Prufo · Legal

Privacy Policy

Review draft · 28 October 2026

1. About this policy

Prufo is provided under the name Pomum (“we”, “us” or “our”). This policy describes how we handle personal information in connection with the Prufo mobile app, website and related support services (the “Service”). For privacy questions, contact support@prufo.app.

The app and website have different functions. The current website provides information and legal pages; it does not accept item photos, create user accounts, process payments or collect waitlist registrations. The app processes the information described below when you use the corresponding features.

2. Information we process

Photos, item information and reports

When you submit a check, we receive the photos you select, the item category, available item details and capture information. We create and store analysis results, evidence crops, report identifiers, report history and any feedback you submit. Images can contain personal information, such as a face, address, receipt or serial number. Please include only what is needed to examine the item and remove unnecessary personal information before uploading.

Camera and photo permissions allow the app to capture or select images. They do not authorize us to upload your entire photo library. Submitted photos are processed on our servers and by our AI provider; the assessment is not performed solely on your device.

App access and identifiers

We use app and device identifiers to connect you to your checks and purchases. These identifiers can link your activity, reports and purchases even though you do not sign in with an email address. The app also stores settings, photo drafts and saved content on your device. Access to your history may be affected if you lose access to the app or reset your device.

Purchases and subscription access

We and our purchase providers process product and transaction identifiers, purchase and renewal dates, trial and subscription status, purchase restoration information, and check balances and usage. Apple processes App Store payments. We do not ask you to provide a payment-card number in Prufo or receive your full payment-card details from Apple.

App usage and technical information

The app uses product analytics to understand onboarding, feature use, checks, report interactions, purchase flows and errors. This can include a guest identifier, an analytics device identifier, session and event timestamps, app and operating-system versions, device information, language, permission status, item category, photo count, check and report identifiers, result categories, feedback choices, and purchase product, price and currency information.

Our analytics data does not include uploaded photos, full report text, free-form feedback comments or private access information. We do not use advertising identifiers or record screen sessions for analytics. Service providers receive network information, such as an IP address, when your device connects to their systems.

Our servers and hosting providers may process connection and request information, including IP addresses, timestamps and error details, to deliver and secure the Service. The current website does not use advertising cookies or third-party analytics. The app’s storage and analytics are separate from the website.

Notifications and support

If you enable report notifications, we process notification delivery identifiers, your settings and language to send updates through Apple. If you contact us, we receive your email address, correspondence and any attachments or diagnostic information you choose to share. Please do not send passwords, private app access information or full payment-card details.

3. How we use information

We use information to:

• Process the photos you submit, generate and deliver reports, maintain your history and provide requested exports.
• Verify purchases, restore eligible subscription access, manage allowances and prevent duplicate charges or misuse of free checks and purchases.
• Deliver notifications you enable, respond to support requests and address feedback.
• Diagnose failures, protect the Service, detect fraud and enforce our terms.
• Understand usage and evaluate and improve the quality, reliability and usability of the Service, including its analysis systems.
• Meet legal obligations, maintain necessary records and establish, exercise or defend legal claims.

Where European, UK or similar laws require a legal basis, we rely on performance of our agreement for the processing necessary to provide requested checks, history, purchases and related support; legitimate interests for proportionate security, fraud prevention, diagnostics and internal service improvement, subject to your rights and reasonable expectations; legal obligations for required records and disclosures; and consent where required, including for optional processing or publication of your content. A device permission is not consent to every use described in this policy.

You are not legally required to submit photos or buy a subscription. We need the relevant photos, guest access and purchase information to provide the features you request. Without them, those features may not work. Optional publication consent is not a condition of using paid features.

4. AI processing and internal improvement

We send submitted photos and relevant item information to OpenAI for automated analysis. Where market or background information is included, item descriptions may also be used to search public sources. Public-source research provides context and does not establish that your particular item is authentic.

OpenAI may retain information for security, abuse prevention and legal obligations under its applicable terms and settings. Its published API data policy states that submitted information and results are not used to train its models by default, unless the customer opts in to data sharing. See OpenAI’s data controls.

We may review submitted photos, reports, feedback and usage information internally to investigate problems, evaluate results and improve Prufo’s analysis systems. Access is limited to people and service providers who need it for those purposes. Internal quality review is not a promise that a person checks or authenticates each item. This policy does not grant permission to publish your submissions or to make them available for a provider’s unrelated, general-purpose model training.

We will ask for separate permission before using your submitted photos or reports in public examples, promotional materials or other public-facing content. You may contact us to withdraw that permission for future use. Withdrawal does not make earlier lawful use unlawful, and we may not be able to retrieve copies that other people have already saved or shared.

Reports are generated through automated interpretation of visible item features and can be mistaken or inconclusive. They assess items, not your eligibility for credit, employment, insurance or similar rights. Prufo does not make those decisions for you or a third party.

5. Providers and other disclosures

We use service providers for specific functions, including:

• OpenAI: processing submitted images and related information to generate analysis and, where available, research context.
• Cloud hosting, storage and backup providers: hosting the website and app services and storing application data, uploaded images, reports, operational records and backups.
• Subscription and purchase-management providers: verifying purchases and managing access, using app identifiers and purchase information.
• Product analytics providers: processing app usage, pseudonymous identifiers and technical information described above to help us understand and improve the Service.
• Apple: App Store transactions, purchase restoration and push-notification delivery.
• Email and support providers: receiving and handling correspondence you send to us.

Providers acting on our behalf are permitted to process information for the relevant services and are required to protect it under applicable contractual and legal obligations. Some providers, including Apple for its store and account services, also process information for their own purposes under their own privacy notices.

We may disclose information where reasonably necessary to comply with law or a valid legal request; protect users, others or the Service; investigate fraud or security incidents; or pursue or defend legal claims. Information may be transferred in a merger, acquisition, reorganization or sale of the Service, subject to applicable privacy obligations and any required notice.

If you export or share a report, the recipients and apps you choose receive that content and handle it under their own terms. Exported copies may contain item images and report details. We cannot control copies outside our systems.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not use your submitted photos to target advertisements.

6. Retention and deletion

Submitted photos and reports are stored on our servers to deliver checks, maintain history and support the purposes described above. They are not automatically deleted when an assessment finishes, a subscription ends or the app is uninstalled.

We determine retention by the type of information and why it is needed:

• Photos, reports and guest records: the need to provide saved history, handle feedback and support, and carry out proportionate quality evaluation, taking account of deletion requests and whether identifiable data remains necessary.
• Purchase and usage records: the applicable purchase lifecycle, allowance and fraud controls, accounting or legal requirements, and outstanding billing disputes.
• Analytics and operational records: their usefulness for product trends, diagnostics and security investigations, the sensitivity of the information and applicable provider retention settings.
• Support correspondence: the time needed to resolve the request, handle follow-up questions and meet relevant legal requirements.

When information is no longer needed for these purposes, it should be deleted or anonymized. A valid deletion request may be subject to limited exceptions, such as records required by law, necessary fraud prevention or an unresolved legal claim. If an exception applies, we will explain it as required by law. Backup copies may persist until replaced or expired; immediate removal from every backup is not guaranteed.

To request deletion of your app identity, reports or uploaded photos, email support@prufo.app and describe the information or reports concerned. Simply uninstalling the app does not submit a deletion request for data on our servers. Deleting data does not cancel an Apple subscription. Manage cancellation separately in your Apple Account settings.

7. Your choices and privacy rights

You can manage camera, photo and notification permissions in your device settings. These controls affect future access; they do not delete information already submitted. You can also choose not to submit additional checks or share reports.

Depending on where you live and the applicable law, you may have the right to:

• Know about and access personal information we hold about you.
• Correct inaccurate personal information, request deletion or restrict its use.
• Receive a portable copy of certain information.
• Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
• Appeal a refusal of your request and complain to the relevant privacy regulator.

You may object to processing based on legitimate interests, including internal improvement and analytics, where applicable law provides that right. Contact us to exercise this right or withdraw optional consent.

Send requests to support@prufo.app. We may ask for proportionate information to locate your records and verify your authority. Please retain access to the app where possible; because there is no email sign-in, an email address alone may not identify your records. Do not send private app access information. Where required by law, an authorized representative may make a request on your behalf.

We will handle requests within the time required by applicable law and explain any permitted extension or refusal. We will not discriminate against you for exercising your rights. Some requested changes may prevent us from providing the affected feature. You may complain to your local data-protection authority, including the UK Information Commissioner’s Office where relevant.

8. International processing

Our providers operate internationally, and information may be processed outside your country, including in the United States. Privacy laws in another country may differ from those where you live.

Where applicable law requires a safeguard for an international transfer, the transfer must be supported by a lawful mechanism, such as a recognized adequacy decision or appropriate contractual safeguards. You can contact us for information about the safeguards applicable to your data and how to obtain a copy. Using the Service is not, by itself, a waiver of your international-transfer rights.

9. Security

We use safeguards, including access controls and encrypted connections, to help protect information. No storage or transmission method is completely secure. Keep your device and app access secure, and contact us if you suspect unauthorized access.

10. Children

Prufo is intended for adults aged 18 or older, or the age of majority where they live if higher. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action, including deletion where required.

11. Changes to this policy

We may update this policy as the Service or our obligations change. The date at the top identifies the version. For material changes, we will provide appropriate notice and obtain consent where required before applying a new use of information. A policy update alone does not replace any consent required by law.

12. Contact

For Prufo support, privacy requests or questions about this policy, contact Pomum at support@prufo.app. Please identify Prufo and describe your request without including unnecessary sensitive information.

See also our Terms of Use.