# Privacy Policy

**Version:** 2026-10-08.1  
**Effective date:** October 8, 2026

The Haze Corp LLC, a Nevada limited liability company doing business as loggit ("The Haze Corp," "loggit," "we," "us," or "our"), operates the loggit mobile application, website, and related services (collectively, the "Services").

This Privacy Policy explains what information we collect, how we use and disclose it, how long we retain it, and the choices available to you.

## 1. Scope

This Policy applies to information processed through the Services. It does not control the independent privacy practices of Apple, websites you visit, people with whom you share information, or third-party services you use outside loggit.

## 2. Information we collect

The information we collect depends on how you use loggit.

### Account and profile information

We may collect:

- email address and, if you register with email and password, your credentials, which are stored by our authentication provider in protected form;
- authentication and account identifiers;
- display name, handle, initials, or other profile information you provide;
- if you use Sign in with Apple, the identifier, email address, and optional name Apple provides, subject to your Apple settings. Apple may provide a private relay email address instead of your actual email address;
- if you use Sign in with Google where it is offered, the identifier, email address, and basic profile information, such as name, that Google provides for sign-in;
- email-verification status and related records; and
- account status, creation date, and security-related information.

We do not receive your Apple Account or Google Account password. Signing in with Apple or Google does not give loggit access to your other Apple or Google account content.

### Inventory and User Content

We process information you create, upload, scan, photograph, record, organize, import, share, or store, including:

- items, categories, collections, locations, spots, and hierarchy relationships;
- photos and attachments;
- receipts, warranties, service records, notes, reminders, and activity records;
- purchase price, current value, serial numbers, identifiers, and related metadata;
- QR-code records and assignments;
- trip, packing, bag, move, box, and status information;
- exported or imported records; and
- other content you choose to provide.

User Content is private by default except when you choose to share supported records or as otherwise described in this Policy.

### Sharing and collaboration information

When you share a supported Location, Spot, Item, or related hierarchy, we process:

- owner and recipient account identifiers;
- Viewer or Editor permissions;
- membership, invitation, acceptance, and revocation records; and
- the content and related records made available through the selected share.

### Photos, Smart Add, and AI-assisted features

When you intentionally use Smart Add, image analysis, label or receipt analysis, AI-assisted descriptions, or similar features, we may process the image, text, prompt, existing record context, and generated result needed to perform the request.

Relevant information may be transmitted to OpenAI or another disclosed processor solely to provide, secure, and troubleshoot the requested feature and operate the Services.

### Voice features

When you intentionally use a voice feature, audio is transmitted for transcription and command processing. loggit does not intentionally retain the original raw voice audio after processing is completed.

We may retain the resulting transcript, interpreted command, command status, and related usage record so that the requested action can be completed, displayed, audited, retried, secured, and improved.

Do not speak information you do not want processed.

### Barcode, ISBN, and product lookup

When you request barcode, ISBN, or product lookup, we may transmit the code or query to providers such as Go-UPC or Open Library.

When you ask loggit to retrieve information from a product URL, our server may request that webpage and process publicly returned metadata. The operator of that webpage may receive standard request information such as an IP address, timestamp, and user-agent string.

Third-party product information may be inaccurate or subject to the provider's own terms and privacy practices.

### Subscription and purchase information

Apple and RevenueCat may provide us with:

- subscription product and entitlement;
- purchase, renewal, expiration, cancellation, and restore status;
- transaction or original-transaction identifiers;
- storefront or currency-related information; and
- limited diagnostic information needed to verify access.

We do not receive or store your complete payment-card number from App Store purchases.

### Technical, analytics, and security information

We may process:

- app version and build number;
- operating-system and device-type information;
- timestamps, request logs, IP address, and network or service diagnostics;
- authentication, abuse-prevention, rate-limit, and security events;
- feature-use events and product-interaction events;
- subscription and quota status; and
- crash or error information collected by our infrastructure when applicable.

Our first-party analytics are designed to record events and limited operational metadata, not private inventory names, photos, notes, receipts, serial numbers, or other User Content.

Where the app offers Google Analytics for Firebase, and subject to any consent required by law or presented in the app, the app may send Google app interaction events, app version and device information, session and engagement information, app-instance or other pseudonymous identifiers, and limited non-sensitive event metadata. We use this information to measure engagement, understand feature adoption, evaluate retention, and improve the app. This information is not anonymous, but it is not designed to include private inventory names, photos, notes, receipts, serial numbers, or other User Content, and it is not used for advertising.

We do not currently use advertising identifiers, an advertising SDK, or cross-app tracking.

The website uses strictly necessary local storage for core functionality and to remember your analytics choice. With your consent, the website also uses Google Analytics, a non-essential analytics service provided by Google. Google Analytics does not load, and no Google Analytics cookies are set or requests sent to Google, unless you select "Accept Analytics" in the website's analytics notice. If you accept, Google receives usage information such as pages viewed, links and buttons selected (for example, App Store and partner-offer buttons), referring page or campaign, approximate location derived from your IP address, browser and device type, and pseudonymous identifiers stored in first-party cookies (such as _ga). We use this information to understand how visitors use loggit.life and improve the website. Advertising storage and personalization remain denied, and Google Signals is disabled; we do not use website analytics for advertising. You can change or withdraw your choice at any time using the "Analytics settings" link in the website footer; withdrawing stops further collection and clears Google Analytics cookies set on loggit.life where technically possible. Website analytics is separate from any analytics used in the iOS app described above.

### Communications and support

We use your email address to send account and service communications, such as account confirmation and verification, password recovery, security and account notices, welcome messages for new accounts, and important service or product updates. Where we offer optional engagement or promotional emails, we will send them only as permitted by law, and you may unsubscribe from them at any time; unsubscribing does not stop necessary account and service communications. We use email service providers to deliver these messages and may process delivery information, such as whether a message was delivered or bounced.

If you contact us, we may collect your email address, message, attachments, screenshots, device/app information you provide, and our support-response history.

Do not send passwords, authentication tokens, Apple authorization codes, private keys, complete payment-card information, or unnecessary sensitive content.

## 3. How we use information

We use information to:

- create, authenticate, secure, and maintain accounts;
- provide, store, organize, search, display, sync, share, export, and delete records;
- provide AI-assisted, Smart Add, voice, barcode, ISBN, QR, reminder, analytics, packing, moving, and related features;
- process and verify subscriptions, plan limits, and entitlements;
- provide customer and privacy support;
- detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents;
- troubleshoot errors, monitor service health, enforce rate limits, and maintain availability;
- understand feature adoption and improve the Services using limited first-party analytics;
- communicate service, security, legal, or account notices;
- comply with law, legal process, and platform requirements;
- enforce our Terms and protect users, loggit, and others; and
- establish, exercise, or defend legal claims.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising.

## 4. How we disclose information

We may disclose information in the following circumstances.

### At your direction

We disclose supported records to another user when you intentionally share them and according to the permissions you select.

### Service providers and third-party services

We use third-party providers to operate, secure, maintain, and provide features of the Services. Depending on the features you use, these providers may include:

- Cloud hosting, database, storage, and infrastructure providers;
- Apple for authentication, App Store distribution, purchases, and subscriptions;
- Google for Sign in with Google and Google Analytics for Firebase, where those features are offered;
- Subscription and entitlement-management providers;
- OpenAI and other appropriately disclosed AI or transcription providers for AI-assisted features you intentionally use;
- Barcode, ISBN, product-information, and metadata providers;
- Email, communications, and customer-support providers; and
- Network, security, monitoring, and infrastructure providers.

These providers may process information as necessary to perform the applicable services, subject to our agreements with them, their applicable terms and privacy practices, and applicable law.

### Legal, safety, and security

We may disclose information when we reasonably believe disclosure is required by law, subpoena, court order, or legal process, or is necessary to:

- protect rights, safety, property, or security;
- investigate fraud, abuse, or a security incident;
- enforce our Terms;
- respond to lawful requests; or
- establish, exercise, or defend legal claims.

### Business transfers

Information may be transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law and appropriate protections.

### Aggregated or de-identified information

We may use or disclose aggregated or de-identified information that cannot reasonably be linked to an individual, subject to applicable law. We will not attempt to re-identify information that we maintain as de-identified except to test whether our de-identification processes are effective or as permitted by law.

## 5. User Content, sharing, and visibility

Your private inventory is not a public profile.

When you share a Location, Spot, Item, or hierarchy, authorized recipients may receive access to the associated content according to the selected permissions. You are responsible for reviewing what is included and choosing appropriate recipients.

A recipient may copy, export, photograph, screenshot, or disclose information outside loggit. Revoking access prevents future in-app access but cannot retrieve copies already made outside the Services.

## 6. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining security, meeting legal or accounting obligations, resolving disputes, and enforcing agreements.

Retention depends on the type of information:

- active-account data and User Content are generally retained while your account remains active or until you delete the content;
- support communications may be retained as reasonably necessary to resolve requests, improve support, maintain security, and document our response;
- security, request, and infrastructure logs may be retained for limited periods determined by operational need and provider settings;
- subscription, entitlement, and transaction records may remain in Apple, RevenueCat, or related systems under their retention requirements and legitimate operational or legal needs;
- provider-managed backups may retain deleted information temporarily until overwritten or expired; and
- information may be retained where required or permitted by law.

### Legal-acceptance records

To establish, exercise, or defend legal claims, we retain a minimal legal-acceptance record for seven years after account deletion.

The retained record is limited to:

- Terms, Privacy Policy, and arbitration version identifiers;
- cryptographic hashes of the accepted documents;
- acceptance, reacceptance, and arbitration opt-out timestamps;
- acceptance method and type;
- app marketing version and build number;
- platform and operating-system version;
- a former account identifier; and
- account-deletion and scheduled-purge dates.

The retained record does not include inventory content, photos, notes, receipts, serial numbers, Apple tokens, authorization codes, payment-card information, or your plaintext email address. Expired legal-acceptance records are scheduled for deletion through a monitored purge process.

## 7. Account deletion

You may initiate deletion in the app through:

Profile → Account Safety → Delete Account

The deletion process is designed to remove your account, user-owned production database records, stored files, sharing relationships, usage records associated with the account, and authentication account.

For Sign in with Apple accounts, loggit attempts to exchange and revoke the associated Apple authorization before destructive deletion begins. If the required Apple verification or revocation fails, destructive deletion should not begin and you may retry.

Deleting your loggit account does not cancel an Apple subscription. Cancel the subscription separately through your Apple account or App Store subscription settings.

After deletion, limited information may remain as described in Section 6, including provider-managed backups, subscription or transaction systems, security records, and the seven-year minimal legal-acceptance record.

## 8. Your choices and privacy rights

Depending on your location and applicable law, you may have rights to:

- access personal information;
- correct inaccurate information;
- receive a copy or portable export;
- delete information;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- appeal a privacy-request decision; and
- receive information about categories of information and recipients.

Most User Content can be reviewed, corrected, or deleted directly in the app. Supported CSV and PDF exports are available through the app.

You may manage sharing permissions and revoke in-app access. You may manage subscriptions through Apple.

For other requests, email privacy@loggit.life. We may need to verify your identity and may deny or limit a request where permitted by law, including to protect another person's rights, maintain security, complete a transaction, comply with law, or retain information needed to establish or defend legal claims.

Authorized agents may submit requests where permitted by law, subject to verification of their authority and your identity.

We will not discriminate against you for exercising applicable privacy rights.

## 9. California and United States state privacy disclosures

Depending on applicable thresholds and law, residents of California and other states may have rights concerning access, correction, deletion, portability, sale, sharing, targeted advertising, profiling, and appeals.

loggit does not sell personal information and does not share personal information for cross-context behavioral advertising. loggit does not use personal information for targeted advertising.

Because we do not engage in those activities, a sale/share or targeted-advertising opt-out does not currently change our core processing. We will honor applicable legally recognized preference signals where required if our practices change.

We may collect the categories described in Section 2, including identifiers, customer records, commercial or subscription information, internet or electronic activity, photographs and audio, user-generated content, and inferences produced by requested automated features. We use and disclose those categories for the business and commercial purposes described in Sections 3 and 4.

## 10. Children

The Services are intended for a general audience and are not directed to children under 13. Users must be at least 13 years old, or the minimum age required by applicable law, to create an account or use the Services.

We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information without legally valid authorization, we will take reasonable steps to delete the account and information.

A parent or guardian who believes a child under 13 has used loggit may contact privacy@loggit.life.

## 11. Legal bases for processing

Where laws such as the European Economic Area, United Kingdom, or Swiss data-protection laws apply, we process personal information under one or more of these legal bases:

- performance of a contract, including providing your account, storing records, sharing at your direction, and managing subscriptions;
- legitimate interests, including securing, maintaining, troubleshooting, and improving the Services, preventing abuse, and protecting legal rights, where those interests are not overridden by your rights;
- consent, where we specifically request it and you may withdraw it; and
- compliance with legal obligations.

You may have the right to object to processing based on legitimate interests or to lodge a complaint with your local data-protection authority.

## 12. International processing

The Services are operated from the United States. Information may be processed in the United States and in other countries where our service providers operate.

Where required, we rely on appropriate contractual, legal, or other safeguards for cross-border processing. Laws in those locations may differ from the laws where you live.

## 13. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and Services. These safeguards may include access controls, encryption in transit, restricted administrative access, security monitoring, and other measures designed to protect information.

No internet, cloud, mobile, or storage system is completely secure. We cannot guarantee that attacks, compromised credentials, software vulnerabilities, service-provider failures, human error, or other events will never result in unauthorized access, loss, alteration, or disclosure.

You are responsible for securing your device and credentials, maintaining current software, and reviewing sharing permissions.

## 14. Third-party links and services

The Services may link to or retrieve information from third-party services and websites. Their independent practices are governed by their terms and privacy policies.

We are not responsible for third-party privacy, security, accuracy, availability, or conduct outside our reasonable control.

## 15. Changes to this Policy

We may update this Policy as the Services, providers, laws, or data practices change.

We will update the version and effective date and provide additional notice or request renewed acknowledgement where required. Material changes will be reflected in the website, in-app disclosures, and App Store privacy information as appropriate.

## 16. Contact

The Haze Corp LLC / loggit  
4044 Dean Martin Dr  
Las Vegas, NV 89103  
United States

Privacy: privacy@loggit.life  
Support: support@loggit.life  
Telephone: 833-224-2022  
Website: https://loggit.life