Privacy Policy

This Privacy Policy describes how Imagine App (the "Service", "we", "us", or "our"), available at imagineapp.net, collects, uses, and discloses information about you when you access or use the Service. Please read this Policy carefully. By using the Service, you acknowledge the practices described herein.

The Service is operated by an independent developer. Imagine App is not owned by, operated by, affiliated with, or endorsed by Best Buy Co., Inc. Product information displayed within the Service is retrieved from publicly available data sources.

2.1 Account information. The Service offers sign-in through Google, facilitated by our authentication provider, Clerk. When you sign in, the authentication provider receives your Google account profile information, including your name, email address, and profile image. Of that information, we store an account identifier, your email address, your Service preferences, and a record of any promotional usage credits granted to your account.

2.2 Conversations with the assistant. When you use the chat feature, the content of your messages, including any images you attach and, if you use voice input, a recording of your speech for the purpose of transcription, is transmitted to our servers and processed as described in Section 4. Conversations are stored on your device. If you are signed in, conversations are additionally stored on our servers to allow you to resume them across devices, and are deleted from our servers within seventy-two (72) hours after their last activity.

2.3 Usage information. We use PostHog, an analytics service, to collect information about how the Service is used. This includes pages viewed, features used, searches performed, interactions such as clicks and taps, device and browser type, operating system, screen dimensions, and approximate, city-level location derived from your IP address at the time of receipt. We have configured our analytics service to discard full IP addresses rather than retain them. If you are signed in, usage information is associated with your account identifier and email address; otherwise it is associated with a random identifier stored in your browser. We do not collect session replays.

2.4 Information processed only on your device. The barcode scanning and text recognition features process camera frames entirely on your device. Camera imagery is never transmitted to our servers or to any third party. Your cart contents, scan history, model selection, and interface preferences are likewise stored in your browser's local storage and remain on your device unless you are signed in and a given preference is synchronized to your account.

2.5 Server logs. Our hosting provider maintains standard server logs, which may include IP addresses, user agent strings, and the time and path of each request. These logs are used for security and operational purposes and are retained for a limited period in accordance with the hosting provider's practices.

We use the information described above to:

• provide, operate, and maintain the Service, including authentication, conversation synchronization, and administration of usage credits;
• process requests you direct to the assistant;
• understand how the Service is used, diagnose defects, and improve functionality and usability;
• protect the security and integrity of the Service and prevent abuse; and
• comply with applicable legal obligations.

We do not sell personal information. We do not share personal information with third parties for their own advertising purposes. The Service displays no third-party advertising.

Assistant requests are relayed through OpenRouter, Inc. to the model provider corresponding to the model you have selected. Every such request is issued under routing restrictions that (a) exclude providers that retain or collect prompt data, and (b) require zero-data-retention endpoints, meaning the receiving provider does not store the content of the request after processing it. We do not permit conversation content to be used for the training of machine learning models. Voice recordings submitted for transcription are processed under the same restrictions and are not retained after transcription.

The Service uses cookies and browser storage for two purposes: (a) strictly necessary cookies set by our authentication provider to maintain your signed-in session; and (b) a first-party analytics identifier that allows our analytics service to recognize repeat visits. You may configure your browser to refuse cookies or to clear site data, although doing so may prevent you from signing in or cause the Service to treat you as a new visitor.

We disclose information to the following service providers, each of which processes it on our behalf for the purposes stated:

• Clerk, Inc.: authentication and account management;
• Google LLC: sign-in identity provider;
• PostHog, Inc.: usage analytics processed in the United States;
• OpenRouter, Inc. and the model provider you select: assistant request processing, subject to Section 4;
• Vercel, Inc.: application hosting and server logs;
• Neon, Inc.: database hosting for account records and synchronized conversations;
• Upstash, Inc.: caching of product catalog data; no personal information is stored in this cache;
• Exa Labs, Inc.: web search performed on the assistant's behalf; receives only the generated search query text, never your identity; and
• Best Buy's publicly available product interfaces: receive the product search terms and item identifiers necessary to fulfill catalog lookups; these requests originate from our servers and are not associated with your identity.

• Account records are retained while your account remains active and are deleted upon verified request;
• server-side conversation records are deleted within seventy-two (72) hours after last activity;
• analytics events are retained for up to one (1) year;
• information stored on your device remains until you clear your browser's site data.

We employ commercially reasonable technical and organizational measures to protect the information we process, including encryption of data in transit and reliance on service providers that encrypt data at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may request access to, correction of, or deletion of the personal information we hold about you by contacting us at the address in Section 13. We will honor such requests regardless of your place of residence, subject to verification of your identity and any legal basis for retention. You may also: sign out of the Service at any time; clear your browser's site data to remove locally stored information; and revoke the Service's camera permission through your browser or device settings.

The Service is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from them. If you believe a child has provided personal information to the Service, please contact us and we will delete it.

The Service is operated from the United States, and the information described in this Policy is processed in the United States. If you access the Service from another jurisdiction, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.

We may revise this Policy from time to time. The revised Policy will be posted on this page with an updated effective date, and material changes will be reflected in that date. Your continued use of the Service after a revision becomes effective constitutes your acknowledgment of the revised Policy.

Questions, requests, and complaints concerning this Policy or our data practices may be directed to contact@imagineapp.net.