Marge
Privacy Policy
Last updated 1 October 2026. Questions: hello@apogeelabs.org.
Marge (“the app”, “we”) is a profit and ROI tracker for resellers. We built it to be private by default: your inventory lives on your device, signing in is optional, and we do not sell your data, show ads, or track you across other apps or websites.
This policy explains exactly what data is processed, when, and by whom.
1. Local-first storage
Marge stores your flips, sales, photos and settings in a database on your device. The app is fully usable with no account at all. If you never sign in, we have no copy of your inventory on a server, and deleting the app deletes your data.
1a. Optional account & sync
If you want your data on more than one device, you can create an account with an email and password, or with Sign in with Apple or Google. This is entirely optional. When you are signed in:
- We store your email address (or the identifier Apple/Google returns) to operate your account. With Sign in with Apple you may use Apple’s “Hide My Email” relay.
- Your flips and sales are mirrored to our database (hosted by Supabase) so they can sync to your other devices. Each row is tied to your account and protected by row-level security, so only you can read it.
- Item photos stay on each device and are not uploaded.
You can delete your account at any time from Settings → Account → Delete account. This permanently removes your account and the flips and sales stored on our server. Data already synced to your other devices is removed from those devices on their next sync; local data on the current device follows the app’s normal delete/uninstall behaviour.
2. Data processed when you use AI / lookup features
A few optional features send a limited amount of data to our servers, which forward it to the third-party providers below to do the work, and return the result. We do not store this content.
| Feature | What is sent | Sent to | Why |
|---|---|---|---|
| Scan a buy with AI | The photo(s) you choose of the item and/or receipt | Our server → OpenAI | To read the item name, price, date and other details to pre-fill the form |
| Smart-map an import | Your spreadsheet’s column headers and a few sample rows | Our server → OpenAI | To match your columns to the right fields |
| Scan a barcode | The scanned barcode number (UPC/EAN) | Our server → UPCitemdb | To look up the product name and image |
For abuse and cost protection, our server temporarily processes the network IP address of the request to enforce a per-day usage limit. We retain only a per-day request count; we do not build a profile from it.
Photos and receipts can contain personal information. Only send images you are comfortable sharing for processing. These features are optional — the app is fully usable without them.
3. Camera and photo library
With your permission, the app uses the camera and photo library so you can attach a photo to a flip or scan an item/receipt/barcode. Photos stay on your device unless you use an AI feature above. Marge does not use your location; a location permission string appears only because a bundled file-picker component references it, and the app never requests or reads your location.
4. What we do NOT collect
- No name or profile beyond the email/identifier used to sign in (and only if you choose to).
- No advertising identifiers, no ad networks, no cross-app tracking.
- No analytics SDK that profiles you. (If we add anonymous, aggregate crash/usage reporting in future, we will update this policy first.)
- We never sell or rent your data.
5. Third-party processors
- OpenAI — processes images/headers you submit to AI features. OpenAI Privacy Policy. API inputs are not used to train their models.
- UPCitemdb — receives a scanned barcode to return product info.
- Supabase — hosts the server functions that broker the requests above and, if you sign in, stores your account and synced flips/sales. Supabase Privacy Policy.
- Apple / Google — only if you choose “Sign in with Apple” or Google, they authenticate you and return an email or identifier.
6. Data retention
Your inventory: kept on your device until you delete it or uninstall the app. If you sign in, your synced flips/sales are kept on our server until you delete them or delete your account. AI/lookup content: not stored by us after the request completes. Rate-limit counters: a per-IP, per-day count that resets daily.
7. Your rights
You control your data directly: edit or delete any flip or sale in the app, export to CSV at any time, and remove local data by deleting the app. If you created an account, you can delete it and its server-side data from Settings → Account → Delete account. If you are in the EEA/UK, you have rights under the GDPR; for any access or deletion request you can also contact us below.
8. Children
Marge is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data.
9. Security
Requests to our servers use HTTPS. Secrets (such as the OpenAI key) live only on the server, never in the app. No method of transmission is 100% secure, but we keep the data we touch minimal and transient.
10. Changes
We may update this policy; we will revise the “Last updated” date and, for material changes, note it in the app or release notes.
11. Contact
Questions or requests: hello@apogeelabs.org.
Apogee Labs — hello@apogeelabs.org