1. Introduction

Grab For Me ("the app", "we", "us") is a collaborative shopping task manager developed by Yan Naing Htin Kyaw. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding your data. By using the app you agree to the terms described below.

2. Data We Collect

We collect only the data needed to operate the app:

• Account data — email address and hashed password, or OAuth tokens if you sign in with Google.
• Profile data — optional display name and avatar photo you choose to upload.
• Task data — shopping task titles, item lists, quantities, notes, submitted amounts, and payment status.
• Connection data — records of friend connections you establish via QR code.
• Usage data — basic app interactions stored by Supabase for authentication and real-time functionality (e.g. session tokens). We do not use third-party analytics or advertising SDKs.

3. How We Use Your Data

• To create and manage your account.
• To allow you to create, assign, and track shopping tasks with other users.
• To send real-time updates when tasks or item statuses change.
• To enable QR-based friend connections.
• To maintain app security and prevent fraudulent access.

We do not sell your data, show you advertisements, or share your data with any third party for marketing purposes.

4. Data Sharing

Your data is shared only in the following circumstances:

• With other app users you connect to — task titles, item lists, notes, and progress are visible to the task owner and assigned buyer.
• With Supabase — our backend provider stores and processes your data on secure, encrypted servers. See Supabase's Privacy Policy.
• Legal requirements — if required by law or to protect the safety of our users.

5. Data Storage & Security

All data is stored on Supabase-managed servers and encrypted in transit using TLS/HTTPS. Passwords are never stored in plain text. We apply row-level security policies to ensure users can only access data they are authorised to see.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is removed immediately. Anonymised aggregate records (with no personally identifiable information) may be retained for up to 90 days for security and audit purposes.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — update your profile information at any time in Settings.
• Delete — permanently delete your account and all associated data via Settings > Delete Account, or by contacting us at the email below.
• Reset — delete all your tasks and shared data without deleting your account via Settings > Reset Data.
• Portability — request an export of your data by emailing us.

To exercise any of these rights, contact us at yannainghtinkyaw@gmail.com. We will respond within 7 business days.

8. Children's Privacy

The app is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Third-Party Links

The app does not contain links to third-party websites or services other than Supabase (our infrastructure provider). We are not responsible for the privacy practices of any external sites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests, contact:
Yan Naing Htin Kyaw
yannainghtinkyaw@gmail.com