ShouldIBuyThink, then Act.This policy explains how ShouldIBuy handles data across the website and the Android and iOS apps. It applies to guests, Free, ShouldIBuy+ and test users.
Last updated: 4 September 2026
The data controller is ShouldIBuy, a digital service operated by an individual developer registered in Italy. For privacy questions or rights requests, contact altierious99@gmail.com. ShouldIBuy is the app and service name shown in the Stores.
We handle information you choose to provide, including account and profile details, preferences, Decision Card content, prices, links, selected photos or files, goals, Confidence Checks, decision status, outcomes and Satisfaction Checks. For ShouldIBuy+ we retain subscription status, receipt references and a payment-method summary; complete card details are not stored by ShouldIBuy. We may also handle language, settings, protected session identifiers and notification tokens. We do not request precise location, contacts, microphone, SMS or call logs.
We use data to create and protect accounts, generate and store Decision Cards, personalise Buying DNA and Goals, synchronise devices, manage ShouldIBuy+, send requested communications and meet accounting or legal duties. Processing relies on providing the requested service, consent for optional features, legitimate security interests and legal obligations.
Online, ShouldIBuy AI analyses the written question, collected public signals and only authorised aggregated personal indicators. When a ShouldIBuy+ user voluntarily selects one photo, screenshot, PDF or file, that single item is uploaded to private temporary storage, sent to the AI provider for multimodal reading, and automatically removed within 24 hours or earlier when removed or replaced by the user. Extracted details remain separate from public sources. Public searches exclude identity, budget, Buying DNA and personal history. Offline, the attachment is not read by AI and freshness limits are disclosed.
Service providers may process necessary data for authentication, databases, hosting and storage; Stripe for web payments; Google Play, Apple App Store and RevenueCat for in-app subscriptions; Expo for notifications; and AI or research providers when those functions are used. Only after optional consent, Meta Pixel may receive technical browsing data and essential events — visit, completed registration, completed Decision Card and checkout opening — to measure campaign effectiveness. We do not send Meta Decision Card text, attachments, personal prices, profile, Buying DNA, payment data or authentication identifiers. Consent can be refused or withdrawn at any time through Cookie preferences. We do not sell personal data or display advertising inside ShouldIBuy.
The camera, photo library and files are accessed only after your action, and ShouldIBuy receives only selected items. Notifications require device permission and can be disabled in the app or system settings. Decision Watch alerts are part of ShouldIBuy+.
Data is kept while the account is active or for the time needed for the requested function. Account data is deleted on request except records that must be retained by law, such as accounting documents. We use encrypted connections, access controls, protected tokens and role separation. Providers outside the EEA are used with the safeguards required by applicable law.
You may request access, correction, deletion, restriction, portability, objection and consent withdrawal. Open Profile → Privacy and data in the app or website, or email the privacy contact above. Account deletion removes associated data after confirmation, subject only to mandatory legal retention. You may also complain to the Italian Data Protection Authority.
ShouldIBuy is a 13+ service and is not intended for anyone under 13. We do not knowingly collect their data. If we learn that we hold data belonging to someone under 13, we will delete it. Material updates to this policy will show a new version and date and will be communicated when required.
Email altierious99@gmail.com or open Profile → Privacy and data. Privacy controls remain available on every plan.