Privacy Policy

Last updated: April 1, 2026

EGURA is built with privacy by design. Your data stays in the EU, is never sold, and you can delete it at any time.

1. Who we are

EGURA is a personal inventory management application developed by Arzu Topal. For any questions regarding this policy, contact us at hello@egura.app.

2. What data we collect

We collect only the data necessary to provide the EGURA service:

Account data: Email address (for login and communication).
Inventory data: Item names, photos, categories, condition, and values that you add to your inventory.
Usage data: Anonymous analytics to improve the product (no tracking cookies).
Waitlist data: Email addresses submitted via our waitlist form.

3. How we use your data

To provide and improve the EGURA service.
To send you product updates (only if you opted in via waitlist).
To generate your personal impact statistics (CO₂ savings, item value, etc.).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data storage and security

All data is stored on EU servers (Stockholm, Sweden) via Supabase, with encryption at rest and in transit. We follow GDPR requirements by design.

5. AI processing

EGURA uses Google Gemini AI for item recognition (photo scanning). Photos are sent to the AI for processing and are not stored by the AI provider after processing is complete. No personal data is included in AI requests beyond the item photo.

6. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

Access your personal data.
Rectify inaccurate data.
Erase your data ("right to be forgotten") — available directly in the app via Profile → Delete Account.
Export your data in a portable format — available via Profile → Backup.
Withdraw consent at any time.
Lodge a complaint with a supervisory authority.

7. Cookies

EGURA uses only essential, functional cookies required for authentication. We do not use advertising or tracking cookies.

8. Third-party services

Supabase (database, authentication) — EU-hosted, Stockholm.
Vercel (application hosting) — Edge network, privacy-compliant.
Cloudflare (landing page CDN) — EU-compliant.
Google Gemini AI (item recognition) — Data Processing Agreement in place.

9. Data retention

Your data is retained as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days.

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of EGURA after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or to exercise your rights, please contact:

EGURA
Email: hello@egura.app