Privacy policy

Last updated: 12 June 2026

Things of Mabob™ ("we", "us", "the app") helps you organise your belongings by putting them in boxes and cataloguing them with photos, voice notes, and AI. This policy explains what personal data we collect, why, who we share it with, and the choices and rights you have. We've tried to write it in plain language.

The short version

We collect the account details you give us, plus the photos, audio, and text you add to your items.
Your photos, voice notes, and item text are sent to Google's AI to generate titles, descriptions, keywords, transcripts, and to spot duplicates.
We don't run third-party advertising or behavioural-analytics trackers, we don't collect your location, and we never sell your data.
We use a crash-reporting tool (Sentry) to capture errors and diagnose crashes so we can fix them — not to track you or your behaviour.
If you share a household, your data is visible to the other members of that household.
You can permanently delete your account at any time from inside the app. See how to delete your account.

1. Who we are

The data controller responsible for your personal data is Popcode Studio, LLC, located at 2530 Hosea L. Williams Dr. NE, Suite B, Atlanta GA 30317. You can reach us about any privacy matter at support@thingsofmabob.com.

2. Information we collect

Information you provide

Account & sign-in: your email address and a password (passwords are stored only in hashed form by our authentication provider, never in plain text).
Profile: an optional display name and avatar image, and your chosen language.
Household: a household name, the members you invite, and each member's role within the household.
Your item content: the photos you take, the voice notes you record, and the text you write — item titles, descriptions, tags, notes, and the rooms and boxes you organise items into.
Invitations: if you invite someone by email, the email address you enter so we can send them the invitation.
Support: anything you send us when you contact support.

Information created by using the app

AI-generated content: titles, descriptions, keywords, estimated physical size, and audio transcripts produced from your photos and voice notes (see section 4).
Image and text "fingerprints" (embeddings): numeric vectors derived from your photos and text, used to detect duplicate items and match lost items. These are not human-readable.
Subscription data: if you buy a subscription, your purchase, plan tier, and renewal status, managed through our payments provider.
Device & push tokens: if you enable notifications, a push token for your device and whether it's iOS or Android, so we can deliver notifications.
Diagnostics & crash reports: error and event logs we keep in our own private database, plus crash reports — the technical details of an error or crash, such as the error type and stack trace, the app version, and your device model and operating system — which we also send to our crash-reporting provider, Sentry, so we can diagnose and fix problems. These are not used for advertising or behavioural profiling.

What we do not collect

We do not collect your location or GPS data.
We do not use third-party advertising, marketing, or behavioural-analytics trackers (no ad SDKs, no cross-app tracking, no Google/Facebook analytics, no Amplitude or similar). The one diagnostics tool we use, Sentry, captures crash and error reports only — never to profile you or track your activity across apps.
We do not build advertising profiles, and we do not sell your data.

3. How we use your information

To provide the core service — storing, organising, and showing your items, boxes, and households across your devices.
To generate AI titles, descriptions, keywords, and transcripts, and to detect duplicate and lost items.
To enable household collaboration — sharing items, tasks, and notifications between members.
To process subscriptions and manage your plan.
To send notifications you've asked for (e.g. a household task, or a possible match for a lost item).
To provide customer support and to keep the app secure, prevent abuse, and fix bugs.
To comply with our legal obligations.

4. AI processing of your content

A core feature of the app is automatic cataloguing. To make it work, we send the relevant content to Google (the Gemini and Vertex AI services):

Photos you capture are sent to Google to generate a title, description, and keywords, and to create a fingerprint used for duplicate and lost-item matching.
Voice notes you record are sent to Google to produce a text transcript.
Item text (such as a lost-item description) may be sent to Google to create a text fingerprint for matching.

This processing happens through our secure backend — your content is never sent to Google directly from third-party ad networks, and the results are returned only to us and stored against your account. Google processes this content to perform the requested operation and return the result. We do not use AI to make decisions that have legal or similarly significant effects on you. For more on how Google handles API data, see Google's Gemini API terms.

5. How your information is shared

With other members of your household

Things of Mabob™ is built for shared households. If you create or join a household, the items, photos, voice notes, text, tasks, and member list in that household are visible to the other members of that household. Admins can invite and remove members. Think of a household like a shared folder: everything in it is shared with the people in it.

With our service providers (sub-processors)

We use a small number of trusted providers to run the app. They may process your data only on our instructions and only to provide their service to us:

Provider	Purpose	Data involved
Supabase	Cloud database, file storage, and authentication — our core infrastructure	All account data and item content (photos and audio are kept in private storage)
Google (Gemini / Vertex AI)	AI analysis, transcription, and duplicate/lost-item matching	Item photos, voice notes, and item text
RevenueCat	In-app subscription management	A household identifier and subscription status (no name or email)
Expo, Apple (APNs), Google (FCM)	Delivering push notifications	Your device push token and the notification content
Sentry	Crash and error reporting, to diagnose and fix problems	Crash diagnostics — error details and stack traces, app version, and device model and operating system
Resend	Sending invitation emails (only when you invite someone by email)	The recipient's email address and invitation details
Netlify	Hosting our website (including this page)	Standard web server logs

For legal reasons or business transfers

We may disclose data if required by law, to enforce our terms, or to protect the rights and safety of our users and others. If we're involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that deal; we will notify you of any change in control of your data.

6. Legal bases for processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we rely on:

Performance of a contract — to provide the app's core features you've signed up for.
Legitimate interests — to keep the app secure, prevent abuse, fix bugs, and improve our service, balanced against your rights.
Consent — for push notifications and for accessing your camera, microphone, and photos; you can withdraw consent at any time in your device settings.
Legal obligation — where we must process data to comply with the law.

7. Data retention & deletion

We keep your personal data for as long as your account is active. When you delete your account, your login and all data that belongs only to you is permanently erased. Content you contributed to a shared household is anonymised (your authorship is removed) so the household can keep functioning for its other members.

You can delete your account at any time from inside the app — see the step-by-step guide. Deletion is immediate. Residual copies may persist in encrypted backups for up to 7 days, after which they are unrecoverable. We may retain a minimal record where the law requires it (for example, tax records relating to a purchase).

8. Security

We protect your data with encryption in transit (HTTPS/TLS), database-level access controls that restrict each user to their own household's data, and private file storage that is reachable only through short-lived, signed links. No system is perfectly secure, but we work to protect your information using industry-standard measures.

9. International data transfers

Our providers (including Supabase, Google, RevenueCat, and Sentry) may process and store data on servers in the United States and other countries. Where data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. By using the app, you understand your data may be processed in these locations.

10. Your privacy rights

Depending on where you live (including under the EU/UK GDPR and the California Consumer Privacy Act), you may have the right to:

Access a copy of the personal data we hold about you.
Correct inaccurate data (your name, email, and item content can be edited in the app).
Delete your account and data (in-app deletion).
Port your data — request an export in a portable format.
Restrict or object to certain processing.
Withdraw consent at any time, without affecting prior processing.
Not be discriminated against for exercising your rights (CCPA).

We do not "sell" or "share" your personal information as those terms are defined under California law. To exercise any right, email support@thingsofmabob.com; we may need to verify your identity first. EEA/UK users also have the right to lodge a complaint with their local data protection authority.

11. Children's privacy

Things of Mabob™ is not directed to children, and we do not knowingly collect personal data from children under 13 (or under 16 in the EEA where applicable). If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the "last updated" date above and, where appropriate, notify you in the app. We encourage you to review this page periodically.

13. Contact us

Questions, requests, or concerns about your privacy? Email us at support@thingsofmabob.com and we'll aim to respond within 2 business days.

This policy is provided to support compliance with the EU/UK GDPR, the California Consumer Privacy Act (CCPA), and the privacy disclosure requirements of the Apple App Store and Google Play. It is a template tailored to how the app works and should be reviewed by qualified legal counsel before publication.