GEARIT — Privacy Policy

Effective 2 November 2026

This page says what GEARIT keeps about you, why, who else handles it, and how to get it deleted. It's written to be read, not skimmed past.

Who is responsible for your data (the "data controller"): Iam The Protagonist Ltd, trading as GEARIT and The It Group, a private limited company registered in England and Wales, company number 16842280, registered office 60 Hay Lane, London, NW9 0NB. Registered with the Information Commissioner's Office, registration number ZC272634. Email: theitgroupapps@gmail.com.

The short version

You don't need an account. Without one, your setup lives on your device and in your own iCloud or Google backup, and we hold nothing about you. If you choose to sign in, a copy of your setup is kept on our server so it can reach another device. To score your setup, the app sends our server the list of gear on it; nothing is kept. Photos the camera reads are worked out on your device and never uploaded. We don't track you, show ads, or sell anything.

1. What we collect, and why

What	Why	Legal basis
Account (only if you sign in): the identifier Apple gives us when you use Sign in with Apple, or Google gives us when you sign in with Google. We store a one-way scrambled version of it, never the original, and never your name, email or a password.	To recognise your account and keep you signed in	Contract
Your setup (only if you sign in): one copy of what you've built in the app — your gear, how it's wired, your projects and settings, and anything you typed into a gear record, such as serial numbers, what you paid and notes. Receipt photos are not included; they stay on your device.	So your setup can follow you to another device	Contract
A sign-in session: a random code your device holds, and a matching record on our server	To keep you signed in without asking again, and to sign you out everywhere	Contract
Gear lists you choose to share: the title, note, product names and wiring you put on a public gear page. No account, device or serial number goes with it.	To show the page to anyone you give the link to	Contract
The gear you're asking about: to work out your score, advice, a blueprint, a PC build or a comparison, the app sends our server the products on your board, any names you gave them, and how they're wired, or the parts and products in question, with your creator type and budget. Never your serial numbers, prices paid, notes, receipts, account or device. The server answers and keeps nothing; the answer is remembered on your device so it still shows offline.	To give you the score and advice you asked for	Contract
Gear names you look up: when you search for something the built-in catalog doesn't know and ask GEARIT to find it, the words you typed	To identify the product and its specifications	Legitimate interests (making the catalog work)
Connection details: the IP address your device connects from, held briefly in request logs and in counters that stop the service being flooded	To keep the service secure and working	Legitimate interests (running a working, secure service)
Support emails you send us	To answer them	Legitimate interests

What stays on your device and never reaches us: camera images (the app reads a box, label or receipt on the device and doesn't save or send the picture), receipt photos, and reminders, which are scheduled by your device itself — no notification token is sent to us. Without an account, your whole setup stays on your device and in your own iCloud (on iPhone and iPad) or Google backup (on Android); Apple or Google stores that copy, and we can't see it.

Buying the unlock: the one-off unlock is sold and billed by the App Store or Google Play. We never see your card, your name or your store account; the app only asks the store whether the unlock has been bought.

Buy buttons: on a device set to the United Kingdom, a product's buy button opens an Amazon UK search that carries our Amazon Associates tag. As an Amazon Associate, GEARIT earns from qualifying purchases. Amazon reports qualifying sales to us as totals, never who bought what, and the app sends Amazon nothing about you. Anything you do on Amazon is covered by Amazon's own privacy notice. Elsewhere the button opens an ordinary web search.

We do not sell your data, and we don't use it for advertising. GEARIT contains no analytics, trackers, advertising identifiers or third-party advertising code.

2. Who else handles it

We use other companies to run the app. They only get what they need for their job, under a contract that stops them using it for anything else.

Who	What they do	Where
Vercel	Hosts our server, this website and shared gear pages	United States
Upstash (through Vercel)	The database holding accounts, sessions, synced setups, shared gear pages and the gear catalog	United States
Anthropic	Identifies a piece of gear from the name you typed. Only that text is sent — never your setup or anything about you	United States
Apple / Google	Sign-in, your own iCloud or Google backup, app distribution and billing	United States
Frankfurter (European Central Bank rates) and ExchangeRate-API	Daily currency exchange rates. Our server asks for the rates; nothing about you is sent	European Union / international

Where a provider is outside the UK, the transfer is covered by the UK International Data Transfer Addendum or the UK's adequacy regulations for that country.

A gear page you share can be seen by anyone who has its link. It shows only what you chose to put on it.

We'll share data if the law requires it — a court order, a lawful request from the police or a regulator — and to protect someone's safety.

3. How long we keep it

Your account and your synced setup: while your account exists. Deleting the account removes them from our server straight away.
Sign-in sessions: until you sign out, or one year after the session was last used.
Shared gear pages: one year after you last published or updated them, or until you take them down from the app.
Gear names you looked up: the product facts we worked out are kept in the shared catalog so the next person doesn't wait. They are facts about equipment, not about you, and aren't linked to you.
Request logs and flood-protection counters: no more than 30 days.

4. Your rights

Under UK data-protection law you can ask us to:

show you what we hold about you (a copy, usually within a month);
correct it;
delete it — which you can also do yourself in the app: Settings › Your account › Delete your account. You can also ask by email; see how to delete your account;
give you a copy in a form you can take elsewhere — the app's backup file in Settings already does this;
stop using it for a particular purpose, or object to our legitimate-interests uses;
withdraw consent for anything that was based on it, such as camera access, which you can turn off in your device settings.

Email theitgroupapps@gmail.com and we'll reply within one month. If you're not happy with how we handle it you can complain to the ICO at ico.org.uk/make-a-complaint or on 0303 123 1113.

5. Children

GEARIT is not for anyone under 13. We don't knowingly collect data from them. If you think a child has given us data, email us and we'll delete it.

6. Security

Data is encrypted in transit and at rest with our hosting providers. Access to it is limited to the people who need it to run the app. No system is perfect; if we ever have a breach that puts you at risk we'll tell you and the ICO as the law requires.

7. Cookies and tracking

The app itself sets no cookies, and this website uses none. We don't use Apple's App Tracking Transparency because we don't track you across other companies' apps.

8. Changes

If how we handle data changes, this page is updated first and the effective date above changes. For anything significant we'll tell you in the app.

9. Contact

Iam The Protagonist Ltd, trading as GEARIT and The It Group
Registered in England and Wales, company number 16842280
60 Hay Lane, London, NW9 0NB, United Kingdom
theitgroupapps@gmail.com