Privacy Policy

1. Who we are

Ginkgo is a home inventory application operated by Nudge App Ltd, a company registered in Northern Ireland under company number NI734993.

Nudge App Ltd is the data controller for the personal data collected and used through Ginkgo and the website getginkgo.uk.

Registered office:

You can contact us about privacy or data protection matters at privacy@getginkgo.uk.

2. What we collect

Information you provide

We may collect the following information when you use Ginkgo:

• Account information, such as your name and email address when you register.
• Inventory data, including item names, descriptions, notes, photos, locations, zones, containers, tags, projects, reminders, and other information you add to the app.
• Voice inputs and transcripts when you choose to use voice features.
• Subscription and purchase status, such as whether you have access to Ginkgo Plus or Founder Pass.
• Communications, including any messages, support requests, or feedback you send to us.

When this policy refers to locations or storage locations, it means places you create inside Ginkgo, such as rooms, sheds, garages, shelves, or boxes.

Please avoid uploading information you do not need to store in Ginkgo, especially sensitive information such as medical details, financial documents, identity documents, or information about children.

Information collected automatically

We may collect limited technical information when you use the app or website, including:

• Usage data, such as features used, screens visited, and basic interaction patterns.
• Device information, such as device type, operating system version, browser type, and app version.
• Crash reports and diagnostic information, where needed to fix bugs and improve reliability.

We use PostHog for product analytics. Where session replay is enabled, it is configured to mask all text inputs and images. Where possible, we use aggregated or anonymised information for analytics and product improvement.

We use Sentry for crash and error reporting, so we can find and fix reliability issues.

We do not use your data for third-party advertising or tracking, and analytics data is not linked across other companies' apps or websites.

Information from third parties

If you make an in-app purchase, Apple App Store, Google Play, or RevenueCat may provide us with purchase, subscription, renewal, cancellation, and entitlement information. We do not receive your payment card details.

3. How we use your data

We use your personal data for the following purposes:

AI-assisted features are optional and are off until you allow them. Before Ginkgo sends anything to OpenAI, the app asks for your explicit permission for that specific feature and shows exactly what will be shared. Depending on the feature, that content can include photos for camera quick logging, voice recordings and transcripts for voice commands, typed commands, project titles and descriptions for project planning and cover artwork, and the names of saved items, locations, zones, and containers supplied as matching context. Processing happens through our Supabase Edge Functions, and our servers confirm your permission before any content is sent.

You can withdraw any AI permission at any time in the app under Profile → Privacy & security. Each feature has a manual alternative, so declining never blocks you from using Ginkgo. We do not use your Ginkgo inventory content to train Ginkgo-owned models, and OpenAI does not use content submitted through its API to train OpenAI models.

4. Subscriptions and purchases

Ginkgo offers paid features through Ginkgo Plus subscriptions and Founder Pass lifetime purchases.

Purchases are processed through the Apple App Store or Google Play, depending on where you buy. Those platforms handle payment processing and may send us purchase confirmation, subscription status, renewal status, cancellation status, and related entitlement information.

We use RevenueCat to manage subscriptions, purchases, and access entitlements on the backend. RevenueCat helps us understand whether your account should have access to Ginkgo Plus or Founder Pass.

Nudge App Ltd does not see or store your payment card details.

5. Legal basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data.

We rely on the following legal bases:

• Contract: where processing is necessary to provide the service you have signed up for, such as storing your inventory, managing your account, or managing purchases.
• Legitimate interests: where processing is necessary for app improvement, security, fraud prevention, support, and service reliability, provided those interests are not overridden by your rights.
• Consent: where you have given consent, such as sending content to OpenAI for optional AI-assisted features, or optional marketing communications if offered. You can withdraw consent at any time; AI permissions can be withdrawn in the app under Privacy & security.
• Legal obligation: where we are required to process or retain data by law.

6. Sharing your data

We do not sell your personal data.

We only share your data where necessary to operate, secure, improve, or support Ginkgo. This may include:

• Supabase: hosting, database, authentication, and account infrastructure.
• OpenAI: AI-assisted voice transcription, natural language parsing, camera image analysis, project planning, and project cover generation — only after you have granted permission for the specific feature, which you can withdraw at any time in the app.
• Resend: delivery of transactional emails, such as sign-in confirmations and password reset links.
• Expo (EAS): delivery of app builds and over-the-air app updates.
• Sentry: crash and error reporting.
• PostHog: product analytics and, where enabled, session replay with text inputs and images masked.
• RevenueCat: subscription, purchase, and entitlement management.
• Apple App Store and Google Play: payment processing and app store purchase management.
• Professional advisers, regulators, or authorities where required by law.

These providers are only allowed to process your data for the purposes we instruct and, where required, under appropriate data processing agreements.

Legal requirements

We may disclose data where required to do so by law, court order, or at the request of a law enforcement or regulatory authority.

Business transfer

If Ginkgo or Nudge App Ltd is acquired, merged, reorganised, or transferred to another organisation, your data may be transferred as part of that process. Where appropriate, we will notify you and explain your options.

7. International data transfers

Your data may be transferred to and processed in countries outside the UK.

Where this happens, we will take steps to ensure appropriate safeguards are in place in accordance with UK GDPR. These safeguards may include adequacy decisions, standard contractual clauses, or equivalent legal protections.

8. How long we keep your data

We keep your account and inventory data for as long as your account is active.

If you close your account, we aim to delete your account and inventory data within 30 days, unless we need to keep certain information for legal, security, accounting, dispute-resolution, or regulatory reasons.

Backup copies may remain for up to 90 days before being overwritten or deleted.

We may keep anonymised or aggregated data for longer where it can no longer identify you.

9. Your rights

Under UK GDPR, you have rights over your personal data.

These include:

• Access: you can request a copy of the personal data we hold about you.
• Rectification: you can ask us to correct inaccurate or incomplete data.
• Erasure: you can ask us to delete your data.
• Restriction: you can ask us to limit how we use your data in certain circumstances.
• Portability: you can request your data in a machine-readable format, where applicable.
• Objection: you can object to processing based on legitimate interests.
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at privacy@getginkgo.uk.

We will respond within one month, unless the request is complex or we are legally allowed more time.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office.

Website: https://ico.org.uk

10. Security

We use appropriate technical and organisational measures to protect your personal data.

These may include:

• Encryption in transit using TLS.
• Encryption at rest where supported by our infrastructure providers.
• Access controls.
• Authentication controls.
• Regular security reviews.
• Limited access to personal data by authorised people only.

No method of transmission over the internet is completely secure. While we work to protect your data, we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at privacy@getginkgo.uk.

11. Children

Ginkgo is not directed at children under 16.

We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, please contact us and we will take steps to delete it where appropriate.

12. Cookies

Our website uses cookies and similar technologies.

We use strictly necessary cookies where required to operate the website and provide core functionality.

Where we use optional analytics or marketing cookies, we will ask for your consent before using them.

For full details, see our Cookie Policy.

13. Changes to this policy

We may update this Privacy Policy from time to time.

If we make significant changes, we will notify you by email, in-app notice, or a notice on the website.

The "Last updated" date at the top of this page shows when the policy was last changed.

14. Contact us

For any questions about this Privacy Policy or how we handle your data, contact:

Email: privacy@getginkgo.uk

Post: