Privacy Policy

1. Who we are

IZCHI is a price-tracking and comparison service operated from Virginia, United States. It is offered to people in the United States. Questions about this policy go to legal@izchiapp.com.

2. Information we collect

Your account. Your email address, a display name if you add one, whether your email is verified, and the sign-in identifier Firebase Authentication creates for you. Your password is handled by Firebase; IZCHI's servers never receive it. We also record which version of our Terms you agreed to and when.

Your trackers. The products you track, your target prices, which marketplaces to watch and whether each tracker is active; the listing details we fetch for them (title, price, currency and a link); and the prices we record each time we check.

Alerts. The notifications we generate for your trackers, whether you have read them, and your alert preferences.

Home feed interests. While you are signed in, the shopping category (for example “Audio”) and at most one matching keyword from a fixed IZCHI list for the searches you run and the products you open. We never store the search text itself. These are kept for up to 90 days (at most 200 entries), and you can clear them at any time in Account settings. Products you track also shape your Home feed while you track them.

Your marketplace vote, if you choose one in “What should IZCHI add next?”, and when you suggest an “Other retailer”, the name exactly as you typed it. Only IZCHI’s owner sees typed names; the public results show one combined “Other” total.

Your feature votes, if you vote on the What’s Coming page: which features you voted for and when. Only vote totals are shown on the site; who voted for what is never published.

Visit counts. When you open a page, your browser sends IZCHI a random identifier for that browser tab (it disappears when the tab closes), the page’s route with any IDs and search terms removed, and, for the first page in a tab, the website that linked to us (only its domain is kept) and a campaign tag if the link had one. We store a one-day hash of the tab identifier, never the identifier itself, and no IP address, account, browser details or location. We use this only to count visits and see which pages are used. Nothing is sent if your browser has Do Not Track or Global Privacy Control turned on.

Referral links. If you open someone’s IZCHI invitation link, your browser remembers its code for 30 days and offers it once after you create an account; we then record which code your new account came from. Each account’s own link has a random code that does not reveal who owns it. We count visits to each link, without storing who visited.

Browser notifications, only if you turn them on: the push subscription your browser issues (an endpoint URL and two encryption keys) and your browser type. It is deleted when you turn notifications off or the browser reports it expired.

Feedback you send in the app: its category, summary and description, plus the page path you were on (without any query string), your browser’s user-agent string, a coarse device type such as “iOS”, and your window size.

IZCHI Pro, if you subscribe (Pro checkout is not yet open to the public): your plan, billing interval, subscription status, renewal date and Stripe customer and subscription identifiers. You enter payment details on Stripe’s own page; IZCHI never receives or stores your card number.

Technical and log data. Our servers use your IP address in memory to apply rate limits and share marketplace capacity fairly; IZCHI does not store it in its database. Our hosting providers keep standard request logs (such as IP address, browser type, the page or address requested and the time) to run and secure their services, under their own retention settings. If a signed-in account opens IZCHI’s owner pages, we record the account’s sign-in identifier, the page, whether access was allowed, and the time, as a security record.

Emails you send us at our support, billing or legal addresses.

3. What we don’t do

IZCHI does not use advertising trackers, marketing cookies, or third-party analytics or error-monitoring services. We don’t sell personal information, we don’t share it for cross-context behavioral advertising, and we don’t give it to data brokers.

The only usage data IZCHI collects is the first-party visit counts described above, kept on IZCHI’s own servers. The app also contains code for product analytics and error reporting, but no provider is connected and none of that data leaves your browser today. If we connect one, we will update this policy first and say plainly what is sent. The analytics code is written so that it cannot send your search terms, the listings you view, prices, your email address or your user ID.

4. How we use information

• To create your account, sign you in and keep it secure
• To check marketplace prices for your trackers and send the alerts you asked for
• To order your Home feed by the categories you engage with
• To run IZCHI Pro: billing, the emails subscription law requires, and access to Pro features
• To answer your messages and feedback
• To operate, protect and fix the service, including rate limiting and security records

5. Who receives information

We share personal information only with the service providers that run IZCHI for us, each for the purpose listed, and when the law requires us to disclose it.

When you click through to a retailer, you leave IZCHI and the retailer’s own privacy policy applies to what you do there.

6. Cookies and browser storage

IZCHI sets no cookies. Firebase keeps you signed in using your browser’s storage, and IZCHI stores a few small functional values in your browser (for example an unsent tracker draft). None of it is used for advertising. Two are sent to IZCHI itself and no one else: the random tab identifier behind visit counts, and an invitation code you followed. Our Cookie Policy lists each one.

7. Tracking across websites and Do Not Track

IZCHI does not track you across other websites, and we do not allow other companies to collect information about your activity on IZCHI for their own tracking or advertising. The providers in section 5 receive only what they need to provide their service to us. IZCHI does no cross-site tracking. We still honor a browser “Do Not Track” or Global Privacy Control signal: with either one on, your browser does not send IZCHI’s visit counts at all.

8. How long we keep information, and deleting it

We keep your account data while your account exists. Home feed interests and visit counts are deleted after 90 days. Push subscriptions are deleted when you turn notifications off or they expire.

Deleting your account (Account settings → Delete account) immediately and permanently removes from our database your account, trackers and their price history, alerts, Home feed interests, marketplace vote, feature votes, referral link and referral record, push subscriptions and feedback, and deletes your Firebase sign-in. It cannot be undone. If you have an active Pro subscription, cancel it first; you can delete your account once it has ended.

Some information outlives an account deletion, for the reasons given:

• Payment records. If you subscribed, Stripe keeps the invoices and payment records it must hold; when you delete your account we remove your email, name, address and IZCHI account ID from your Stripe customer record. IZCHI may keep its own record of payments and refunds (amounts, dates and Stripe references, without your name or email) for tax and accounting.
• Security records. Owner-page access records are kept, but without your account’s sign-in identifier.
• Your emails to us stay in our mailboxes unless you ask us to delete them.
• Backups and provider logs. Database backups and our providers’ logs keep copies for a limited period under their retention settings before they are overwritten.

9. Your choices and rights

You can see and change most of your information in the app: your display name and alert preferences, your trackers, your Home feed interests (Clear) and your account (Delete). For a copy of your data, a correction you can’t make yourself, or any other privacy request, email legal@izchiapp.com. Depending on where you live, the law may give you further rights, such as to access, correct or delete your data; we honor those requests.

To protect your account, we act on a request only when it comes from the email address on the account, or after you confirm it from that address. We aim to acknowledge requests within 5 business days, and where a law sets a response deadline for you, we respond within it.

Emails. Turn alert emails on or off on the Alerts page. Security emails (such as password resets) and, if you subscribe, the subscription notices the law requires cannot be turned off. IZCHI does not send marketing email.

10. Children

IZCHI is for adults (see our Terms) and is not directed to children under 13. If we learn that an account belongs to a child under 13, we will delete it.

11. Security

IZCHI uses encrypted connections (HTTPS), a hosted sign-in provider and a hosted payment page, and limits access to personal data to the people and systems that need it. No system is perfectly secure, so we can’t promise information will never be exposed, and we will notify you if the law requires it.

12. Changes to this policy

When we change this policy we post the new version on this page and update the date at the top.

13. Contact

Privacy questions and requests: legal@izchiapp.com. This mailbox is separate from general support so privacy requests are not lost among other messages. You can also reach us through our Contact page.