BrikgemPrivacy Policy
Last updated: 17 October 2026
This policy explains what Brikgem ("we", "us") collects when you use the Brikgem app and website (the "Service"), why, and what choices you have. We collect as little as we can to run the Service.
1. What we collect
Without an account
You can browse the catalog without signing in. We then store your preferences (appearance, currency, preferred store) only on your device. Our backend receives the requests needed to show catalog data, with your IP address and basic device information in standard server logs.
With an account
- Account details: email address, name and avatar (from Apple, Google or the details you enter), and an optional username.
- Your collection: the lists you create, the sets, minifigs and parts in them, conditions, quantities and notes.
- Purchases: if you buy an optional paid feature, our payments provider tells us whether your entitlement is active. We never see your payment details.
Automatically
- Crash and performance reports: device model, OS version, app version and the technical context of errors, so we can fix bugs.
- Feature flags: an anonymous device identifier used to decide which features are enabled for your installation.
Camera
The box scanner uses your camera to read barcodes and set numbers. Processing happens on your device; photos are not uploaded or stored. You can revoke camera access in your device settings.
2. How we use it
- to provide and sync your collection across your devices;
- to sign you in and keep your account secure;
- to unlock paid features you have purchased;
- to find and fix crashes and bugs;
- to respond to support requests.
We do not sell your data, show third-party ads, or use your data for advertising profiles.
3. Service providers
We share data only with providers that help run the Service, under contracts that restrict their use of it:
- Convex – backend, database and file storage.
- Apple and Google – sign-in and in-app purchases.
- RevenueCat – purchase and subscription status.
- Resend – transactional email (verification codes, password resets).
- Sentry – crash and performance reporting.
- Statsig – feature flags.
When you tap a "where to buy" link you leave the Service and the retailer's privacy policy applies. Some links are affiliate links; the retailer may tell us a purchase happened, but not who made it.
4. Retention
We keep your account data for as long as you have an account. Deleting your account (Account screen in the app) removes your profile, lists and notes from our database. Crash reports are kept for 90 days. Backups are purged on a rolling schedule.
5. Your rights
Depending on where you live (including under the GDPR and CCPA) you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. You can view and edit your details and delete your account in the app; for anything else email us.
6. Children
The Service is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
7. Security
Data is encrypted in transit. Sign-in tokens are stored in your device's secure keychain. No system is perfectly secure; if we learn of a breach affecting you we will notify you as required by law.
8. International transfers
Our providers may process data in the United States and other countries. Where required we rely on standard contractual clauses or equivalent safeguards.
9. Changes
We may update this policy. Material changes will be announced in the app or on this page, and the "Last updated" date will change.