Privacy Policy

Data WhichBrick collects

The app collects only the data needed to run a parent-managed account, cloud sync, favorites, and subscriptions.

• Email address from Sign in with Apple or Sign in with Google.
• Collection sync records, such as owned set IDs, owned MOC IDs, favorite item IDs, and free-tier history.
• Favorite photos uploaded by the user so those photos can appear with favorites across devices.
• Favorite notes or other user-authored favorite content.
• Subscription entitlement or purchase status needed to unlock paid features.

Data WhichBrick does not collect

• No tracking across apps or websites.
• No in-app advertising.
• No sale of personal data.
• No central server copy of the LEGO catalog, set definitions, part catalog, MOCs, or Rebrickable catalog data. Catalog data stays local to the device and is hydrated from Rebrickable as needed.

How data is used

• Account access and parent-managed sign-in.
• Cloud sync for the user's saved collection across devices.
• Displaying favorite photos, favorite notes, and other saved favorite content.
• Checking subscription entitlement and restoring purchases.
• Support, security, troubleshooting, and legal compliance.

Service providers

WhichBrick uses a small set of processors to provide account, sync, storage, and purchase features.

• Supabase provides authentication, cloud user data storage, and favorite photo storage.
• RevenueCat provides subscription and entitlement handling.
• Apple and Google may process sign-in data. Apple also processes App Store billing for iOS subscriptions.

Children and parent-managed accounts

WhichBrick is designed for family use, but the account is set up and managed by a parent or guardian. The app is not positioned as a strict "Made for Kids" app. Parents should supervise what photos or notes are saved as favorites.

Account deletion

Parents can delete the account in the app from Settings -> Account -> Delete account.

When account deletion completes, WhichBrick deletes the auth user, cloud user rows, and favorite photos associated with that account. Local on-device data can be removed by deleting the app, and by the app's deletion flow where implemented.

Processor logs and backups may retain limited records for a short period as part of normal security, abuse prevention, and disaster recovery practices.

Retention

WhichBrick keeps account data while the account exists so sync and favorites continue to work. Cloud account data is deleted when account deletion completes, subject to the limited processor logs and backups described above.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data. Contact [email protected] for privacy requests. The in-app account deletion path is the fastest way to delete a WhichBrick account and its cloud data.

Changes to this policy

If the app's data use changes, this page will be updated with a new effective date. The App Store privacy details and the iOS privacy manifest should be updated at the same time.