Privacy Policy

The two ways PROVENARI runs

Local mode (free, no account). You can use PROVENARI without creating an account. In local mode, everything you enter — your Collection, item details, photographs, documents, values, insurance entries, and locations — is stored only on your device, in the app’s own storage. Nothing you record in local mode is sent to our servers, and we cannot see, back up, or recover it. If the app is deleted or the device is lost, damaged, or reset, local-mode data is gone unless you have your own device backup (such as an iCloud or computer backup of your phone, which is governed by Apple’s terms, not ours).

Hosted mode (account and Membership). A paid PROVENARI Membership adds cloud storage: your account and Collection are stored on our servers so they can be backed up, synced across devices, and restored. When you upgrade, the app promotes your local Collection into your hosted account; your data stays on the device until that transfer is verified to have succeeded.

Information you provide

• Account information. When you create an account: your email address, a password (stored only in securely hashed form by our authentication service), and a display name if you choose one.
• Ownership Records. The details you record about your items — names, brands, models, reference and serial numbers, vehicle identification numbers, acquisition dates and prices, notes, and similar fields.
• Photographs and documents. Images and files you attach as evidence, such as receipts, certificates, appraisals, titles, and registrations.
• Values. Amounts, dates, and sources you record for what an item was worth.
• Insurance information. Carriers or saved providers, policy numbers, coverage amounts, deductibles, term dates, agent contact details, and claims you record.
• Locations. Places you name and describe in the app (for example “home safe” or a storage unit), including any address text you choose to enter. PROVENARI does not use your device’s GPS and does not track where you are; a Location is only what you type.

Information collected automatically

The app does not include third-party analytics or advertising libraries, and we do not build behavioral profiles. Our service providers generate routine technical logs when the app talks to their servers (such as IP address, timestamps, and request status), which are used for security, debugging, and abuse prevention. The app is designed not to write sensitive values — such as serial numbers, policy numbers, or document contents — into its logs.

The provenari.app website likewise includes no analytics or advertising code. Its hosting provider keeps routine server logs of visits and form submissions (such as IP address and time), used the same way.

The launch list

Our website offers a launch list: you can leave your email address to hear when PROVENARI is released. Joining is optional and separate from the app — it creates no account, and an address on the launch list is not linked to any Collection.

• What we collect. The email address you enter and the date and time you submitted it.
• What we use it for. One confirmation that you joined, and messages about PROVENARI’s release as launch approaches — no newsletters. We use it for nothing else.
• Where it is kept. The list is kept by Resend, our email provider, which stores each address as a contact on the list and sends the launch-list email. Each signup also sends a notification to our launch-list mailbox. Addresses that joined before the website moved to its current hosting were kept in a list file by Hostinger, our previous website host; they are being moved to Resend.
• Leaving the list. Reply to any launch-list email with the word “remove”, or write to support@provenari.app. Requests are handled by hand, not automatically. We then stop sending you launch-list email, remove your address from the list, and delete the signup notifications that carry it. We keep a record that you asked — your address, marked as removed — so that it is not added back to the list without your agreement.

How we use information

• To provide the product: storing, displaying, backing up, and syncing your Collection.
• To authenticate you and secure your account.
• To process your Membership and determine which features your account can use.
• To send transactional email, such as sign-in verification codes.
• To send launch-list email — a confirmation when you join, and messages about PROVENARI’s release — to addresses on the launch list.
• To respond when you contact support.
• To protect the service against fraud, abuse, and security incidents.

We do not sell your personal information, and we do not use it for advertising.

Where your data is stored

Local-mode data lives on your device. Hosted data — your account, Ownership Records, and evidence files — is stored with Supabase, our cloud database and storage provider, in private storage. Access is controlled per account: the service is built so that each account can read and write only its own rows and files, photographs and documents live in private buckets rather than at public URLs, and files are served through short-lived signed links generated only for you. Sensitive identifiers such as serial numbers and policy numbers are masked by default in the interface.

Service providers

We share data only with the providers needed to run the product and its website:

• Supabase — database, authentication, and file storage for hosted accounts.
• Apple — the iOS platform the app runs on, and App Store billing when you purchase a Membership. Your payment card details go to Apple, not to us; we do not receive them.
• RevenueCat — subscription management: it tells us whether a Membership purchase is active so the right features unlock. It receives purchase and entitlement information, not the contents of your Collection.
• Resend — delivery of transactional email, such as verification codes; storing the launch list as contacts; and sending launch-list email and signup notifications. It receives your email address and the message content.
• Vercel — hosting for the provenari.app website. It keeps routine request logs of visits and form submissions, such as IP address and time.
• Hostinger — our email mailboxes, including the launch-list mailbox and the signup notifications described above, and the launch-list file from before the website moved.

Each provider processes data to provide its service to us, under its own security and privacy commitments. We do not share your Collection with insurers, appraisers, advertisers, or data brokers. We may disclose information if the law requires it, or to protect the rights, safety, or security of users or the service.

Payments

PROVENARI Membership is a paid subscription. Purchases are made through the app store on your platform (for example, Apple’s App Store), and billing, renewal, and refunds are handled by that store under its rules. We receive confirmation of your subscription status, not your payment details.

Retention and deletion

• While your account exists, hosted data is retained so it can be restored and synced. Removing a photograph or document from a record deletes the stored file from our servers.
• If your Membership lapses, your data is not deleted. Limits apply to creating new content, never to keeping what you already recorded.
• Account deletion is available in the app (Profile → Delete account). It permanently deletes your account and everything in it — records, evidence files, and account data — from our systems. This cannot be undone. Residual copies in encrypted backups of our providers age out on their backup schedules.
• Local-mode data is under your control alone: deleting the app deletes it, and we hold no copy.
• Launch-list addresses are kept until you ask to leave the list; there is no fixed expiry. After you leave, only the record that you asked to be removed is kept.

Security

Hosted data is encrypted in transit and at rest by our infrastructure providers. Access is enforced per account at the database layer, evidence files are private and reachable only through short-lived signed links, and the app offers an optional biometric lock (Face ID / Touch ID / passcode) as a device-level privacy gate. No system is perfectly secure, and no one can honestly promise otherwise — but the product is built so that a lost link, a shared screen, or a stray log does not expose your identifiers.

Children

PROVENARI is not directed to children and is not intended for use by anyone under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

Your rights and choices

You can read, correct, and delete what you have recorded directly in the app, and you can delete your entire account in the app at any time. Depending on where you live, you may also have legal rights to access, correct, delete, or receive a copy of your personal data, or to object to certain processing. To exercise any of these, email support@provenari.app from the address on your account and we will respond.

Changes to this policy

When this policy changes, we will update it in the app and revise its effective date. If a change meaningfully reduces your rights over data you have already stored, we will notify account holders by email or in the app before it takes effect.