances, we may also be required to retain certain information and may not be able to honor some requests (such as deletion) until the matter is resolved or as otherwise required by law.

6) Permissions & In-App Disclosures (Android + iOS)

Diggato may request permissions such as:

• Camera (and Microphone) — to capture images for your collections and AI analysis. On some devices/OS versions, camera access may be bundled with microphone permission. Diggato does not use the microphone at this time, but permission may be requested/required by the operating system to enable camera functionality. If Diggato adds audio or video analysis features in the future, we will update this policy and provide in-app notice as required.

• Photos/Media — to upload existing images to your collections.

• Files / Storage (Exports) — Diggato may request access needed to save or export files you choose to download or export. On many devices, exporting uses a system file picker or share feature and does not require broad storage access. If storage access is required by your device or OS version, Diggato will request it in context and only for the export feature you initiate.

• Notifications (optional) — for receipts, processing updates, or reminders (if implemented).

We request permissions in context and only for the features that need them. If Diggato ever collects data in a way that isn’t obvious to the user in the moment (example: background collection), we will provide a prominent in-app disclosure and request affirmative consent.

6A) Prohibited Content and Illegal Use

Diggato is intended for lawful use. You agree not to use the Services to upload, store, transmit, generate, or share content that:

• is illegal, violates applicable laws or regulations, or facilitates unlawful activity;

• infringes intellectual property rights or violates privacy/publicity rights;

• contains malware or attempts to interfere with, compromise, or reverse engineer the Services; or

• is used to harass, exploit, threaten, or harm others.

Because misuse is possible, you understand that information you provide to Diggato (including images, metadata, account identifiers, and usage signals) may be used to investigate suspected violations, protect users, and support legal compliance, as described in this policy.

7) Your Choices & Controls

• Manage your content: you can edit or delete items and images you have added via the Gallery and Collection editing buttons.

• Account controls: you can update or delete your account via the Account tab, in the “Plus” menu.

• Analytics/diagnostics controls: analytics and diagnostics are enabled by default.

You can also control certain permissions (camera/photos/notifications) via your device settings.

7A) Exporting Your Data and Collections

Diggato may allow you to export your collections and the results of analyses you have requested (“Exports”). Exports are initiated by you and may include images, item metadata, notes, and other information you have entered or generated through the Services.

When you export data, it may be saved to your device or shared with a third-party service or application depending on the export method you choose. Once an Export leaves Diggato’s systems, we do not control how third parties or recipients handle exported data, and their privacy practices will apply.

Diggato does not automatically export your data without your action. You are responsible for how and where you share Exports, including ensuring you have the rights to export and share the content and that your sharing complies with applicable laws.

8) Data Retention

We retain data only as long as necessary for the purposes described:

• Account data: retained until account deletion, then retained for up to 30 days.

• User content: retained until account deletion, then retained for up to 30 days.

• AI processing data sent to OpenAI: content submitted for analysis, including photos, files, and user edits made to analysis details contained in the Item Details section, may be sent to OpenAI. Data sent to and received from OpenAI may be stored server-side as part of providing the Services, and is retained until user deletion and subject to the retention periods described in this policy (including any limited retention required for legal, safety, or security reasons).

• Diagnostics/analytics: retained for 12 months.

9) Account Deletion

Users can request deletion:

• In-app path: Account tab → Plus menu → Account → Delete Account

• Support: support@diggato.com

When an account is deleted, we delete or de-identify associated personal data except where limited retention is required for security, fraud prevention, or legal compliance, as described in this policy.

9.1 Limits on Deletion in Misuse / Legal Holds

If we reasonably believe an account is associated with fraud, abuse, security threats, or illegal activity, or if we receive a valid legal request, we may preserve information for investigative and compliance purposes. In these cases, account deletion and data deletion may be delayed or limited to the extent required or permitted by law.

10) Security

We use reasonable safeguards designed to protect information, including secure transmission and access controls. No method of transmission or storage is 100% secure.

11) Children’s Privacy

Diggato is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at support@diggato.com and we will take steps to delete the information.

12) International Data Transfers

All information processed by us may be transferred, processed, and stored in the United States and other countries where we or our service providers operate. Data protection laws in these jurisdictions may differ from those in your place of residence.

Where required under applicable law (including for transfers from the EEA, Switzerland, and/or the United Kingdom), we use appropriate safeguards for cross-border transfers, which may include the EU Standard Contractual Clauses and/or the UK International Data Transfer Addendum, as applicable. To request more information about transfer safeguards, contact us at support@diggato.com.

13) Third-Party Services, Links, and External Destinations

Diggato may integrate with or provide access to third-party services (such as Firebase/Google, Apple, Google Sign-In, RevenueCat, OpenAI, eBay, and Discogs) and may allow you to export or share content to third-party destinations. These third parties are not controlled by us. Their privacy practices apply to information they receive, and you should review their policies before using third-party services.

Providing information to third parties or sharing Exports with third-party destinations is at your own choice and risk.

14) Supplemental Notice for California Residents (CCPA/CPRA)

This section supplements the rest of this Privacy Policy and applies only to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to our processing.

14.1 Categories of Personal Information Collected

Depending on your use of Diggato, we may collect the categories described in the Notice at Collection above, including identifiers, contact information, user content, usage data, diagnostics, and commercial information (subscription/purchase status).

14.2 Purposes of Collection and Use

We collect and use personal information for the purposes described in Section 4, including providing the Services, AI-assisted features, external lookups, support, analytics and reliability, security, and legal compliance.

14.3 Sale/Sharing and Targeted Advertising

Diggato does not sell personal information and does not share personal information for cross-context behavioral advertising. Diggato does not track you across apps or websites for advertising.

14.4 Sensitive Personal Information

Diggato does not require you to provide “sensitive personal information” (as defined by California law) to use the core features of the Services. If you choose to include sensitive information in content you upload or enter, you direct us to process it for the purposes of providing the Services (such as storing your content, generating item details, and enabling search/export). We do not use sensitive personal information to infer characteristics about you.

14.5 Your California Privacy Rights

Subject to certain exceptions, California residents may have the right to:

• Know / Access

• Delete

• Correct

• Opt-Out (note: we do not sell/share as described above)

• Non-Discrimination

14.6 How to Exercise California Rights

You can submit requests by using in-app controls (Account tab → Plus menu → Delete Account, and content deletion tools), or emailing support@diggato.com.

14.7 Verification and Authorized Agents

To protect your privacy, we will take steps to reasonably verify your identity before fulfilling certain requests. You may use an authorized agent to submit requests on your behalf where permitted by law, but we may require proof of the agent’s authorization and may still need to verify your identity directly.

14.8 Appeal of Decisions

If applicable law provides you the right to appeal a decision we make regarding your request, you may appeal by contacting support@diggato.com and providing the basis for your appeal.

14.9 Global Privacy Control (GPC)

Some browsers and extensions support opt-out preference signals such as the Global Privacy Control. Because Diggato does not sell or share personal information for cross-context behavioral advertising, GPC signals generally will not change how we process personal information; however, we will apply such signals where required and applicable to our online services (if any).

15) Supplemental Notice for Nevada Residents

Nevada residents may have the right to opt out of the sale of certain personal information to third parties who intend to license or sell that information. We do not sell personal information as “sale” is defined under Nevada law. If you have questions, contact support@diggato.com.

16) Other Provisions for EU/UK/EEA/Switzerland Residents (GDPR/UK GDPR)

This section applies if your personal information is subject to the EU GDPR or UK GDPR, including for residents of the EEA, United Kingdom, and Switzerland.

16.1 Controller

The Hope Studio LLC is the controller of personal information processed under this Privacy Policy.

16.2 Lawful Bases for Processing

Where GDPR/UK GDPR applies, we process personal information under one or more of the following lawful bases, depending on the context:

• Performance of a contract

• Legitimate interests

• Consent

• Legal obligation

16.3 Your Rights

Subject to applicable exceptions, you may have the right to: access, rectify, delete, restrict, object, data portability, and withdraw consent. To exercise these rights, contact support@diggato.com.

16.4 Complaints

You have the right to lodge a complaint with your local supervisory authority (e.g., UK ICO; EEA DPAs; Switzerland FDPIC).

16.5 Sensitive Information

We do not generally require you to provide sensitive personal information. If you choose to include sensitive information in content you upload or enter, you direct us to process it for providing the Services.

17) Changes to This Policy

We may update this policy from time to time. We will post updates in the App and update the “Last Updated” date. If required by applicable law, we will provide additional notice of material changes.

18) Contact Us

The Hope Studio LLC

116 Nevada St.

Nevada City, CA 95959

United States

Email: support@diggato.com

Appendix A — Data Categories Table (Apple App Privacy Details + Google Play Data Safety Alignment)

This table is intended as the “single source of truth” used to complete Apple App Privacy Details and Google Play Data Safety / User Data consistently.

Key: Linked to User (Apple); Used for Tracking (Apple) = No.