Privacy

GearSafe Privacy Policy

Effective date: October 16, 2026

GearSafe is an app for documenting music equipment: photos, serial numbers, receipts, values and PDF reports. It is operated by Quantum Nonsense LLC ("GearSafe", "we", "us"). This policy explains what GearSafe collects, why, who processes it for us, how long we keep it, and the choices you have.

Questions or requests: support@yourgearsafe.com.

The short version

• You put information into GearSafe so it can keep a record of your gear. We use it to run the app for you, and for nothing else.
• We do not sell your information, show ads, or track you across other companies' apps or websites. GearSafe contains no analytics or advertising SDKs.
• Full serial numbers are encrypted on our servers. The app shows only the last four characters.
• Nothing about you or your gear goes to an insurance agent unless you choose one and agree on the sharing screen.
• You can export a copy of your data, or delete your account and everything in it, from the app: More → Your data.

What we collect

Account information

• Your name and email address, when you create an account.
• Your phone number, only if you add it under More → Profile.
• Your password is handled by our authentication provider (Supabase Auth) and stored only as a salted hash. We never see it.

Your gear records

• Item details you enter or confirm, such as category, brand, model, barcode (GTIN/UPC/EAN) and condition, and any other product facts recorded with the item (variant, part number, year or country of manufacture, status such as lost or stolen, notes).
• Serial numbers. The full serial number is encrypted with AES-256-GCM before it is stored; the last four characters are stored separately so the app can show them.
• The item's current (market) value and replacement value, where a suggested value came from and when, and its purchase date and price if recorded.
• Names of the places where you keep gear (for example "Home studio" or "Storage unit"). GearSafe does not use your device's location.
• Photos and documents you add: photos of equipment, serial plates and receipts, with their file names.
• Reports you build: the title, a snapshot of the items in the report at that moment, the PDF itself and a SHA-256 fingerprint of the file.

Settings and consent records

• Notification preferences, and whether you have turned on "Help improve the gear catalog" (and when).
• If you share your details with an insurance agent: the agent you chose, your ZIP code, what you chose to share, the version of the consent text you agreed to, a fingerprint of that text, and the time.
• Private feedback you choose to give about an agent you shared with (a star rating, tags and a comment). Only GearSafe sees the comment and who wrote it.

Device and service information

• If you allow notifications: your device's push token, its platform (iOS) and the device name iOS reports, so we can deliver notifications to that device.
• A short-lived record of which server features your account used and when (kept 7 days), to enforce fair-use limits.
• Our hosting and sign-in provider (Supabase) records the IP address and device details of sign-ins and requests, for security and reliability. GearSafe's own code does not store your IP address.

If you list yourself as an insurance agent

• Your National Producer Number (NPN), licence state, licence number, lines of authority and expiry date; your agency name, service area and the public email, phone and website you choose to publish; the version and time of the agent terms you accepted; and the date GearSafe checked your licence against public records.

How we use it

• To provide the app: store your records, show them back to you, build your reports, find suggested values and send the notifications you asked for.
• To keep the service secure and working: authentication, fair-use limits, preventing abuse and fixing problems.
• To carry out a sharing you started with an insurance agent, only as described on the sharing screen.
• To respond when you contact us.

We do not use your information for advertising, we do not sell or rent it, and we do not share it for cross-context behavioural advertising. We do not build profiles about you.

Who processes it for us

We use the service providers below. Each receives only what it needs for the task described.

Connected but switched off today: an email delivery provider (it would receive your email address and the message text), GS1 (barcode lookup; it would receive only the barcode) and Reverb (used-market prices; it would receive only the brand and model). We will update this policy before turning any of them on.

Your account data, photos and reports are stored with Supabase, on Amazon Web Services infrastructure. These providers may process data in the United States and in other countries where they operate.

Insurance agents

GearSafe is not an insurance company, agent, broker or producer, and does not recommend agents, carriers, coverage or amounts. GearSafe includes an optional directory of licensed agents you can choose to share your records with. Nothing goes to an agent unless you open that agent's listing, choose what to share and agree on the sharing screen. Sharing is not yet available: it opens after a regulatory review.

When sharing is available and you use it:

• The agent receives your name, email, phone and ZIP code, and, only if you switch them on, your report (with serial numbers shown as the last four characters), full serial numbers on request, and your photos.
• The agent can open what you shared for 90 days, or until you revoke it under Reports → Shared with agents. At the end of that time, or when you revoke, the shared copy is removed from what the agent can see in GearSafe. Anything the agent already downloaded stays with them and we cannot recall it.
• You can see a record of each time the agent viewed your details, your report or your full serial numbers.

How long we keep it

• Your account, gear records, photos, documents and reports: until you delete your account. You can remove individual photos and archive items in the app; archived items stay in your account until you delete it.
• Photos sent for equipment identification: 30 days. Identification sessions: 90 days.
• Suggested-value lookups cached for everyone (keyed by product, with no account information): 7 days.
• Fair-use records: 7 days. In-app notifications: 90 days. Push tokens: 30 days after they are switched off.
• Details shared with an agent: until the 90-day access ends or you revoke it, when the shared copy is redacted.
• Uploads that never finished: 24 hours.

Deleting your account and exporting your data

In the app, go to More → Your data.

• Export my data creates a file of your account information and records that you can save or send anywhere. Full serial numbers are not included, and photos and PDFs stay in your account rather than being copied into the file.
• Delete my account permanently removes your account, gear records, photos, documents, reports, notification settings and sharing records, and the files in storage. This cannot be undone. A minimal record that an account was deleted, and when, is kept for security and accountability. If you were a listed agent, musicians who shared with you keep their own record of when their details were viewed. Sign-in security logs kept by our hosting provider are deleted on that provider's own schedule.

You can also email support@yourgearsafe.com to ask for a copy, a correction or deletion. We will confirm your identity before acting and answer within 30 days.

Security

Connections to GearSafe use HTTPS. Data is stored in private storage that only your account can read, enforced by database access rules on every table. Full serial numbers are encrypted at rest with AES-256-GCM. The app never shows them in full, even to you. GearSafe decrypts one only when an agent you chose to show full serials to asks for it (each of those views is recorded for you to see), or when you ask us for your own serials by email and we have confirmed your identity. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Age

GearSafe is for adults: you must be 18 or older to use it, and it is rated 18+ on the App Store. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us information, contact us and we will delete it.

Your rights

Depending on where you live, including under the Colorado Privacy Act and the California Consumer Privacy Act, you may have the right to know what we hold about you, to get a copy, to correct it, to delete it, and to opt out of sale, targeted advertising and profiling. We do none of those last three. Most of these rights you can use directly in the app; for the rest, including a copy of your full serial numbers (which the app and the export do not show), email support@yourgearsafe.com. We will not treat you differently for using them. If we decline a request you can appeal by replying to our answer, and in Colorado you can contact the Colorado Attorney General.

If you are in the European Economic Area, the United Kingdom or Switzerland

• Controller. Quantum Nonsense LLC is the controller of your personal data. Contact: support@yourgearsafe.com.
• Legal bases.
  • Contract: to provide the app you signed up for: your account, records, photos, reports, suggested values and the notifications you turn on.
  • Consent: push notifications, "Help improve the gear catalog", and each sharing with an insurance agent. You can withdraw consent at any time in the app; this does not affect what happened before.
  • Legitimate interests: keeping GearSafe secure, enforcing fair-use limits, preventing abuse and fixing problems. You can object to this; contact us.
  • Legal obligation: where the law requires us to keep or disclose information.
• International transfers. GearSafe is operated from the United States, and several of the providers above process data there. Where data leaves the EEA, the UK or Switzerland, we rely on the provider's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or on the European Commission's Standard Contractual Clauses (with the UK addendum), as each provider offers.
• Your rights. You can ask for access to your data, a copy in a portable format, correction, erasure, restriction of processing, and you can object to processing based on legitimate interests. Export and deletion are built into the app (More → Your data); for anything else, email us. You also have the right to complain to your local data protection authority.
• No automated decisions. GearSafe makes no decisions about you that have legal or similarly significant effects based only on automated processing.

Changes

If we change this policy we will update the effective date above, and for significant changes we will tell you in the app before they apply.

Contact

Quantum Nonsense LLC. Email: support@yourgearsafe.com.