Privacy Policy

WhatArt · Last updated: May 8, 2026

NerdForm Labs LLC ("Company", "we", "us", or "our") operates the WhatArt mobile application ("App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

1. Information We Collect

1.1 Account Information

WhatArt uses anonymous authentication. We do not require you to create an account with personal information. We collect:

• An anonymous user ID generated automatically by Firebase Authentication
• Date of first use and last activity

1.2 User-Submitted Content

When you use the App to analyze paintings, we collect and store:

• Photos of paintings you submit for analysis
• AI-generated analysis results (title, artist, historical context, estimated value)

All user-submitted content is automatically and permanently deleted after 30 days. You may delete content manually at any time from the Library section of the App.

1.3 Usage Data

We automatically collect:

• Number of analyses performed per day (for free tier limit enforcement)
• Subscription status (Free or Premium)
• Anonymized analytics events (e.g., feature usage, paywall interactions)

1.4 Information We Do NOT Collect

• Name, email address, or any personally identifiable information
• Precise location data
• Contacts or address book
• Browsing history
• Payment information (handled entirely by Google Play)

2. How We Use Your Information

Data	Purpose	Retention
Anonymous user ID	Link analyses to your device, enforce usage limits	Until account deletion
Painting photos	AI-powered painting identification and analysis	30 days, then auto-deleted
Analysis results	Display results and enable Library history	30 days, then auto-deleted
Usage data	Enforce usage limits, analytics, service improvement	Until account deletion

3. Third-Party Services

The App uses the following third-party services that may process your data:

Service	Provider	Data Shared	Purpose
Firebase Authentication	Google LLC	Anonymous user ID	User authentication
Cloud Firestore	Google LLC	Analysis results, usage data	Data storage
Firebase Storage	Google LLC	Painting photos	Image storage
Firebase Analytics	Google LLC	Anonymized usage events	App analytics
Cloud Functions	Google LLC	Painting photos (processed, not stored)	Secure API proxy
Claude API	Anthropic, PBC	Painting photos (processed, not stored by Anthropic)	AI-powered painting analysis
Google Play	Google LLC	Payment information	Payment processing

Each third-party service is governed by its own privacy policy:

• Firebase Privacy Policy
• Google Cloud Privacy Notice
• Anthropic Privacy Policy

4. Camera Permission

The App requires access to your device's camera to photograph paintings for analysis. Camera access is used only when you actively take a photo within the App. We do not access your camera in the background or access your existing photo library without your explicit action.

5. Data Storage and Security

We use industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Firebase Authentication for secure anonymous session management
• Firebase Storage with access controls — uploaded images are not publicly accessible
• Firestore Security Rules — each user can access only their own data
• API keys stored securely in Google Cloud Secret Manager, never in the app
• Automatic deletion of all user-submitted content after 30 days

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights

You have the right to:

• Access: Request a copy of the data we hold associated with your anonymous ID.
• Deletion: Delete individual analyses from the Library at any time, or contact us at contact@nerdform.org to delete all data associated with your account. All data will be permanently deleted within 30 days of your request.
• Opt-Out: You may stop using the App at any time. All data is automatically deleted after 30 days of inactivity.

7. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. Since we use anonymous authentication, we do not collect age information. If you believe a child under 13 is using the App, please contact us at contact@nerdform.org.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used.
• Right to request deletion of personal information.
• Right to opt-out of the sale of personal information. We do not sell your personal information.
• Right to non-discrimination for exercising your privacy rights.

9. International Users

The App is operated from the United States. If you use the App from outside the U.S., your data may be transferred to and processed in the United States. By using the App, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of the App after changes are posted constitutes acceptance.

11. Contact Us