Mobile App Privacy Policy

Effective date: August 20, 2026

This privacy policy covers the Organic's Best mobile app for iOS and Android. It explains what data the app collects, how it is collected, everything it is used for, and who it is shared with. Our website has its own privacy policy; where you shop with us in both places, both apply to the respective service.

Phone: +1 929-419-4127
Email: support@organicsbestshop.com

At a glance

• The app contains no advertising, no analytics trackers, and no cross-app tracking, and we never sell your data.
• You can browse the entire catalog as a guest without creating an account.
• The AI shopping assistant only works after you explicitly agree in the app to what it shares, and you can use the whole app without it.
• Payments are processed by Shopify — the app never sees your card details.
• You can delete your account, including your data, directly in the app.

1. Your account and purchases (Shopify)

Sign-in is passwordless and handled by Shopify, our commerce platform: you enter your email address and receive a one-time code. When you create an account or place an order, Shopify processes your name, email address, shipping and billing addresses, order history, and payment. Payment details are entered only in Shopify's secure checkout — neither the app nor our own servers ever receive your card number. We receive your order information (items, amounts, delivery address) to fulfil your purchase.

How collected: entered by you at sign-in, in your profile, or at checkout. Used for: providing your account, processing and delivering orders, and customer service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR); statutory retention duties for order records (Art. 6(1)(c) GDPR).

2. AI shopping assistant ("Ask AI")

The app includes an optional AI assistant that answers questions about our products, your cart, and your orders. It is off until you agree: before your first message, the app shows exactly what will be shared and asks for your permission. If you decline, nothing is sent and the rest of the app works normally.

When you use the assistant, the following is sent to our own servers and processed by our AI providers, OpenAI and Anthropic, to generate answers:

• your chat messages;
• your first name (when you are signed in);
• the contents of your shopping cart;
• your order details (only when you are signed in); and
• a session identifier for your device.

We store your conversations and preferences the assistant learns from them (for example, your child's age or dietary needs, if you mention them) on our servers so the assistant can remember context on your next visit. Under our agreements with OpenAI and Anthropic, content sent through their business APIs is not used to train their models.

How collected: only from what you type into the chat and, with your consent, your cart and signed-in order data. Used for: generating answers and product guidance, remembering your preferences, and handing the conversation to our human support team when you ask for it. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by contacting us at support@organicsbestshop.com — we will delete your conversation history and remembered preferences. Deleting your account in the app also deletes them.

3. Live support chat

The app's human support chat is powered by Gorgias, our customer-service helpdesk. When you start a chat, your messages, your name, and your email address (from your profile, or as you provide it) are shared with our support team through Gorgias so we can help you and follow up.

How collected: what you type in the chat and your profile details. Used for: answering your questions and resolving issues. Legal basis: performance of a contract and our legitimate interest in providing customer support (Art. 6(1)(b) and (f) GDPR).

4. Product reviews and photos

Product reviews are powered by Klaviyo. When you submit a review, your review text, rating, name, and email address are processed by Klaviyo, and the review is checked by our staff before publication. If you attach a photo, the app asks for camera or photo-library permission at that moment; the photo is uploaded with your review. The app never accesses your camera or photos for any other purpose.

How collected: entered or attached by you when writing a review. Used for: displaying customer reviews in the app and on our website. Legal basis: your consent (Art. 6(1)(a) GDPR).

5. Push notifications

If you allow notifications, the app registers a push token for your device with our servers, delivered via Expo's push service and Apple's or Google's notification systems. We use it to send order-status updates and replies from our support team — not marketing blasts. You can turn notifications off at any time in your device settings.

How collected: generated by your device when you accept the notification prompt. Used for: order updates and support replies. Legal basis: your consent (Art. 6(1)(a) GDPR).

6. What the app does not do

• No advertising or marketing SDKs and no third-party analytics — the app contains no trackers.
• No tracking across other companies' apps or websites as defined by Apple's App Tracking Transparency.
• No sale of personal data, ever.
• Our public Trustpilot rating shown in the app is read-only: your device fetches the public score from Trustpilot, and no personal data about you is sent to Trustpilot.
• Settings such as your cart and preferences are stored locally on your device.

Like any online service, our servers and the providers above technically process your IP address to deliver content and maintain security; it is not used to profile you. Legal basis: legitimate interest in operating the service securely (Art. 6(1)(f) GDPR).

7. Who we share data with

We share personal data only with the service providers needed to run the app, each acting under a data-processing agreement that binds them to protect your data to the same standard as this policy and the GDPR:

• Shopify — commerce platform: accounts, orders, checkout, and payments (privacy policy)
• OpenAI — AI provider for the shopping assistant, only with your consent (privacy policy)
• Anthropic — AI provider for the shopping assistant, only with your consent (privacy policy)
• Gorgias — customer-support helpdesk (privacy policy)
• Klaviyo — product reviews (privacy policy)
• Expo, Apple, and Google — push-notification delivery (only if you opt in)
• DigitalOcean — hosting for our own backend services (app content, the assistant's conversation storage, and push delivery)

We also disclose data where the law requires it. No other third parties receive your personal data.

8. International transfers

Some of the providers above process data outside the European Economic Area, in particular in the United States. Where they do, the transfer is protected by an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework, where the provider is certified) or by the EU Standard Contractual Clauses.

9. How long we keep data

• Order and invoice records: for the statutory commercial and tax retention periods (up to 10 years under German law).
• Account data: until you delete your account.
• AI assistant conversations and remembered preferences: until you delete your account or ask us to delete them.
• Support conversations: as long as needed to handle your matter and for a reasonable follow-up period.
• Push tokens: until you disable notifications or uninstall the app.

10. Deleting your data and your rights

You can delete your account directly in the app: Account tab → scroll to the bottom → Delete account. This erases your customer account and the data we hold about you, including your AI-assistant history, except records we are legally required to keep (such as invoices).

Under the GDPR you also have the right to access your data, correct it, restrict or object to its processing, receive it in a portable format, and withdraw any consent at any time with effect for the future. To exercise any of these rights, contact us at support@organicsbestshop.com. You are also entitled to lodge a complaint with a data-protection supervisory authority.

11. Children

The app is a shopping tool for adults — parents and caregivers — and is not directed at children. We do not knowingly collect data from children. Information about your child that you choose to share in the AI assistant (such as age or dietary needs) is processed only with your consent, only to give you relevant guidance, and is deleted as described above.

12. Changes to this policy

If we change what the app collects or who it is shared with, we will update this policy and, where the change is significant, ask for your consent again in the app before the new processing starts.

13. Contact

Should you have any questions about our privacy practices or this privacy policy, or if you would like to exercise any of the rights available to you, please call +1 929-419-4127 or email us at support@organicsbestshop.com.