Legal

Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how Assorta ("Assorta", "we", "us") collects, uses, and shares information when you use the Assorta app and website (the "Service"). Assorta is a fast inbox for notes, links, and ideas that uses AI to sort what you add into groups.

In short: your items are stored to run the app, the text you add is sent to our AI provider to decide which group it belongs to, and we use standard services (Google Firebase, RevenueCat) for accounts, crash reports, and subscriptions. We do not sell your data.

1. Information we collect

Account information

When you create an account we use Firebase Authentication (Google). If you sign up with email and password, we store your email address. If you sign in with Google, we receive your basic Google profile (name, email address, and profile picture). Passwords are handled by Firebase and are never stored by us in readable form.

Content you add

Assorta stores the notes, links, and text you add so it can show them back to you, grouped by topic. If an item contains a link, our AI provider may open and read that web page to classify it by its content (see AI classification).

Usage and device data

We use Firebase Analytics to understand how the app is used (screens viewed, features used, session information) together with device and app data such as device model, operating system version, app version, language, and an app-instance identifier. We use Firebase Crashlytics to collect crash reports and diagnostic data (including device state at the time of a crash) so we can fix problems.

Subscription and purchase data

Subscriptions are handled through the Apple App Store and Google Play, with RevenueCat managing entitlements on our behalf. We receive your subscription status and a purchase identifier. We never receive or store your full payment card details — those stay with Apple and Google.

2. AI classification

To sort your items automatically, the text of an item you add is sent to our backend and then to Google's Gemini API (Google AI), which returns a suggested group such as "cooking", "travel", or "wish list". When an item contains a URL, the AI's web-reading tool may fetch that page so it can classify the link by its topic rather than just tagging it as a link.

This means the text you add, and the content of links you save, are processed by Google as our AI sub-processor. Please avoid adding highly sensitive information (for example passwords, government IDs, or financial account numbers) as note text.

3. How we use information

4. Third parties & sharing

We do not sell your personal data. We share data only with service providers that help us run the Service, each acting on our behalf:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

5. Storage & retention

Your items are stored primarily on your device. Account and diagnostic data are held by Firebase (Google) for as long as your account is active. We keep personal data only as long as needed to provide the Service or as required by law. When you delete your account, we delete or anonymize the personal data associated with it, except where we must retain it for legal reasons.

6. Your rights & choices

Depending on where you live (for example under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us (see Contact). You can also disable analytics collection through your device settings where your platform offers that control.

7. Deleting your data

You can delete your account and its associated data from within the app, or by emailing us at the address below and we will process your request. Deleting the app from your device removes the items stored locally on that device.

8. Children

Assorta is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

We use industry-standard measures — including encryption in transit and access controls on our providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

Our providers (including Google and RevenueCat) may process and store data in the United States and other countries. Where required, such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

12. Contact

If you have questions about this Privacy Policy or your data, contact us at .