Privacy Policy

1. Who We Are

OWNMRK™ ("the App," "the Service") is operated by OWNMRK LLC, a Wyoming limited liability company ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our digital ownership registry platform on iOS and Android.

We take privacy seriously. We collect the minimum data needed to operate a secure, trustworthy ownership record system — and nothing more.

2. Information We Collect

We collect several categories of information depending on how you use the Service:

Account Data

• Full name and email address (required for account creation)
• Password (stored as a salted hash — we never store your plaintext password)
• Profile photo (optional)
• Account creation date and last login timestamp

Item Registry Data

The core data you create within OWNMRK — your digital ownership records:

• Item name, description, category, and estimated value
• Photos, serial numbers, model numbers, and purchase receipts you upload
• Warranty information, acquisition date, and acquisition method
• Custom notes, tags, and metadata you attach to registered items

Identity Verification Data (KYC)

If you use features requiring identity verification (such as theft reporting or high-value item transfer):

• Government-issued ID scan (processed by our third-party KYC provider)
• Identity verification status (we store only the result — verified/unverified — not the ID document itself)

Technical & Device Data

• Device type, operating system version, and app version
• IP address and general location (country/region) for fraud detection and security
• Crash reports and diagnostic logs (anonymized)
• Session activity and feature usage patterns (aggregated, not tied to identity)

Payment Data

Subscription payments are processed by Apple (App Store) or Google (Play Store). We do not receive or store your credit card or bank account information. We receive only the transaction confirmation and subscription status from the payment platform.

3. How We Use Your Information

• Providing the Service — storing, organizing, and displaying your ownership records
• Account management — authenticating you, managing your subscription, sending transactional emails
• Security and fraud prevention — detecting suspicious activity, preventing false ownership claims, and protecting the integrity of the registry
• Customer support — responding to your requests and resolving issues
• Legal compliance — meeting obligations under applicable law and responding to valid legal process
• Product improvement — understanding how features are used to improve the Service (using aggregated, anonymized data only)

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

Service Providers

We use vetted third-party providers who process data on our behalf and are contractually bound to protect it:

• Cloud infrastructure — encrypted data storage and hosting
• Authentication — secure login and session management (Supabase)
• KYC verification — identity verification for eligible features (third-party processor; document data is not retained by us)
• Email delivery — transactional and account notifications
• Analytics — anonymized, aggregated usage metrics only

Law Enforcement

We may disclose information to law enforcement, courts, or government agencies when required by a valid legal obligation (such as a subpoena, court order, or law enforcement request) or when we believe in good faith that disclosure is necessary to prevent imminent harm, fraud, or illegal activity. We will notify you of such requests where legally permitted.

Insurers and Marketplaces

We will share your ownership records with insurance companies, resale marketplaces, or financial institutions only with your explicit, affirmative consent. We will never share item data with these parties automatically.

Business Transfers

If OWNMRK LLC is acquired, merged, or sells substantially all assets, your data may transfer to the acquiring entity. We will notify you in advance and the acquiring party will be bound to honor this Privacy Policy or obtain your consent for any material changes.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your device and our servers is encrypted via TLS 1.3
• Data at rest is encrypted using AES-256
• Access to production systems is restricted, logged, and audited
• We perform regular security reviews and vulnerability assessments
• Passwords are never stored in plaintext — hashed with bcrypt

No system is 100% secure. If you discover a security vulnerability, please report it to security@ownmrk.com immediately.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you request account deletion:

• Your account and associated item data will be deleted within 30 days
• Anonymized, aggregated analytics data may be retained indefinitely
• We may retain certain records longer where required by law (e.g., financial transaction records for tax compliance)
• Backup copies may persist for up to 90 days in our disaster-recovery systems before permanent deletion

7. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR (EU / UK Users)

If you are located in the European Union or United Kingdom, you have the rights described above under the General Data Protection Regulation (GDPR). Our legal bases for processing include: performance of a contract (operating the Service), legitimate interests (security and fraud prevention), legal obligation, and consent (for optional features). You may lodge a complaint with your local supervisory authority if you believe we have violated your rights.

CCPA / CPRA (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information we have collected (subject to exceptions)
• Opt out of the sale of personal information — we do not sell your data
• Non-discrimination for exercising your privacy rights
• Correct inaccurate personal information (CPRA)
• Limit use of sensitive personal information (CPRA)

To submit a CCPA request, contact us at privacy@ownmrk.com or through the in-app Privacy Settings.

8. Children's Privacy

OWNMRK is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child under the applicable age has provided us with personal information, contact us at privacy@ownmrk.com and we will delete it promptly.

9. International Data Transfers

OWNMRK LLC is based in the United States. If you access the Service from outside the U.S., your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. Where required by applicable law (e.g., GDPR), we implement appropriate safeguards such as Standard Contractual Clauses for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or email at least 30 days before the change takes effect. Continued use of the Service after the effective date constitutes your acceptance of the revised policy. The "Last Updated" date at the top of this page reflects the most recent revision.