FairCheck Privacy Policy
Effective date: October 15, 2026 · Draft
This Privacy Policy explains how MintSoft (Seoul, Republic of Korea; "we", "us") handles personal information when you use FairCheck — the website at faircheck.app and the FairCheck mobile apps (the "Service"). MintSoft is the controller of your personal information. Questions: app@mint-soft.com.
1. Information we collect
Account and profile
- Email address and sign-in provider (Google, Apple or email). With Google or Apple sign-in we receive your email address and, if provided, your name from that provider. If you choose Apple's "Hide My Email", we receive a relay address.
- Password (email sign-in only) — stored by our authentication provider as a one-way hash; we never see it.
- Nickname, country, preferred language (locale), optional profile photo, and the time you agreed to the Terms.
What you post and do
- Posts: amount, currency, country, category, description, tags, photos, and whether it is "I bought" or "Should I buy?".
- Votes, replies, bookmarks and reports (including the reason you give).
- Private price checks (app): amount, currency, country, category, description and photos.
- Inquiries you send us: name, email, subject and message.
Device and technical data
- Push notification token, device identifier generated by the app, platform and language, and your notification settings (app).
- Advertising identifiers (such as Google's advertising ID or Apple's IDFA, where permitted) and consent choices collected through Google's consent tool (UMP), used by Google AdMob in the app.
- Server logs kept by our hosting providers: IP address, browser/app type, pages requested, time and errors.
- Your approximate country, guessed from your IP address (via our hosting provider) or your browser language. We store only the country code in a cookie; we do not store your IP address for this.
Stored on your device (web)
- Cookies: chosen language (`NEXT_LOCALE`), chosen country (`fc_country`), guessed country (`fc_geo`, 1 day) and display currency (`fc_currency`).
- Local storage: your sign-in session, theme, and short-lived caches of public data (categories, trending tags, exchange rates) and of lists you have scrolled.
- We do not use third-party advertising or analytics cookies on the website.
Analytics. The website does not use third-party analytics. If analytics or crash reporting (for example Firebase) is enabled in the app, it collects app usage and crash data linked to a device identifier, and this policy will list it.
2. Why we use it
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Creating and running your account, signing you in | Account and profile | Contract |
| Publishing your posts, votes and replies; showing results, bookmarks and notifications | What you post and do | Contract |
| AI price estimates for your posts and private price checks | Post or price check content and photos | Contract; legitimate interest |
| Push notifications | Push token, settings | Consent (where required) |
| Ads in the app | Advertising identifiers, consent choices | Consent (EEA/UK/CH); legitimate interest elsewhere |
| Safety: handling reports, hiding content, preventing abuse and fraud | Content, reports, logs | Legitimate interest; legal obligation |
| Answering inquiries | Inquiry details | Contract; legitimate interest |
| Security, debugging and improving the Service | Logs, technical data | Legitimate interest |
| Complying with law | As required | Legal obligation |
We do not sell your personal information.
3. AI-generated price estimates
FairCheck uses generative AI to estimate a typical price range for posts and private price checks. When you create a post or a price check, its amount, currency, country, category, description and up to three photos, together with comparable public posts (without author information), are sent to Anthropic (Claude API) to produce the estimate. Your account email and nickname are not sent.
AI estimates are labeled as AI-generated in the Service and are reference information only. Under Anthropic's commercial terms, these inputs are not used to train its models, and Anthropic keeps them only for a limited period for safety and operations. We provide this notice in accordance with the Framework Act on the Development of Artificial Intelligence of Korea and similar transparency rules.
4. Who we share it with
Other users and the public. Your nickname, country, posts, photos, replies and vote totals are public. Your votes are counted but not shown with your name. Your email address is never shown.
Service providers (processors) that process data on our behalf:
| Provider | What they do | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, server functions | All Service data | USA / hosting region of our project |
| Vercel, Inc. | Website hosting and delivery | Logs, requests | USA and global edge network |
| Google LLC | Google sign-in, Firebase Cloud Messaging (push), AdMob and UMP (ads and consent) | Sign-in data, push token, advertising identifiers | USA and other countries |
| Apple Inc. | Sign in with Apple, push delivery on iOS | Sign-in data, push token | USA and other countries |
| Anthropic, PBC | AI price estimates | Post / price check content and photos | USA |
Exchange rates are fetched by our servers from ExchangeRate-API; no personal information is sent to it.
Legal reasons. We may disclose information when required by law, court order or a lawful request from authorities, or to protect the rights and safety of users and the public.
5. International transfers
MintSoft is based in Korea, and the providers above process data in the United States and other countries. When you sign up, your information is transferred over encrypted connections to these providers as you use the Service, and kept for the periods in section 6. Where required (for example under the GDPR), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification. You can refuse the transfer by not using the Service or by deleting your account; the Service cannot work without it.
6. How long we keep it
- Until you delete it or your account. Account, profile, posts, replies, votes, bookmarks, reports, notifications, devices, price checks and AI estimates. Deleting your account deletes all of these, including your photos. Deleted photos are removed from storage by a scheduled cleanup, usually within a day.
- Deleted posts and replies are removed immediately; their photos follow the same cleanup.
- Inquiries: up to 3 years after they are answered, to handle follow-up questions and disputes.
- Access logs: 3 months (Protection of Communications Secrets Act of Korea), unless needed longer to investigate abuse.
- Backups: deleted data may remain in encrypted backups for a limited time (up to 30 days) until they are overwritten.
- Data we must keep by law is kept for the period the law requires.
7. Your rights and choices
Depending on where you live, you have the right to:
- access your information and get a copy (portability);
- correct it — you can edit your nickname, country and language in Settings;
- delete it — you can delete your account in Profile → Settings at any time;
- restrict or object to certain processing, and withdraw consent (for example for push notifications or personalized ads) at any time without affecting earlier processing;
- lodge a complaint with a supervisory authority.
Korea (PIPA). You may request access, correction, deletion or suspension of processing, and may file a report with the Personal Information Protection Commission (privacy.go.kr, 182) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
EEA, UK and Switzerland (GDPR). You have the rights listed above. You can complain to the data protection authority where you live or work.
California (CCPA/CPRA). You have the right to know, delete and correct personal information, and to opt out of its "sale" or "sharing". We do not sell personal information. Advertising identifiers used by AdMob in the app may count as "sharing" for cross-context behavioral advertising; you can opt out through the app's privacy settings or your device's ad settings. We will not discriminate against you for exercising your rights.
To exercise a right, email app@mint-soft.com from the address on your account. We will respond within the period required by law (generally within 10 days in Korea and one month under the GDPR).
8. Children
The Service is not directed to children. You must be at least 14 years old (16 in the EEA and the UK, or older where local law requires). We do not knowingly collect information from younger children; if we learn that we have, we will delete it. Contact us if you believe a child has given us information.
9. Security
We use encrypted connections (HTTPS), access controls on the database (row-level security), one-way hashing of passwords by our authentication provider, and limited administrator access. No system is perfectly secure; please use a strong, unique password.
10. Changes to this policy
We will announce changes in the Service at least 7 days before they take effect (30 days for significant changes that affect your rights).
11. Contact
MintSoft · Seoul, Republic of Korea Privacy officer: MintSoft privacy team · app@mint-soft.com