Privacy Policy

Proposed effective date: November 2, 2026 · Version 2026-11-02.1

Draft for legal review. Not yet effective or published.

Trend Engineering, LLC (“Trend,” “we,” or “us”) provides the Trend shopping app and yourtrend.ing. This Policy describes personal information handled through the consumer app, our public website, and support. Contact hello@yourtrend.ing for privacy, account, or support requests. Retailers, sign-in providers, and payment services also have their own privacy policies for their independent services.

1. Information and how we use it

• Account and sign-in information. When you use an available Apple or Google sign-in option, the provider supplies an account identifier and the name and email information you authorize. Apple may supply a private relay email address. Supabase supports account authentication, sessions, and profiles. We use identifiers, session credentials, and an optional display name to authenticate you, maintain your account, and protect access. We do not receive your Apple or Google password.
• Shopping preferences and engagement. The app records products displayed, viewing time, product detail views, likes, dislikes, cart additions and removals, selected variants and quantities, timestamps, and your selected shopping audience and categories. Your initial favorite selections and later activity update a mathematical representation of your shopping preferences on your device. These records support recommendations, cart features, and continuity when reopening the app.
• Recommendation and search requests. To retrieve products, your device sends Trend your shopping audience and category, preference representations, recently seen or queued product identifiers, requested product or variant identifiers, and search text. These requests are associated with your authenticated account. Local learning does not mean that all shopping information stays on the phone. We use these inputs to return relevant products, avoid repeats, and service your requests. The app does not currently upload a separate raw engagement history for analytics.
• Checkout and orders. Where checkout is enabled for a merchant, Trend receives selected item identifiers and quantities and creates a merchant-specific checkout. We retain the merchant, selected products and variants, quantities, checkout and correlation identifiers, status and timestamps, a temporary checkout link, and, after merchant verification, the order identifier or number, total, currency, and confirmation time. We use this information to resume checkout, verify payments, prevent duplicate processing, and show order history.
• Checkout details entered with the merchant. Shopify, the retailer, and the payment services presented at checkout handle information such as your contact details, delivery address, billing information, and payment credentials. Trend's checkout records do not store payment-card numbers, security codes, shipping forms, or complete merchant notification payloads. Merchant notifications may contain additional personal information while being processed to verify an order.
• Technical information. Requests to Trend, authentication services, website infrastructure, retailer image hosts, and checkout services expose ordinary connection information such as IP address, device or browser information, request time, and error information. We and our providers use operational information for delivery, authentication, reliability, security, and abuse prevention.
• Communications. We receive the contact details, message content, attachments, and other information you send in support requests, privacy requests, recruiting inquiries, or other correspondence. We use them to respond, resolve problems, and maintain necessary records.

2. Storage on your device

The app stores account-scoped cart records, likes and dislikes, viewing history, preference inputs and representations, pending checkout state, and limited order displays on your device. It also caches product details and images so browsing remains responsive. Session credentials are stored in the iOS Keychain. Ordinary cart and preference records are not a cloud-synchronized cart or preference backup; another device may not have the same local state.

Cached images and product details can be evicted without deleting your durable cart and preference records. Signing out clears session credentials but does not itself erase all local account records or delete your Trend account. Removing the app does not request deletion of server-side account information or merchant records, and may not remove credentials retained by iOS. Device backup and restore behavior also depends on your Apple and device settings.

3. Providers and disclosures

We use the following services for the roles described here:

• Supabase: account authentication, profiles, database services, operational account records, and enabled checkout and order records.
• Apple and Google: the sign-in service you choose, including identity verification and authorization revocation. Choosing one does not give the other access to your Trend activity through a separate sign-in integration.
• Shopify, participating retailers, and their checkout/payment services: merchant checkout, payment processing, order confirmation, and the retailer's fulfillment and customer service. Specific payment options and providers are identified at that merchant's checkout.
• Retailer image hosts and content delivery networks: product image delivery. Your device contacts these hosts directly, exposing ordinary network request information. We do not attach your Trend API authorization token to image requests.
• GitHub Pages and Cloudflare: public website hosting and domain/network services.
• Google Workspace: business email, including support and privacy correspondence.

We limit service-provider access to what is needed for their work and require appropriate confidentiality, security, and data-protection terms. For information shared by our app, we require protection consistent with this Policy and applicable requirements. A retailer or provider's independent use of information you give directly to it is governed by its own notices and your relationship with it.

We may also disclose information at your direction; when reasonably necessary to comply with law, protect rights or safety, address fraud or security incidents, or enforce our agreements; and in a financing, acquisition, merger, or asset transfer subject to appropriate safeguards and required notices. Your private cart and engagement history are not public shopper profiles.

4. Advertising, tracking, and cookies

Trend does not currently sell personal information, share it for cross-context behavioral advertising, use advertising identifiers, or combine your shopping activity with other companies' data for targeted advertising. Recommendations within Trend use your shopping preferences to select products. The app does not currently include a separate third-party advertising or analytics SDK.

The public website does not use advertising pixels or nonessential analytics cookies. Authentication and merchant checkout services may use cookies or similar storage for sessions, security, preferences, and checkout operation. The retailer's checkout can also include its own integrations and consent choices; review its notice before submitting information. This Policy does not grant permission for new tracking. We will provide required disclosures and obtain required permission before introducing it.

5. Retention

We retain account and profile information while your account remains active and as needed to provide the service. On-device cart and preference records persist until removed through the app, account deletion on that device, or applicable device storage controls. Recent viewing history used to avoid repeat products expires after 72 hours; recommendation learning retains a bounded set of recent product contributions rather than an unlimited history. Temporary product and image caches are replaced or removed as storage limits and freshness rules apply.

Checkout links expire after 24 hours. Safely abandoned, unopened checkout attempts become eligible for deletion after 30 days. Opened or unresolved checkout attempts and compact confirmed order records remain available for recovery and order history until account deletion or another applicable retention requirement. A checkout link expiring does not mean that the order record is deleted.

Support, security, and legal records are retained only as needed for their purpose and applicable obligations. We may retain limited information when required by law or necessary for an active dispute or security matter, and will explain applicable exceptions in responding to a deletion request. Backup copies expire through the relevant provider's backup lifecycle. We do not promise a fixed backup-deletion period that our providers have not confirmed.

6. Your choices and account deletion

You can change your shopping selections and remove cart items and reactions using available app controls. Contact hello@yourtrend.ing to request access, correction, a copy, or deletion of your personal information, or to raise a concern. We may need to verify your identity, but will not request your Apple or Google password.

Deleting your Trend account removes your account and associated Trend-held personal information, including linked checkout records, except information we must lawfully retain. The account deletion process revokes the relevant sign-in authorization and clears local account records and session credentials on the device completing deletion. Information remaining on another device may require removal there. Revoking Apple or Google access separately does not by itself erase all Trend information.

Deleting your Trend account does not cancel an order, obtain a refund, or delete information held independently by a retailer, Shopify, Apple, Google, or a payment provider. Contact the relevant provider for its records and rights processes. We will inform you of any additional processing time or legally required retention that applies to your request.

Depending on your location, you may have rights to portability, restriction, objection, withdrawal of consent, appeal, and complaint to a competent regulator. We respond under applicable law and do not unlawfully discriminate against people exercising privacy rights. Withdrawal of consent applies prospectively and does not affect prior lawful processing.

7. Security, legal bases, and international processing

We use authenticated access, restricted database permissions, encrypted network connections, and device credential protections. Temporary checkout links are encrypted in Trend's database. No system is completely secure. Protect your device and provider accounts and contact us if you suspect unauthorized access.

Where applicable law requires a legal basis, we rely on providing the services you request, legitimate interests in operating and securing them, legal obligations, and consent where required. Providers may process information in the United States and other countries where they operate. Where required, we use appropriate contractual or other lawful safeguards for international transfers.

8. Children and changes

Trend is not directed to children under 13, and they may not create a Trend account. If you believe a child under 13 has provided personal information, contact us so we can investigate and remove it as required. Additional restrictions may apply under local law.

We update the effective date when this Policy changes. We provide additional notice and obtain consent when required before materially changing how we use information. Questions and requests should be sent to hello@yourtrend.ing.