Privacy policy

Last updated: 30 October 2026

BazaarVision is a mobile app that estimates the value of an item from a photo. It is developed and operated by Hamza Baqqal, an individual developer based in Morocco ("we"). This policy explains what data the app collects, why, who it is shared with, and how you can delete it.

Data we collect

• Account data: your email address, first and last name, and your password (stored only as a secure hash). If you sign in with Google, we store your Google account ID instead of a password.
• Photos you submit: the photos you take or upload to evaluate an item.
• Evaluation results: the products recognised in your photos and the generated price reports.
• Preferences: the country, currency and language you choose, used to tailor results.
• Notification token: a token that identifies your phone for notifications, if you allow them.
• Ad rewards: a record of each rewarded ad you finish (a reference number and the date), to give you the extra scan.
• Technical data: our hosting provider keeps short-lived server logs (such as IP address, app version, platform and request time) for security and troubleshooting.

Google AdMob also collects data on Android when you watch an ad: see Ads. We do not sell your data.

How we use it

• To create and secure your account, to let you sign in with Google if you choose to, and to send account emails (email confirmation and password reset).
• To check that your photo shows an item, recognise it and produce a price evaluation.
• To show you your past evaluations, and to tell you when a scan is ready.
• To count your daily scans, and to add a scan when you finish a rewarded ad.

Ads

On Android, when you have no scans left, you can choose to watch a short ad to unlock one more scan. Ads are provided by Google AdMob and only load when you ask for one.

When an ad loads, Google AdMob collects data from your phone: your advertising ID, device and app information, your approximate location (from your IP address), how you interact with the ad, and diagnostic data. Google uses it to show ads, which may be personalised, to measure them and to prevent fraud. We pass Google our internal number for your account, so that it can confirm the reward to us. We do not give it your name, email address or photos.

Where the law requires it, you are asked for your consent before the first ad. You can reset or delete your advertising ID in your phone's settings, under Privacy → Ads. Read how Google uses information from apps that use its services.

Who we share it with

We use these service providers only to run the app:

• Railway (hosting, database and photo storage, servers in the EU / Netherlands).
• SerpApi (image search): receives a temporary link to your photo, valid for 15 minutes, and your selected country, to find matching products via Google Lens.
• Google Gemini (AI analysis): receives your photo, to check that it shows an item and to pick the matching product among the image-search results. It also receives the name and link of that product, and your country, currency and language, to generate the price report, which can involve Google Search queries about that product. Google processes this data under the Gemini API terms.
• Google Sign-In (optional sign-in): if you choose to sign in with Google, Google shares your name, email address and Google account ID with us. We don't receive your Google password or any other access to your Google account. Your Google account is covered by Google's own privacy policy.
• Brevo (email delivery): receives your email address to send account emails.
• Expo and Firebase Cloud Messaging (notifications): receive your notification token and the notification's text, to deliver it to your phone.
• Google AdMob (ads, Android): see Ads.

We may also disclose data if required by law.

Security

All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored as hashes, and photos are kept in private storage that is not publicly accessible.

Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time:

• in the app: Settings → Delete account, or
• on the web: https://bazaarvision.app/delete-account.

Deleting your account immediately and permanently deletes your account data, all your evaluations and their photos, your notification tokens and your ad rewards. Data Google AdMob collected is kept by Google under its own policy. Server logs expire on their own within about 30 days.

Your rights

You can ask us to access, correct or delete your personal data by emailing us at the address below.

Children

The app is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy. The date at the top shows the latest version; significant changes will be announced in the app.

Contact

Questions or requests: [email protected]