Privacy Policy
Last updated: July 16, 2026
This Privacy Policy explains how Assorta ("Assorta", "we", "us") collects, uses, and shares information when you use the Assorta app and website (the "Service"). Assorta is a fast inbox for notes, links, and ideas that uses AI to sort what you add into groups.
1. Information we collect
Account information
When you create an account we use Firebase Authentication (Google). If you sign up with email and password, we store your email address. If you sign in with Google, we receive your basic Google profile (name, email address, and profile picture). Passwords are handled by Firebase and are never stored by us in readable form.
Content you add
Assorta stores the notes, links, and text you add so it can show them back to you, grouped by topic. If an item contains a link, our AI provider may open and read that web page to classify it by its content (see AI classification).
Usage and device data
We use Firebase Analytics to understand how the app is used (screens viewed, features used, session information) together with device and app data such as device model, operating system version, app version, language, and an app-instance identifier. We use Firebase Crashlytics to collect crash reports and diagnostic data (including device state at the time of a crash) so we can fix problems.
Subscription and purchase data
Subscriptions are handled through the Apple App Store and Google Play, with RevenueCat managing entitlements on our behalf. We receive your subscription status and a purchase identifier. We never receive or store your full payment card details — those stay with Apple and Google.
2. AI classification
To sort your items automatically, the text of an item you add is sent to our backend and then to Google's Gemini API (Google AI), which returns a suggested group such as "cooking", "travel", or "wish list". When an item contains a URL, the AI's web-reading tool may fetch that page so it can classify the link by its topic rather than just tagging it as a link.
This means the text you add, and the content of links you save, are processed by Google as our AI sub-processor. Please avoid adding highly sensitive information (for example passwords, government IDs, or financial account numbers) as note text.
3. How we use information
- To provide the Service — store your items and classify them into groups.
- To create and secure your account and keep you signed in.
- To process and restore subscriptions and Pro features.
- To diagnose crashes, fix bugs, and improve reliability and features.
- To respond to your support requests.
- To comply with legal obligations and protect against abuse.
4. Third parties & sharing
We do not sell your personal data. We share data only with service providers that help us run the Service, each acting on our behalf:
- Google Firebase (Authentication, Analytics, Crashlytics) — accounts, usage analytics, crash diagnostics.
- Google Gemini API — AI classification of the text and links you add.
- RevenueCat — subscription management.
- Apple App Store / Google Play — app distribution and payment processing.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.
5. Storage & retention
Your items are stored primarily on your device. Account and diagnostic data are held by Firebase (Google) for as long as your account is active. We keep personal data only as long as needed to provide the Service or as required by law. When you delete your account, we delete or anonymize the personal data associated with it, except where we must retain it for legal reasons.
6. Your rights & choices
Depending on where you live (for example under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us (see Contact). You can also disable analytics collection through your device settings where your platform offers that control.
7. Deleting your data
You can delete your account and its associated data from within the app, or by emailing us at the address below and we will process your request. Deleting the app from your device removes the items stored locally on that device.
8. Children
Assorta is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Security
We use industry-standard measures — including encryption in transit and access controls on our providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. International transfers
Our providers (including Google and RevenueCat) may process and store data in the United States and other countries. Where required, such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.
12. Contact
If you have questions about this Privacy Policy or your data, contact us at .