Privacy Policy

Last updated: August 14, 2026

This Privacy Policy explains how Assorta ("Assorta", "we", "us") collects, uses, and shares information when you use the Assorta app and website (the "Service"). Assorta is a fast inbox for notes, links, and ideas that uses AI to sort what you add into groups.

1. Information we collect

Account information

An account is optional. Assorta works without one, and you can buy and restore a subscription without one — signing in keeps Pro on your other Android and iOS devices, and will carry your notes once syncing between devices is available. Until then your notes are stored only on the device you added them on.

When you create an account we use Firebase Authentication (Google). If you sign up with email and password, we store your email address. If you sign in with Google, we receive your basic Google profile (name, email address, and profile picture). Passwords are handled by Firebase and are never stored by us in readable form.

Content you add

Assorta stores the notes, links, and text you add so it can show them back to you, grouped by topic. If an item contains a link, our AI provider may open and read that web page to classify it by its content (see AI classification).

Usage and device data

We use Firebase Analytics to understand how the app is used (screens viewed, features used, session information) together with device and app data such as device model, operating system version, app version, language, and an app-instance identifier. We use Firebase Crashlytics to collect crash reports and diagnostic data (including device state at the time of a crash) so we can fix problems.

Subscription and purchase data

Subscriptions are handled through the Apple App Store and Google Play, with RevenueCat managing entitlements on our behalf. We receive your subscription status and a purchase identifier. We never receive or store your full payment card details — those stay with Apple and Google.

If you subscribe without an account, that purchase is identified only by an anonymous identifier RevenueCat generates for the installation. It is not linked to your name or email address, because we do not have them. If you sign in later, we ask RevenueCat to attach that purchase to your account. An account can take over an anonymous purchase only once, so this does not always succeed — the subscription then stays under the anonymous identifier, and Settings → Assorta Pro → Upgrade → Restore in the app is what moves it to the account you are signed into.

2. AI classification

To sort your items automatically, the text of an item you add is sent to our backend and then to Google's Gemini API (Google AI), which returns a suggested group such as "cooking", "travel", or "wish list". When an item contains a URL, the AI's web-reading tool may fetch that page so it can classify the link by its topic rather than just tagging it as a link.

This means the text you add, and the content of links you save, are processed by Google as our AI sub-processor. Please avoid adding highly sensitive information (for example passwords, government IDs, or financial account numbers) as note text.

3. How we use information

• To provide the Service — store your items and classify them into groups.
• To create and secure your account and keep you signed in.
• To process and restore subscriptions and Pro features.
• To diagnose crashes, fix bugs, and improve reliability and features.
• To respond to your support requests.
• To comply with legal obligations and protect against abuse.

4. Third parties & sharing

We do not sell your personal data. We share data only with service providers that help us run the Service, each acting on our behalf:

• Google Firebase (Authentication, Analytics, Crashlytics) — accounts, usage analytics, crash diagnostics.
• Google Gemini API — AI classification of the text and links you add.
• RevenueCat — subscription management.
• Apple App Store / Google Play — app distribution and payment processing.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

5. Storage & retention

Your items are stored primarily on your device. Account and diagnostic data are held by Firebase (Google) for as long as your account is active. We keep personal data only as long as needed to provide the Service or as required by law. When you delete your account, we delete or anonymize the personal data associated with it, except where we must retain it for legal reasons.

6. Your rights & choices

Depending on where you live (for example under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us (see Contact). You can also disable analytics collection through your device settings where your platform offers that control.

7. Deleting your data

You can delete your account and its associated data from within the app, or by emailing us at the address below and we will process your request. Deleting the app from your device removes the items stored locally on that device.

A subscription bought without an account is one record the in-app deletion cannot reach. It is held by RevenueCat under an anonymous installation identifier that no account owns — there is nothing we can look up on your behalf that points at it — and removing it would break your ability to restore a subscription you are still paying for. It contains no name, email address, or payment details. Cancel the subscription through the App Store or Google Play. Signing in before you delete your account usually hands that record to the account, and the in-app deletion then removes it along with everything else; the take-over works only once per account, and where it does not succeed, Restore in the app is what moves it (see Information we collect). What else we keep — diagnostics, and records the law requires us to retain — is listed on the account deletion page.

8. Children

Assorta is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

We use industry-standard measures — including encryption in transit and access controls on our providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

Our providers (including Google and RevenueCat) may process and store data in the United States and other countries. Where required, such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

12. Contact

The controller of your personal data, and the operator of the Assorta app and website, is Individual Entrepreneur Yevhen Troshchii. If you have questions about this Privacy Policy or your data, contact us at .