Pawndit
DATA AND PRIVACY · OCTOBER 17, 2026

Privacy policy

Pawndit is operated by Second Wind Limited. This policy describes the intended production service. The app is in preparation; providers and data-processing regions must be confirmed before public launch.

What you choose to provide

We process selected item photos, your notes, account identity, research preferences, reports and feedback. We do not request contacts or precise location. The app prepares photos on your device before upload; avoid including people, addresses or unnecessary serial numbers.

Why and where it is processed

Photos and selected text are sent to cloud AI services to identify visible features and prepare research. The implementation uses Firebase for identity, Cloudflare Workers for the API, D1 for private records, R2 for private photographs and Queues for background research, Alibaba Cloud Model Studio for AI analysis and referenced research, and RevenueCat with Apple or Google for subscription state. We do not send private notes, photos or account IDs in web-search queries.

Private access and sharing

Photos and reports belong to your account. Short-lived photo links expire within five minutes. Exported files are shared only when you choose a destination through your device; files you already exported cannot be recalled.

Retention and deletion

Saved photographs and reports remain until you delete them. Unfinished uploads become eligible for automatic cleanup after their ten-minute upload window. Deleting an item stops new app access immediately; background cleanup removes its photos and records and retries after a failure. Deleting your account blocks new access and starts deletion of the account identity, photos and private records. Cleanup runs periodically, but completion can take longer after a service failure. A minimal hash of the deleted account identifier is retained to prevent delayed jobs from restoring deleted data. An already issued image link may remain valid until it expires or the object is deleted. Necessary billing and security records may be retained for applicable obligations. Backup and AI-provider retention must be disclosed accurately when production settings are enabled.

Subscriptions

Stores and RevenueCat process purchases. Pawndit does not receive your complete payment card details. Deleting an account does not itself cancel a store subscription.

Your choices

Use Settings to request account deletion, remove an item, change preferences, or contact support. Do not send sensitive images or payment credentials to support.

[email protected]