SmartCollect privacy policy
Last updated October 8, 2026
Effective 8 October 2026. This policy covers SmartCollect: AI Collections (com.tudiapps.smartcollect), published by Gurmehub under the TudiApps brand. Our general privacy policy covers the website and our other apps.
In short: SmartCollect needs an account so your collections sync. We store what you save on our own server and use Google Gemini to read the links and photos you save and to answer your questions. Free users can choose to watch a rewarded ad for extra AI analyses; only then does Google’s ad SDK load. We use Firebase to see which features are used and to report crashes. We never sell your data.
What we collect
- Account: your name, email address and password (stored only as a hash). If you sign in with Google or Apple, we receive your name and email address from them (with Apple this can be a private relay address).
- What you save: links you save or share into the app, titles, notes, tags, custom field values, collections and the photos you upload.
- AI chat: the messages you send to the in-app assistant and its replies.
- Collaboration and Duo: the email addresses of people you invite to a collection or add to your Duo plan.
- Purchases: for subscriptions, Google Play gives us a purchase token and the subscription status. We never see your card details.
- Usage and crashes: which features you use (for example “item saved”, “AI analysis requested”, “paywall viewed”), the screens you open, your account ID, your plan, and crash reports with device model and OS version.
- Link opens: when you open a saved link from the app or a shared page, we record that it was opened, from where (app or web) and which store it led to, if any.
- Ads (free plan, only if you choose to watch one): Google AdMob collects your device’s advertising ID, IP address and device information to show the ad. We receive only a confirmation that you watched it.
- Device: a push notification token, so we can tell you when an item has been analyzed.
- Server logs: IP address and request details, kept for security and debugging.
We do not collect your device location or contacts. Places shown on the map come from the addresses in what you save, not from your phone.
What leaves the phone, and where
| What | Where to | Why |
|---|---|---|
| Your account and everything you save | Our server at Hetzner Online GmbH in Finland (EU) | To store and sync your collections |
| The page of a link you save, the photos you ask to analyze, and your chat messages with the relevant items | Google Gemini API (Google LLC) | To extract details such as title, price or address, and to answer your questions |
| The public video and caption of a TikTok or Instagram post you save | Downloaded by our server from that platform, sent to Google Gemini, then deleted | To read what is said and shown in the video. We do not keep the video |
| The audio of a podcast episode you save from Apple Podcasts or Spotify (the first minutes) | Found through the Apple iTunes Search API, downloaded by our server from the publisher’s feed, uploaded to Google Gemini, then deleted | To hear the places, books, films and products mentioned. We do not keep the audio |
| The link you save (YouTube, TikTok, Vimeo, Spotify, X and Pinterest) | That platform’s public oEmbed service | To read the title and preview of the post |
| The title (and year) of a film, series or book you save | Wikidata (Wikimedia Foundation), TVmaze, Open Library (Internet Archive) | To add the poster, year, platform or author. No account details are sent |
| Photos you upload, and database backups | Cloudflare R2 (Cloudflare, Inc.), in a private bucket | Storage. Photos are served only through short-lived signed links |
| Usage events, account ID, plan, crash reports | Firebase Analytics and Crashlytics (Google LLC) | To see which features are used and to fix crashes |
| Advertising ID, IP address, device information (only when you choose to watch an ad) | Google AdMob (Google LLC) | To show the rewarded ad and prevent fraud |
| Push notification token | Firebase Cloud Messaging (Google LLC) | To deliver notifications |
| Name and email address when you sign in with Google or Apple | Google LLC or Apple Inc. | To sign you in |
| Purchase token | Google Play (Google LLC) | To verify and manage your subscription |
| Map tile requests (your IP address and the map area) | Mapbox, Inc. | Only when you open a map view |
These providers only receive what they need for that task.
Usage analytics
SmartCollect uses Firebase Analytics and Crashlytics in release builds. They record which features are used, which screens are opened and the crashes that happen, together with your account ID and plan. We use this only to understand how the app is used and to fix problems: it is not used for advertising, not shared with AdMob and not combined with data from other apps. If you do not want your usage counted, write to [email protected] and we will delete the analytics data linked to your account ID.
Ads and consent
SmartCollect shows no banner or pop-up ads. On the free plan you can choose to watch a rewarded video ad to get more AI analyses; nothing ad-related loads until you tap that button. In the EEA, the UK and Switzerland, Google’s consent form asks you first: you can consent, decline or choose purposes, and change your choice later from the same screen. With your consent ads may be personalised; without it Google shows non-personalised ads. You can reset or delete your advertising ID in your phone’s settings (on Android: Settings → Google → Ads).
Store links and affiliate programs
When you open a saved link, it goes through our server (smartcollect.tudiapps.com/go/…) so we can count it. For some stores (such as Amazon, Booking.com, Trendyol and Hepsiburada) we may add our affiliate code to the link. The price you pay does not change; we may earn a commission. Once you are on the store’s site, its own privacy policy and cookies apply.
Sharing
Collections are private by default. If you invite people to a collection, they can see its contents with the permission you choose. If you turn on a share link, anyone with the link can view that collection; if you make a collection public, search engines may index its page. You can turn sharing off at any time.
We do not sell your data or share it with advertisers. Apart from what Google AdMob collects when you choose to watch an ad, nothing you save is used for advertising.
Keeping and deleting your data
We keep your data while your account exists. You can delete your account at any time in the app (Profile → Delete account) or by following the steps on the account deletion page. This permanently removes your profile, collections, items, photos, chat history and device tokens. You can also delete single items and collections in the app. Database backups are kept for 14 days. Firebase keeps usage events and crash reports for a limited time, at most 14 months.
Security
All traffic uses HTTPS. Photos are stored in a private bucket and served only through short-lived signed links. Ad rewards are granted only after Google’s signed server confirmation.
Children
SmartCollect is meant for adults and is not directed to children. We do not knowingly collect data from children.
Your rights
Depending on where you live (including under the GDPR and KVKK), you can ask to access, correct, export or delete your data, and you can withdraw consent at any time. Write to [email protected].
Changes
When this policy changes we update this page and the date at the top.