Privacy Policy

Last updated: September 27, 2026

Art Soft, LLC ("we", "our", or "us") develops and operates the Art of Shop mobile application ("the App"). We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, why we collect it, and how you can control it.

1. Information We Collect

We collect only the information necessary to provide the App's core functionality:

• Account information — You can use the App without an account; we then keep only what you create in it. If you create an account, we collect your email address and display name during registration. Your email is used for authentication and account recovery. Your display name is visible to collaborators on shared lists.
• User-generated content — Shopping lists, items, and any associated data you create within the App. This content is stored on our servers to enable syncing across devices and sharing with other users.
• Device information — Your device type and push notification token, used solely for delivering notifications about shared list activity.
• Technical logs — To keep the service secure and to fix problems, our servers record your IP address, your device and app type (user agent), the action performed (for example adding an item) and, when something goes wrong, details of the failed request.

2. How We Use Your Information

Your information is used exclusively for the following purposes:

• Providing, operating, and maintaining the App
• Enabling real-time collaboration on shared shopping lists
• Delivering push notifications about list updates and requests
• Authenticating your identity and securing your account
• Improving the App based on usage patterns (no personal data is used for this purpose)

3. Data Sharing

We do not sell, trade, rent, or monetize your personal information in any way. Your shopping list data is shared only with users you explicitly invite to collaborate. We will never share your data with advertisers or data brokers.

4. Third-Party Services

The App integrates with the following third-party services, each for a specific and limited purpose:

• Firebase Cloud Messaging (Google) — Used to deliver push notifications to your device. Only your device token is shared with Firebase. Firebase Privacy Policy.
• Google Sign-In / Apple Sign-In — If you choose to sign in with Google or Apple, we receive your email address and display name from these providers to create your account. No additional data is requested or stored from these services.

5. Data Storage and Security

Your data is stored on secure servers located in Europe. We implement industry-standard security measures to protect your information:

• Passwords are hashed using bcrypt with salt
• API authentication tokens are hashed using SHA-256
• All data in transit is encrypted via HTTPS/TLS
• Database access is restricted and monitored

While no system is 100% secure, we take reasonable and appropriate steps to protect your personal data from unauthorized access, alteration, or destruction.

6. Data Retention and Deletion

We retain your data only for as long as your account is active. An account you use without signing up (a guest account) is deleted after 12 months without use. If you delete the App before creating an account, the lists in that guest account can't be recovered. Activity records linked to your account are kept for 90 days and error records for 30 days, then deleted automatically. The server's technical log files, which contain the same kind of request information, are rotated automatically as they fill up and older files are deleted.

You can delete your account at any time from the App settings. Upon deletion:

• Your personal data, your trips, the items only you could see, and the activity and error records linked to your account are permanently removed from our servers
• Shopping lists you own and don't share with anyone are deleted
• Lists you share with other people stay available to them: ownership passes to the member who joined first
• Your membership in other people's shared lists is revoked
• This process is irreversible

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Correction — Update or correct inaccurate information
• Deletion — Delete your account and all associated data
• Portability — Request your data in a portable format

To exercise any of these rights, contact us at dev@artsoft.ge.

8. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete that information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you through the App or by updating the "Last updated" date above. Your continued use of the App after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Art Soft, LLC
Tbilisi, Georgia
Email: dev@artsoft.ge