Entropy Labs Privacy Policy

1. Our Privacy-First Approach

We build apps designed to run on your device. We do not operate developer servers that collect or store your personal app data — most data created inside our apps stays on your device and is removed when you uninstall. See each app's own privacy policy for the specifics of that app.

2. Information We Handle

Website (entropylabs.dev): This is a static informational site. Our hosting provider may keep standard server logs (such as IP address and browser type) for security and reliability. We do not use advertising or cross-site tracking SDKs on the site.

Our apps: Data is handled on your device as described in each app's own privacy policy (Section 4).

Purchases & payments: When you buy a subscription or a one-time unlock, payment is processed by our payment providers — Stripe for online/web checkout, and the app stores (Google Play, Apple) for in-app purchases. These providers handle your card details directly; we do not receive or store your full card number. We receive only limited transaction information (such as that a purchase or renewal occurred, an order or customer reference, and billing country) to fulfill purchases, provide the service, and keep accounting records.

Support: If you email support@entropylabs.dev, we use your message and email address only to respond to you.

3. Third-Party Services

We rely on a small number of third-party services, each governed by its own privacy policy:

• Stripe — online payment processing.
• Google Play & Apple — app distribution and in-app billing.
• EmailJS — email delivery, for apps that send email reports.
• Shopify — app distribution, authorization and billing for our Shopify apps.
• Railway — hosting for our Shopify apps (servers and database, United States region).
• Resend — transactional email from our Shopify apps (for example, service notices).

We do not sell your personal information.

4. App-Specific Privacy Policies

Because each app handles data differently, each has its own detailed policy:

• StillAsleep — stillasleep.app/privacy
• DailyBridge — getdailybridge.app/privacy
• PulsPatrol — privacy policy

4A. Shopify Apps

This section applies to apps we publish on the Shopify App Store, including Barcode Scan to Variants. Unlike our mobile apps, Shopify apps run on our servers because Shopify requires an app server to authorize the app and to read and write store data through Shopify's API.

What we access. Only the Shopify data the app needs for its function and that you approve at installation. For Barcode Scan to Variants this is product, variant and inventory data (read) and the variant barcode field (write). The app does not request or access orders, customers, or any personal data of your customers.

What we store. Your store's .myshopify.com domain, the access token Shopify issues to the app (encrypted at rest), your app settings, your plan status, and a history of the changes the app made on your behalf (variant IDs and barcode values per batch) so that batches can be reviewed and undone. Scans are held in your browser until you save; unsaved scans are never sent to us.

What we don't do. We do not sell store data, use it to train models, or share it with anyone except the service providers listed in Section 3 who host and operate the app. We do not place third-party analytics or advertising trackers inside the app.

Retention and deletion. When you uninstall the app, Shopify notifies us and we delete your store's access token and app data within 30 days; change history is kept for the same period so that an accidental uninstall doesn't erase your undo log immediately. We honor Shopify's mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact. Because the app stores no customer personal data, customer requests are acknowledged and logged; shop redaction requests trigger deletion of all remaining data for that store.

Hosting. Our Shopify apps are hosted on Railway in the United States. If your store is in the EU or UK, store data (which does not include your customers' personal data) is processed there under Shopify's and our providers' standard safeguards.

Your rights. Merchants can request a copy or deletion of the data we hold for their store at any time by emailing support@entropylabs.dev from the store's contact address.

5. Data Retention & Deletion

For our mobile apps, app data lives on your device; uninstalling the app deletes it. For our Shopify apps, see Section 4A. We retain limited payment and transaction records for as long as required for accounting, tax, and legal purposes.

To request deletion of any information we hold about you (for example, support correspondence), email support@entropylabs.dev.

6. Children

Our products are intended for general audiences and are not directed at children under the age of 13.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are posted on this page with an updated effective date.