This Privacy Policy explains what information BricksVault ("BricksVault", "we", "us") collects when you use the BricksVault app and website, how we use it, and the choices you have. By using BricksVault you agree to the practices described here.
Information we collect
Account information. When you create an account we process your email address and an authentication identifier through our authentication provider. If you sign in with Google or Apple, we receive the basic profile identifiers those providers return (such as your email). We do not receive your Google or Apple password.
Your collection & portfolio. The sets and minifigures you add, quantities, condition, purchase prices, purchase dates, storage locations, personal notes, wishlist items, and showcase selections.
Content you submit. Photos you upload, reviews and ratings you write, and catalog corrections or contributions you send for moderation.
Preferences & settings. Display name, public handle, currency, notification preferences, an optional Discord webhook URL, an optional Kids-Mode PIN (stored only as a one-way hash), and connected-integration status (e.g. Google Sheets sync, Brickset).
Purchases. If you buy BricksVault Pro in the Android app, Google Play processes the payment. We never see your card or payment details. We receive the purchase status (product, purchase date, renewal or cancellation) and an anonymous purchase identifier linked to your account, through our subscription provider RevenueCat, so we can unlock Pro features on your devices.
Push notification token. If you allow notifications in the Android app, Firebase Cloud Messaging (Google) issues a device token. We store it with your account so we can send the alerts you turned on, such as price drops. It is deleted when you turn notifications off or delete your account.
Device & technical data. We use privacy-preserving, aggregate analytics and standard server logs (such as request metadata) to keep the service reliable and secure. We store some data locally on your device (for offline use and guest mode) using your browser's storage.
How we use your information
To provide the core features: tracking your collection, valuing sets, forecasting, wishlists, and showcases.
To sync your data across your devices when you are signed in.
To send the notifications you enable (for example, price-drop alerts).
To moderate user-submitted content and protect the service from abuse and bots.
To operate, maintain, secure, and improve the app.
AI photo identification
When you use the AI scan feature to identify a set from a photo, the image may be sent to third-party AI providers (for example, Google or OpenAI/OpenRouter) solely to return an identification. On-device identification, when available on your device, runs locally and does not send the image off your device. We do not use your photos to train our own models.
Third-party services
We rely on the following categories of third parties to run BricksVault. Each processes data only as needed to provide its function:
Authentication & database/storage hosting — to manage sign-in and store your data.
Cloud hosting & content delivery — to serve the app and store uploaded images.
AI providers — for photo identification, as described above.
Catalog & pricing sources (such as Rebrickable, BrickLink, eBay, PriceCharting, and Brickset) — we query these for catalog details and market prices; this generally involves set identifiers, not your personal information.
Payments & subscriptions — Google Play Billing processes purchases, and RevenueCat records purchase status so Pro features unlock on your account.
Push notifications — Firebase Cloud Messaging (Google) delivers the alerts you enable in the Android app.
Bot protection — to distinguish humans from automated abuse.
Optional integrations you enable — such as Google Sheets sync or Brickset, which operate only after you connect them.
Sharing your information
We do not sell your personal information. Your collection is private by default. Some information becomes visible to others only when you choose to make it so — for example, publishing a public profile or showcase, or submitting a review or contribution for public display. You can change these choices in the app.
Data retention
We keep your information for as long as your account is active. When you delete your account (see below), we delete your associated data as described. Some minimal records may be retained where required for security, fraud prevention, or legal obligations.
Your rights & choices
Access & correction. You can view and edit your profile, collection, and preferences directly in the app.
Deletion. You can permanently delete your account and its data from inside the app: open the Me tab and choose Delete account. This erases your vault, wishlist, showcase, uploaded photos, reviews, contributions, and preferences. Deletion is immediate and cannot be undone.
Notifications. You can turn notifications on or off in the app or in your device settings.
Security
We use industry-standard measures to protect your data in transit and at rest, including encrypted connections. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.
Children's privacy
BricksVault is intended for a general audience and is not directed to children under 13 (or the equivalent minimum age in your country). Kids Mode is an optional, PIN-gated simplified view of an existing account's data; it is not a separate service for children and does not collect additional personal information. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
International users
BricksVault may process and store information in countries other than yours. Where required, we take steps to ensure your information receives an adequate level of protection.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through in-app notice.
Contact
Questions about this policy or your data? Contact us at [email protected].