Privacy Policy

Material Merge ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use the Material Merge app ("Service"), how we use it, and the choices you have.

By using Material Merge, you agree to the collection and use of information as described here.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Display name (first and last name, if provided) — used to personalize your experience
• Authentication method — whether you signed in with email/password or Google OAuth

Guest users can use the app without providing any account information.

1.2 Wardrobe Data

We store the wardrobe information you enter, including:

• Item names, categories, colors, brands, and notes
• Item location data (furniture, zone, slot number)
• Wear status (clean, worn, dirty, in laundry)
• Photos you take or upload through the app
• Outfit combinations you create

1.3 Usage Data

We may collect non-personally identifiable usage data including app crashes, performance metrics, and feature usage patterns to improve the Service.

1.4 Device Information

We may collect basic device information such as operating system version and device type for debugging and compatibility purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Material Merge Service
• Sync your wardrobe data across your devices (registered accounts)
• Send account-related emails (password reset, security notifications)
• Respond to your support requests
• Debug issues and improve app performance
• Comply with legal obligations

We do not use your wardrobe data to train machine learning models, display advertising, or share with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored using Firebase (Google LLC), a cloud platform with industry-standard security practices including encryption in transit (TLS) and at rest. Firebase is SOC 2 Type II certified and compliant with major security standards.

Photos you upload are stored in Firebase Storage, accessible only via secure authenticated URLs tied to your account. Text data is stored in Cloud Firestore with security rules that restrict access to the authenticated account that created the data.

While we implement reasonable safeguards, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong password and keep your credentials confidential.

4. Data Sharing

We do not sell, trade, or rent your personal information. We may share data with:

• Firebase / Google — our hosting and database provider, acting as a data processor under our direction
• Law enforcement — if required by law or valid legal process
• Business transfers — if Material Merge is acquired or merged, your data may transfer to the new entity under equivalent privacy protections

5. Authentication Methods

Material Merge offers three authentication options:

• Email & Password — your password is never stored in plain text; Firebase handles secure credential storage using industry-standard hashing
• Google OAuth — we receive only your name and email from Google; we do not receive or store your Google password
• Guest (anonymous) — no personal information is collected; data is tied to a device-local anonymous ID

You can convert a guest account to a permanent account at any time without losing any data.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access — request a copy of your personal data
• Correction — update or correct inaccurate information via Account Settings in the app
• Deletion — permanently delete your account and all associated data via Settings → Delete Account. This immediately and irreversibly removes all your items, photos, and account information from our servers
• Portability — contact us to request an export of your data
• Objection — opt out of non-essential data processing

To exercise any of these rights, contact us at support@materialmerge.com.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we immediately delete all associated wardrobe data, photos, and personal information from our servers. Residual copies in backups are purged within 30 days.

Guest session data is retained until the app is uninstalled or the guest account is explicitly deleted.

8. Children's Privacy

Material Merge is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us at support@materialmerge.com.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information (subject to certain exceptions)
• The right to opt-out of the sale of personal information — we do not sell personal information
• The right to non-discrimination for exercising your privacy rights

To submit a CCPA request, contact us at support@materialmerge.com.

10. International Data Transfers

Material Merge is operated from the United States. Firebase stores data in Google's global infrastructure. If you access our Service from outside the United States, your data may be transferred to and processed in the United States, which may have different privacy protections than your country.

11. Third-Party Services

Our Service relies on the following third-party providers:

• Firebase Authentication — identity management (Google LLC)
• Cloud Firestore — database storage (Google LLC)
• Firebase Storage — photo storage (Google LLC)

These services have their own privacy policies. We encourage you to review Google's Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page and, for material changes, by in-app notification. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us