Privacy Policy

Last updated: March 20, 2026

Introduction

Vicari ("we," "our," or "us") operates the Vicari mobile application and Chrome browser extension (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. References to the "App" in this policy apply equally to the Chrome extension unless stated otherwise.

Information We Collect

Information You Provide

  • Account Information: When you register, we collect your name, email address, and profile information.
  • User Content: Posts, comments, photos, and other content you share on the platform.
  • Body Measurements: If you choose to provide them, we collect body measurements (height, weight, body dimensions) to help provide relevant content.

Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers.
  • Usage Data: How you interact with the App, including features used and time spent.
  • Log Data: IP address, access times, and pages viewed.
  • Browser Extension Data: When you use the Vicari Chrome extension and click the extension icon on a product page, we receive the page URL to match it against products in our database. We do not store or log browsing history.

Camera and Media Access

Our App requests access to your device's camera and photo library to enable you to:

  • Take photos
  • Upload images from your gallery

We do not access your camera or photos without your explicit action. Photos are only uploaded when you choose to share them.

Chrome Extension

Our Chrome browser extension ("Vicari Extension") accesses the following:

  • Active Tab Content: When you click the extension icon, it reads product information (name, brand, price, images) from the current page's publicly available structured data (JSON-LD and Open Graph meta tags) to match products with Vicari reviews. No page content is read until you explicitly click the extension icon.
  • Authentication: The extension stores login tokens securely using Chrome's built-in storage APIs. Access tokens are held in session storage (cleared when the browser closes) and refresh tokens in local storage (persistent across sessions). Tokens are only sent to Vicari's own servers for authentication.
  • No Background Activity: The extension does not inject scripts, read page content, or collect any data unless you explicitly activate it by clicking the extension icon. There is no passive monitoring, tracking, or data collection while browsing.

The extension communicates exclusively with Vicari's servers (api.vicari.app) and our authentication provider (Supabase). No data is sent to third parties.

How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the App
  • Send notifications about activity on your account
  • Respond to your comments, questions, and support requests
  • Monitor and analyze usage patterns and trends
  • Detect, prevent, and address technical issues and fraud
  • Personalize your experience and deliver relevant content
  • Match products you are browsing with existing Vicari reviews and posts

Sharing of Information

We may share your information in the following situations:

  • With Your Consent: When you explicitly agree to share information.
  • Public Content: Posts and profile information you make public are visible to other users.
  • Service Providers: With third-party vendors who assist in operating our App.
  • Legal Requirements: When required by law or to protect our rights.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and data
  • Export your data
  • Uninstall the Chrome extension at any time, which immediately stops all extension-related data access

Children's Privacy

Our App is not intended for users under 16 years of age. We do not knowingly collect personal information from users under 16.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@vicari.app

This privacy policy is effective as of March 20, 2026.