Pool Vault ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this policy carefully. By using Pool Vault, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and a securely hashed password. We do not store your password in plain text.

1.2 Pool Data

When you use the App, you may provide information about your pool, including:

Pool name, type (inground or above ground), surface type, and volume
Sanitizer system type (chlorine, salt, or bromine)
Salt water generator (SWG) settings
ZIP code (used for weather data)
Seasonal mode preferences

1.3 Test Results and Images

When you scan a test strip, the photo is uploaded to our secure servers for AI analysis. We store the image in a private, encrypted storage bucket accessible only to your account. The extracted chemical readings (such as pH, chlorine, alkalinity, hardness, and cyanuric acid) are stored alongside the image for your reference.

1.4 Usage Data

We collect information about how you use the App, including:

Chemical inventory entries (names, quantities, stock levels)
Equipment inventory (types, models, warranty dates)
Maintenance logs (activity types, dates, notes)
Chemical addition logs (chemicals added, amounts, dates)
Shopping list items
Task entries
Troubleshooting sessions (problem types, answers, diagnoses)

1.5 Device and Technical Information

We may collect device information such as your device type, operating system version, and unique device identifiers for the purpose of providing the service and managing subscriptions.

1.6 Location Data

If you grant location permissions, we use your approximate location to provide weather data and UV index information via Apple WeatherKit. Your precise location is not stored on our servers. Your ZIP code, if provided, is stored with your pool configuration.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Pool Vault service
Analyze test strip images using AI to generate chemical readings
Generate personalized treatment recommendations based on your pool's specific configuration
Calculate chemical dosages based on your pool volume and system type
Track your pool's health history over time
Provide weather-based swimming condition alerts
Manage your chemical and equipment inventory
Sync your data securely across your devices
Process subscription payments through Apple's App Store
Send important service-related communications (such as security alerts)
Improve the accuracy and reliability of our AI analysis

3. Data Security

We take the security of your data seriously and employ multiple layers of protection:

Encryption in transit: All data transmitted between the App and our servers uses HTTPS/TLS encryption.
Encryption at rest: Your data is stored on encrypted database servers.
Row-level security (RLS): Database policies ensure that each user can only access their own data. No other user or administrator can view your pool data.
Secure authentication: Authentication tokens are stored in your device's secure keychain (iOS Keychain or Android Keystore), not in plain storage.
Private storage buckets: Test strip images and chemical photos are stored in private, user-scoped storage buckets.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We only share data in the following limited circumstances:

4.1 AI Analysis Service (OpenAI)

When you use the AI test strip scan feature, we send your test strip photo to OpenAI (openai.com), a third-party AI service, for color analysis. Before any image is sent, the app asks for your explicit consent and explains what data is shared.

What we send: The test strip image and strip brand name only. No personally identifiable information (email, name, pool details, or account data) is included.
Who receives it: OpenAI, Inc. (https://openai.com). See OpenAI's privacy policy for how they process data.
Purpose: To extract chemical readings (pH, chlorine, alkalinity, etc.) from the strip colors.
Protection: OpenAI provides the same or equal protection for the data we share with them, in accordance with their privacy policy and data processing practices.

4.2 Payment Processing

Subscription payments are handled entirely by Apple through the App Store. We do not collect, store, or have access to your credit card or payment information. RevenueCat is used to verify subscription status — it receives your anonymous app user ID but not your email or personal details.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

Your data is retained for as long as your account remains active. When you delete your account:

All pool configurations are permanently deleted
All test results, images, and recommendations are permanently deleted
All inventory, logs, tasks, and shopping list items are permanently deleted
Your authentication credentials are removed

Account deletion is available in the App under Settings. Data deletion is irreversible and processed immediately using cascading database deletes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Delete your account and all associated data at any time
Export: Export your pool data from within the App
Restriction: Request that we limit how we process your data
Objection: Object to our processing of your data in certain circumstances

To exercise any of these rights, contact us at support@shepridge.com.

7. Children's Privacy

Pool Vault is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal data, please contact us at support@shepridge.com.

8. Third-Party Services

Pool Vault integrates with the following third-party services, each with their own privacy policies:

Service	Purpose	Data Shared
Supabase	Database, authentication, file storage	All app data (encrypted, RLS-protected)
OpenAI	AI test strip image analysis (user consents in-app before each first scan)	Test strip images and strip brand name; no PII
RevenueCat	Subscription management	Anonymous app user ID, purchase status
Apple WeatherKit	Weather and UV data (iOS)	Approximate device location
PostHog	Product analytics	Screen views, events, device info, account ID

9. Cookies and Tracking

The Pool Vault mobile app does not use cookies. We do not serve ads or build advertising profiles.

9.1 Product Analytics (PostHog)

We use PostHog (posthog.com) to understand how the app is used and to improve the product. PostHog helps us analyze feature usage, screen flows, and onboarding completion — we do not use it for advertising.

Data collected: Screen names, event names (e.g., "test_scan_completed"), device type, operating system, and an anonymized user identifier. We associate events with your account ID only for retention and funnel analysis.
Who receives it: PostHog, Inc. (US/EU hosting). See PostHog's privacy policy for how they process data.
Purpose: Product analytics, feature usage insights, and app performance monitoring.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information is collected, used, shared, or sold
The right to delete personal information held by us
The right to opt out of the sale of personal information — we do not sell your data
The right to non-discrimination for exercising your CCPA rights

11. International Users

If you are accessing Pool Vault from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States where our servers are located. By using the App, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will notify you through the App or by email. Your continued use of Pool Vault after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@shepridge.com
Support: poolvault.app/support