Privacy Policy

Bik Brik helps collectors identify building sets and minifigures, maintain a collection and watchlist, view reference values, and read editorial news. This policy explains what leaves your device, why we use it, and the choices available to you.

1. Data we collect

• Account and profile: email address, optional display name, Bik Brik user ID, authentication identifiers, and session or refresh-token records. Sign in with Apple may provide a name and relay or personal email according to your Apple choice.
• Collection and watchlist: set or minifigure identifiers, quantity, sealed or opened condition, target price, purchase or sale price and date, seller, source, box code, promotion, sales channel, and notes you choose to enter.
• Camera recognition: a photo you actively capture or choose is compressed and sent for set or minifigure identification. Bik Brik does not store the image bytes in its application database. The photo may be processed through our server or sent to Brickognize.
• Operational data: recognition mode, result identifiers, result count, top confidence, item type, mapping outcome, and request timing may be stored with your account to operate and troubleshoot the feature.

We do not request your precise location, contacts, health data, payment-card details, or bank details.

2. How we use data

• Authenticate and protect your account.
• Sync and restore your collection.
• Calculate portfolio views and buy-priority scores.
• Return recognition results and diagnose failed matches.
• Answer support, correction, export, and deletion requests.
• Prevent abuse and maintain service reliability.

We do not sell or rent personal data. Bik Brik has no advertising SDK, does not use data for cross-app tracking, and does not build advertising profiles. Recognition interaction records are first-party service telemetry, not third-party advertising analytics.

3. Service providers and sources

Supabase and hosting providers process account and collection data; the current production database is hosted in Singapore. Brickognize processes recognition images. Apple processes Sign in with Apple. Rebrickable, Brickset, BrickLink, and BrickEconomy provide catalog or reference-market data.

These providers have their own legal terms and privacy practices. Data may be processed outside your country when needed to deliver the service.

4. Retention and deletion

Account, collection, and watchlist data is retained while your account is active. Authentication records are retained until expiry or revocation. Operational records are kept only as long as reasonably needed for service operation, security, and issue investigation; provider backups may age out on their own cycle.

You may request access, correction, export, or deletion by email. You can also start full account deletion from Account in the app. After verification, we delete or irreversibly anonymize active data unless a limited record must be retained for security, fraud prevention, or a legal obligation.

5. Security and your choices

We use authenticated requests, access controls, and encrypted network transport. No service is perfectly secure. You can disable camera access in iOS Settings and continue to use manual search.

6. Contact

For a privacy or data request, email info@bikbrik.com or visit Bik Brik Support. Do not email a password or Apple verification code.