What we collect, and what we'll never do with it.

• Account: your email address and a securely hashed password (handled by our auth provider — we never see the password itself), plus your 18+ confirmation.
• Photos and scans: the gear photos you submit and the identification results. Every photo is re-encoded on our server before analysis or storage, which removes location (GPS), camera, and other EXIF metadata; the web app also re-encodes on your device before upload. One representative photo per scan is stored in a private bucket so your history works — it has no public URL unless you share it (see “Sharing” below).
• Things you create: kits, reviews, corrections, feedback you send us (with the email you choose to include), and your credit ledger (charges, grants, refunds, purchases — with the checkout reference and amount, so we can reconcile payments).
• Payments: handled entirely by Stripe. We receive confirmation that a purchase happened and what it was for — never your card number.
• Operational data: standard server logs; error reports sent to Sentry when something breaks (scrubbed before they leave the app: photos, auth headers, and cookies are removed, and Sentry's default personal-data collection is off); and aggregate, cookieless traffic counts (Vercel Web Analytics, and Plausible where configured). We do not use Google Analytics, the Meta pixel, or any advertising tracker on KitID.

Photos are analyzed server-side by an AI vision model (currently provided by Anthropic) to identify equipment. We do not perform facial recognition, and we do not attempt to identify, profile, or infer anything about people — age, identity, affiliation, or location. If a person appears in your photo, the analysis is instructed to ignore them and describe only the gear, and images that fail our pre-checks are rejected without identification.

Scans are private by default. If you choose “Share” on a scan, KitID creates a public page at kitid.app/s/<code> that shows that scan's photo, the items identified, and the loadout read; a preview image made from the same photo and results is served to social sites and chat apps that unfurl the link. Anyone with the link can see it. Public kits work the same way. Delete the scan or your account and the page goes with it — copies others have already saved are outside our control.

Running the Service: identifying your scans, keeping your history and kits, metering credits, processing purchases, sending account email (confirmations, resets — via our email provider), preventing abuse, and improving identification quality (for example, using your corrections to make the scanner smarter). That's it.

• We never sell your personal data. Not to advertisers, not to data brokers, not to anyone. If the business ever offers aggregate market insights, they will be anonymized and aggregated with a minimum group size large enough that no individual can be identified — and personal data still won't be sold.
• We never run advertising trackers or sell ad targeting.
• Gear Wizard Armory is our own store; it's the same business as KitID, and every link to it carries an "Our store" badge. If KitID ever earns a commission on a link, the disclosure appears beside that link — not in a footer.
• We never analyze people in photos.
• We never store your card details.

Like nearly every modern service, we use vetted processors to run infrastructure — a database/auth platform (Supabase), hosting and traffic analytics (Vercel), AI analysis (Anthropic), payments (Stripe), transactional email (Resend), and error monitoring (Sentry). They process data only to provide their service to us. We don't share your personal data with anyone else, except if the law genuinely requires it — in which case we'll push back on overbroad demands.

• Export: download everything we hold about you — profile, scans, results, kits, reviews, feedback, ledger — as one file from your Account page, anytime. (Photos are not inlined; email us for originals.)
• Delete: delete your account yourself from the Account page. It permanently removes your profile, scans, photos, kits, reviews, corrections, and ledger, and public pages you shared go with it. Feedback you sent us is kept for our own records but detached from you — the account link and your email are removed from it.
• Correct: account details can be updated in-app; anything else, email us.

These controls are live for everyone — you don't need to cite a statute to use them. If you're in a jurisdiction with privacy rights (GDPR, CCPA/CPRA, and similar), these are also how you exercise access, deletion, and portability; for anything they don't cover, contact us and we'll honor valid requests.

We keep your data while your account exists. Delete the account and it's removed from production immediately, with residual copies in encrypted backups aging out on the backup cycle. Operational logs are short-lived.

Data is encrypted in transit; access is controlled with row-level security so accounts can only read their own rows; scan photos live in a private bucket; administrative access is limited and keyed. No system is perfectly secure — if we ever suffer a breach affecting your data, we'll tell you what happened and what we're doing about it.

KitID is for adults 18+. We don't knowingly collect data from anyone under 18; if we learn we have, we'll delete it.

If this policy changes materially, we'll post the update here with a new date and flag it by reasonable means. The never-sell commitment doesn't change.

Privacy questions or requests: hello@kitid.app