shopio-policy

Shopio Privacy Policy

Effective date: March 5, 2026
Version: 1.1.0

Aurora Soft AI (“we,” “our,” or “us”) operates the Shopio mobile application (“App”). This Privacy Policy explains what data is processed when you use the App, why it is processed, and what choices you have.

1) Summary

• Shopio does not require account sign-up with name or email.
• Shopping list data can be stored in Firebase for sync and sharing.
• Ads and subscriptions use third-party providers.
• AI categorization sends list item text to our backend and OpenAI.

2) Data We Process

We may process the following categories of data:

• Shopping list content: list names, item text, item state, sort order, and timestamps.
• Sharing data: share codes and shared-list metadata needed to let multiple users sync the same list.
• Technical/service identifiers: Firebase anonymous authentication identifiers and service-related IDs.
• Advertising and diagnostics data (via partners): device identifiers (including advertising IDs where available), app interaction, and ad performance data.
• Subscription and purchase data (via partners): entitlement status, store transaction metadata, and restore/purchase state.
• AI request data: item text and selected category labels sent to our categorization endpoint and then to OpenAI.
• AI usage controls: metadata required to enforce fair-use protections such as per-user request rate limits.

3) How We Use Data

We process data to:

• Provide core app functionality.
• Sync and back up shopping lists.
• Enable shared lists.
• Categorize list items with AI.
• Enforce fair-use limits for AI features to protect service reliability and prevent abuse.
• Show ads and measure ad performance.
• Process and restore subscriptions.
• Maintain service security, reliability, and troubleshooting.

4) Third-Party Processors/Services

The App relies on these services:

• Google Firebase (hosting/auth/database infrastructure)
• Google Mobile Ads (AdMob) (ad delivery and measurement)
• Google Play / Apple App Store (billing and transactions)
• RevenueCat (subscription entitlement and purchase state)
• OpenAI (AI categorization)

These services may process data under their own privacy terms.

5) Ads, Consent, and Privacy Choices

For regions where consent is required (including EEA/UK/Switzerland), Shopio uses Google’s consent flow before requesting ads.

• If required, a consent form is shown in-app.
• Ad request behavior follows consent status.
• You can reopen ad privacy options in the App under Settings -> Ad privacy choices.

6) Legal Bases (EEA/UK)

Where applicable, legal bases may include:

• Contract: to provide the app features you request (lists, sync, sharing, subscriptions).
• Consent: where required for certain advertising/measurement processing.
• Legitimate interests: securing, maintaining, and improving service operations.

You can withdraw or update consent choices at any time through in-app privacy options where available.

7) Data Retention

We retain data only as long as needed for service operation, legitimate business needs, and legal compliance.

Because shared-list functionality depends on backend storage, list content may remain stored until removed or overwritten through app usage and backend lifecycle controls.

8) International Transfers

Service providers may process data outside your country of residence, including in the United States, subject to applicable safeguards where required.

9) Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object, or request portability of certain data, and to lodge a complaint with a supervisory authority.

Because Shopio does not use account registration, requests may require enough technical detail for us to locate records (for example, share code details, approximate timestamps, or other service identifiers).

10) Security

We use reasonable technical and organizational safeguards. No system is perfectly secure, and we cannot guarantee absolute security.

11) Children’s Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children.

12) Changes to This Policy

We may update this Privacy Policy. We will post updates here with a revised effective date and version.

13) Contact

Aurora Soft AI
Email: aurorasoftai@gmail.com