Privacy Policy
The short version. reitrn reads your shopping emails to find your orders and tell you what you can still return, and by when. We keep a record of each order and return. We do not keep the emails, we never send email from your account, and we never delete anything. You can remove an email address, or your whole account, at any time.
Who we are
reitrn Ltd is the data controller for the reitrn app and go.reitrn.com. Contact: privacy@reitrn.com.
What we collect and why
- Your account. Your email address and, if you add it, your name and mobile number. Used to sign you in, greet you, and match orders to you.
- Your connected mailboxes. When you connect an email account we store an access credential for it, encrypted. We use it to read your inbox for shopping emails: order confirmations, dispatch and delivery notices, return and refund confirmations. Access is read-only. We do not read, store or analyse emails that are not about a purchase.
- Your orders and returns. From those emails we keep a structured record: the retailer, order number, date, items, amounts, the email address the order used, any return or refund, and the return deadline we work out. We keep this record so your returns history is complete and your reminders are right. We do not keep the emails themselves; once read, only the record remains.
- Retailer policies. We read retailers' public returns pages to know their return windows. This is not personal data.
- Reminders. If you allow notifications we store a device token so we can send you deadline reminders. You choose which reminders in Profile.
- Usage. Basic events such as "connected an email" or "opened a return link", with timestamps, so we can see the app works and fix it when it doesn't.
How far back we look
When you connect a mailbox we look back up to two years so your returns history is complete, not just the last few weeks. Older emails are read only for the order and its outcome. Deadlines and reminders are based on the last 90 days.
Your returns history and the reitrn Score
We plan to offer a reitrn Score: a summary of your returns history that can earn you faster refunds and easier returns with brands. Your history is yours. We will not share it with any brand, or use it to build a score that brands see, unless you switch that on in the app. That choice will be explicit and separate, and you can turn it off. Until then your history is used only to show you your own orders and returns.
Google user data
If you connect a Gmail account, reitrn's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- What we access. We ask for read-only access to your Gmail messages (the
gmail.readonlyscope) and your email address. We search your mailbox for messages from retailers and couriers about purchases: order confirmations, dispatch and delivery notices, return and refund confirmations. We open only messages that match that search. We never send, modify, label or delete anything in your mailbox. - How we use it. Solely to build your list of orders, returns and return deadlines, and to send you the reminders you have switched on. We do not use Gmail data for advertising, to build profiles for anyone else, to train AI models, or for any purpose beyond providing and improving these features.
- What we keep. The structured order record described above (retailer, order number, date, items, amounts, return status, deadline). We do not keep copies of your emails. The text of a matching email is processed and then discarded.
- Who else sees it. The text of a matching shopping email is sent to Anthropic, our AI provider, to be turned into an order record; Anthropic processes it on our instructions and does not retain it or use it to train models. Google user data is not shared, transferred or sold to anyone else, and is never shared with retailers or brands. No person at reitrn reads your emails unless you ask us to investigate a problem with your account, and then only the messages concerned.
- How we protect it. Your Gmail access token is stored encrypted at rest and is used only from our servers, never from the app on your phone. All data moves over TLS. Your order records are held in a database with row-level access controls so only your account can read them. Access by reitrn staff is limited to named engineers and logged.
- Retention and deletion. Remove your Gmail account in Profile and we delete its token immediately and the orders found through it. You can also revoke reitrn's access at any time from your Google Account permissions. Delete your reitrn account and all of it goes within 30 days.
Who processes data for us
We use trusted providers to run the service: Supabase (database and sign-in), Vercel (hosting), Expo (app updates and push notifications), Apple (App Store and notification delivery) and Anthropic (the AI that reads a shopping email and turns it into an order record; it does not keep your emails). Each processes data only on our instructions.
Legal bases
Reading your connected mailbox and keeping your order records is necessary to provide the service you asked for (contract). Reminders and usage events are our legitimate interest in running a reliable app, which you can switch off. Any sharing of your history with brands will be based on your consent.
How long we keep it
Order and return records stay for as long as you have an account. Remove a connected email in Profile and we delete its credential and the orders found through it. Delete your account and everything goes within 30 days, except records we must keep by law.
Your rights
You can ask for a copy of your data, correct it, delete it, or object to how we use it. Email privacy@reitrn.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change how we use your data we will tell you in the app before it takes effect.