Entropy Labs Privacy Policy

1. Our Privacy-First Approach

We build apps designed to run on your device. We do not operate developer servers that collect or store your personal app data — most data created inside our apps stays on your device and is removed when you uninstall. See each app's own privacy policy for the specifics of that app.

2. Information We Handle

Website (entropylabs.dev): This is a static informational site. Our hosting provider may keep standard server logs (such as IP address and browser type) for security and reliability. We do not use advertising or cross-site tracking SDKs on the site.

Our apps: Data is handled on your device as described in each app's own privacy policy (Section 4).

Purchases & payments: When you buy a subscription or a one-time unlock, payment is processed by our payment providers — Stripe for online/web checkout, and the app stores (Google Play, Apple) for in-app purchases. These providers handle your card details directly; we do not receive or store your full card number. We receive only limited transaction information (such as that a purchase or renewal occurred, an order or customer reference, and billing country) to fulfill purchases, provide the service, and keep accounting records.

Support: If you email support@entropylabs.dev, we use your message and email address only to respond to you.

3. Third-Party Services

We rely on a small number of third-party services, each governed by its own privacy policy:

• Stripe — online payment processing.
• Google Play & Apple — app distribution and in-app billing.
• EmailJS — email delivery, for apps that send email reports.
• Shopify — app distribution, authorization and billing for our Shopify apps.
• Railway — hosting for our Shopify apps (servers and database, United States region).

We do not sell your personal information.

4. App-Specific Privacy Policies

Because each app handles data differently, each has its own detailed policy:

• StillAsleep — stillasleep.app/privacy
• DailyBridge — getdailybridge.app/privacy
• PulsPatrol — privacy policy

4A. Shopify Apps

This section applies to apps we publish on the Shopify App Store, including ELS: Multi-Barcode Scan & Add (formerly Barcode Scan to Variants). Unlike our mobile apps, Shopify apps run on our servers because Shopify requires an app server to authorize the app and to read and write store data through Shopify's API.

What we access through Shopify's APIs. Only the data the app needs for its function and that you approve at installation. For ELS: Multi-Barcode Scan & Add this is: products and variants (read, and write of the variant barcode fields only); inventory levels and locations (read only, to show stock columns and let you pick a location); and Files (write, to store the photos you attach to Add later groups in your own store's Files). The app does not request or access orders, customers, or any personal data of your customers.

What we collect directly from the merchant. The barcodes you scan or type; notes you write on Add later groups; the display names you give staff in Settings; your app settings. Scans waiting in the box and your scanner profile are stored in your browser (local storage) on the device you use, not on our servers, until you add them to a variant.

What we collect from your customers. Nothing. The app has no access to customer or order data.

What we store on our servers. Your store's .myshopify.com domain and the access token Shopify issues to the app (encrypted at rest); your app settings, including the page each staff account last had open so the app reopens there; a cached summary of the store check shown on the Start here page (counts, and up to 40 variant ids per group for its View links); a history of the changes the app made on your behalf (variant, barcodes before and after, the Shopify staff account id that made the change, the location selected at the time) so that changes can be reviewed and undone; Add later groups (barcodes, note, the staff account that set them aside, location, and references to the photos in your Files); and per-store usage statistics — daily counts of scans, adds, undos and page loads, plus which staff accounts and locations were active that day — which we use to operate the app and to plan pricing. We do not log individual keystrokes or sessions and we do not place third-party analytics or advertising trackers inside the app.

How we use it. To write barcodes to the variants you choose, to show you what was changed and let you undo it, to keep Add later groups until you add them, and to understand how the app is used. We do not sell store data, use it to train models, or share it with anyone except the service providers listed in Section 3 who host and operate the app.

Retention and deletion. Change history is kept for 90 days and then deleted. Add later groups are kept until you add or delete them. When you uninstall the app, Shopify notifies us and we delete your store's data immediately — access token, settings, change history, Add later groups, the store check summary; we delete again when Shopify sends the shop/redact webhook 48 hours later. Photos live in your own Shopify Files and remain yours; after uninstall we can no longer reach them, so remove them from Files if you wish. Usage statistics are retained in de-identified, aggregated form (the store identifier is replaced by a random token and staff accounts are removed). We honor Shopify's mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact; because the app stores no customer personal data, customer requests are acknowledged and logged.

Hosting and location. Our Shopify apps are hosted on Railway in the United States. We are not established in Europe. If your store is in the EU or UK, store data (which does not include your customers' personal data) is processed in the United States under Shopify's and our providers' standard safeguards.

Your rights and how to contact us. Merchants can request a copy or deletion of the data we hold for their store at any time by emailing support@entropylabs.dev from the store's contact address. We answer within one business day.

5. Data Retention & Deletion

For our mobile apps, app data lives on your device; uninstalling the app deletes it. For our Shopify apps, see Section 4A. We retain limited payment and transaction records for as long as required for accounting, tax, and legal purposes.

To request deletion of any information we hold about you (for example, support correspondence), email support@entropylabs.dev.

6. Children

Our products are intended for general audiences and are not directed at children under the age of 13.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are posted on this page with an updated effective date.