JUSTYX LLC

Privacy Policy

Justyx LLC — justyxco.com, SwapHub, and FamilyHub (Family Add)

1. Introduction and Scope

Justyx LLC (“Justyx,” “we,” “us,” or “our”) is an Arizona limited liability company with its principal place of business at 4539 N 22nd St, Ste N, Phoenix, Arizona 85016. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you visit our website at justyxco.com (the “Site”), use our mobile and web applications, including SwapHub (a marketplace cross-listing application for resellers) and FamilyHub, also referred to as “Family Add” (a family organization application), purchase subscriptions or services from us, or otherwise interact with us (collectively, the “Services”).

This Privacy Policy applies to all users of the Services, whether accessed through the Site, the Apple App Store, Google Play, or any other distribution channel. HQ Console, our web app at hq.justyxco.com, has its own Privacy Policy and Terms of Service published at hq.justyxco.com/privacy and hq.justyxco.com/terms, which govern that app; where this policy and the HQ Console policy differ, the HQ Console policy applies to HQ Console. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services. Capitalized terms not defined here have the meanings given in our Terms of Service.

This Privacy Policy does not apply to third-party websites, applications, or services that we do not control, including marketplaces such as eBay and Facebook Marketplace to which SwapHub may cross-list your items, and payment platforms operated by Stripe, Apple, or Google. Those services are governed by their own privacy policies, and we encourage you to review them.

2. Information We Collect

2.1 Information You Provide to Us

Account and contact information. When you register for an account, we collect information such as your name, email address, username, password (stored in hashed form), and, if you choose to provide it, a phone number and profile photo.

Subscription and transaction information. When you purchase a subscription or other service, we collect information about the plan you selected, transaction amounts, dates, and billing history. Payment card details are collected and processed directly by our payment processor (Stripe) or by Apple or Google for in-app purchases; we do not receive or store full payment card numbers.

SwapHub content. When you use SwapHub, we collect the listing content you create or import, including item titles, descriptions, photographs, pricing, inventory quantities, category and condition data, and information about the marketplace accounts you choose to connect (such as eBay or Facebook Marketplace account identifiers and authorization tokens).

FamilyHub content. When you use FamilyHub / Family Add, we collect the content you and members of your family group choose to enter, which may include calendar events, tasks and chores, lists, notes, reminders, and profile information for family members. Because FamilyHub is designed for family organization, a parent or guardian may choose to enter information about their children (for example, a child’s first name, age or birthday, schedule, or assigned tasks). Section 8 (Children’s Privacy) describes how we handle children’s information.

Communications. If you contact us (for example, at support@justyxco.com), we collect the contents of your message, your contact details, and any attachments you provide. If you engage us for freelance software development or consulting services, we collect the information reasonably necessary to scope, contract for, and deliver those services.

2.2 Information Collected Automatically

When you use the Services, we and our service providers automatically collect certain information, including: device information (device model, operating system and version, browser type, language settings, and unique device or app-instance identifiers); log and usage information (IP address, access dates and times, pages and screens viewed, features used, links clicked, crash reports, and other diagnostic data); and approximate location inferred from your IP address. We do not collect precise GPS location.

2.3 Cookies and Similar Technologies

The Site runs no advertising trackers. A cookie banner appears on your first visit; whichever choice you make, the Site stores a single value in your browser’s local storage (justyx.consent) so it can remember that choice for 12 months. If you choose Accept all, the Site may load privacy-focused analytics that report aggregate page counts without cross-site tracking; no analytics are installed today, and this Policy and the Cookie Policy at justyxco.com/cookies will name any tool before it goes live. You can change your choice at any time from the Cookie settings link in the footer of every page. HQ Console (hq.justyxco.com) uses your browser’s local storage to keep you signed in and to remember your preferences on your device; it sets no cookies either and has its own Privacy Policy at hq.justyxco.com/privacy. The only usage statistics we receive are the aggregated, non-identifying reports provided by the Apple App Store, Google Play, and our hosting provider’s server logs.

2.4 Information from Third Parties

If you connect a third-party marketplace or sign in using a third-party login provider, we receive information from that third party as authorized by you and by that platform’s settings, such as your account identifier, listing data, order or sales data needed to synchronize your inventory, and basic profile information. We may also receive limited transaction confirmations from Apple, Google, or Stripe to provision your subscription.

3. How We Use Information

We use the information we collect for the following purposes:

To provide the Services — creating and administering accounts, hosting and syncing your content, cross-listing items to marketplaces you connect, operating family groups and shared calendars, processing subscriptions and payments, and providing customer support.

To operate, maintain, and improve the Services — monitoring performance, debugging and fixing errors, analyzing usage trends, and developing new features.

To communicate with you — sending service announcements, renewal and billing notices, security alerts, responses to support requests, and, where permitted by law and subject to your opt-out rights, marketing communications about our products.

For safety, security, and fraud prevention — verifying accounts, detecting and preventing fraudulent transactions, abuse, and violations of our Terms of Service, and protecting the rights, property, and safety of Justyx, our users, and others.

For legal compliance — complying with applicable laws, regulations, legal processes, and enforceable governmental requests, including tax and accounting obligations.

We do not use personal information for automated decision-making that produces legal or similarly significant effects about you, and we do not use the contents of FamilyHub family data for advertising purposes.

4. Legal Bases for Processing (EEA/UK Users)

The General Data Protection Regulation (“GDPR”) and UK GDPR apply to us only if and to the extent we offer the Services to, or monitor the behavior of, individuals in the European Economic Area or the United Kingdom. If and to the extent the GDPR or UK GDPR applies to our processing of your personal data, we process it on the following legal bases: (a) performance of a contract, where processing is necessary to provide the Services you have requested; (b) legitimate interests, such as securing and improving the Services, preventing fraud, and communicating with users, where those interests are not overridden by your rights; (c) consent, for example for optional marketing communications or non-essential cookies, which you may withdraw at any time; and (d) legal obligation, where processing is required by law.

5. How We Share Information

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising. We share personal information only in the following circumstances:

Service providers (processors). We use third parties to perform services on our behalf under contractual confidentiality and data-protection obligations, including: Stripe, Inc. (payment processing); Netlify, Inc. (website and web application hosting, serverless functions, and form submissions); Porkbun LLC (domain registration and DNS); Supabase (application database, authentication, and backend hosting); Apple App Store Connect and Google Play Console (usage analytics and crash reporting); Resend (transactional email) and the Apple Push Notification service and Firebase Cloud Messaging (push notifications) (transactional email and push notifications); and Apple Inc. and Google LLC (app distribution and in-app purchase processing).

Marketplaces and integrations you direct. When you instruct SwapHub to cross-list an item, we transmit your listing content and related data to the marketplace you selected (for example, eBay or Facebook Marketplace). Once transmitted, that data is governed by the receiving platform’s terms and privacy policy.

Within your family group. Content you add to a FamilyHub family group is visible to the other members of that group according to the group’s settings. Please consider this before adding sensitive information.

Legal and safety disclosures. We may disclose information if we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is reasonably necessary to enforce our agreements, protect the security or integrity of the Services, or protect the rights, property, or safety of Justyx, our users, or the public.

Business transfers. If Justyx is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of its assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy or successor terms providing comparable protection.

With your consent. We may share information for any other purpose disclosed to you with your consent.

6. Third-Party Platforms and Connected Accounts

SwapHub interoperates with third-party marketplaces at your direction. You are responsible for the accounts you connect, and your use of those marketplaces is governed by their own terms and privacy policies (for example, the eBay User Agreement and Privacy Notice, and the Meta Terms of Service and Privacy Policy). Disconnecting a marketplace from SwapHub stops future synchronization but does not delete data already held by that marketplace; you must manage that data directly with the marketplace.

Where we access third-party APIs (including any Google APIs), our use of information received from those APIs will comply with the applicable platform policies, including, where applicable, the Google API Services User Data Policy, including its Limited Use requirements.

7. App Store Privacy Disclosures (Apple and Google)

Consistent with Apple App Store privacy “nutrition label” requirements and the Google Play Data Safety program, we disclose that our apps may collect the following categories of data, which may be linked to your identity: contact information (name, email address); user content (listings, photos, calendars, tasks, notes, and support messages); identifiers (user ID, device ID); purchase history (subscription status and transaction history); usage data (product interaction and app activity); and diagnostics (crash logs and performance data). We do not collect data for third-party advertising or tracking as defined by Apple’s App Tracking Transparency framework, and we do not sell app data.

In-app deletion. You can delete your account and associated personal data directly within each app (Settings → Account → Delete Account) or by emailing support@justyxco.com from the email address associated with your account. Account deletion initiated in-app satisfies the account-deletion mechanisms required by Apple and Google, and we will complete deletion within the timeframes described in Section 12 (Data Retention).

8. Children’s Privacy (COPPA)

The Site, SwapHub, and account registration for the Services are intended for users who are at least 18 years of age (or the age of majority in their jurisdiction) and are not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent, as required by the Children’s Online Privacy Protection Act (“COPPA”) and its implementing rule, as amended with full compliance required by April 22, 2026 (the “COPPA Rule”). In this section, “personal information” has the meaning given in the amended COPPA Rule, which includes, among other things, biometric identifiers, government-issued identifiers, telephone numbers, photographs and audio files containing a child’s image or voice, and information sufficient to identify a child’s physical location.

FamilyHub child profiles. FamilyHub allows a parent or legal guardian who holds the account to create profiles for their children and to enter information about them (such as a first name, age, schedule, or task assignments). This information is provided by, and remains under the control of, the parent or guardian.

Child access and verifiable parental consent. If and to the extent FamilyHub permits a child under 13 to directly access the app under a child profile (for example, to view chores or check off tasks), we will first obtain verifiable parental consent from the child’s parent or legal guardian using a method reasonably calculated in light of available technology to ensure the person providing consent is the child’s parent, such as a credit or debit card verification transaction, or a signed consent form returned by email, each as permitted under the amended COPPA Rule. Before obtaining consent, we will provide the parent with direct notice of the information we collect from the child, how we use it, and our disclosure practices. We collect from child profiles only the information reasonably necessary for the child to use the relevant features, and we do not condition a child’s participation on the disclosure of more personal information than is reasonably necessary.

Parental rights. A parent or guardian may at any time: (a) review the personal information collected from or about their child; (b) direct us to delete that information; and (c) refuse to permit further collection or use of the child’s information, by using in-app controls or contacting us at support@justyxco.com. We do not disclose children’s personal information to third parties except for service providers necessary to operate the Services (such as our database host) and as required by law; we do not use children’s personal information for marketing or advertising of any kind. As required by the amended COPPA Rule, we will not disclose children’s personal information to third parties for purposes that are not integral to providing the Services without first obtaining separate verifiable parental consent for that disclosure.

Deletion upon discovery. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information as quickly as reasonably practicable. If you believe a child under 13 has provided us personal information without consent, please contact us at support@justyxco.com. As required by the amended COPPA Rule, we maintain a written information security program and a written data retention policy covering children’s personal information; children’s personal information is retained only for as long as reasonably necessary for the specific purpose for which it was collected and is never retained indefinitely (see Sections 12 and 13).

9. Your Privacy Rights and Choices

Regardless of where you live, we offer all users the following choices:

Access and correction. You may access and update most account information directly in the app or Site settings, or by contacting us.

Deletion. You may delete your account and associated personal data in-app (Settings → Account → Delete Account) or by emailing support@justyxco.com. See Section 12 for retention timelines.

Marketing opt-out. You may opt out of marketing emails by using the unsubscribe link in any marketing message or contacting us. We will continue to send transactional and service messages (such as billing and renewal notices).

Push notifications. You may disable push notifications in your device settings.

Cookies. You can accept or decline non-essential cookies and analytics on the Site through the cookie banner and the Cookie settings link in the footer (see the Cookie Policy at justyxco.com/cookies). In the apps, you may manage cookies through your browser or device settings.

We will respond to rights requests within the time required by applicable law. We may need to verify your identity before acting on a request, and we may decline requests that are excessive, unfounded, or that we are legally permitted or required to refuse; if we decline, we will explain why.

10. California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the rest of this Privacy Policy. Justyx does not currently meet any of the thresholds that make a company a covered “business” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”) — annual gross revenue above the inflation-adjusted statutory threshold (currently $26,625,000); buying, selling, or sharing the personal information of 100,000 or more California consumers or households; or deriving 50% or more of annual revenue from selling or sharing personal information — and the CCPA/CPRA therefore does not presently impose obligations on us. We nonetheless voluntarily extend the rights described below to California residents as a matter of policy, and if we meet a CCPA/CPRA threshold in the future, we will comply with the statute in full. For transparency: in the preceding 12 months, we have collected the following categories of personal information described in the CCPA: identifiers (name, email, IP address, account and device identifiers); customer records (billing history; payment details are held by our processors); commercial information (subscriptions and transactions); internet or other electronic network activity (usage and log data); audio/visual information (photos you upload); professional information (if you engage our consulting services); and inferences limited to service personalization. The sources, purposes, and recipients for each category are described in Sections 2, 3, and 5.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising, and we have not done either in the preceding 12 months. We do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes requiring a right to limit under the CCPA/CPRA.

Subject to applicable exceptions, California residents may — on the voluntary basis described above or, if we become a covered business, as a matter of statutory right — exercise the following rights: (a) know the categories and specific pieces of personal information we have collected, and the categories of sources, purposes, and recipients; (b) delete personal information we collected from you; (c) correct inaccurate personal information; (d) opt out of sale or sharing (not applicable, as we do neither); and (e) non-discrimination — we will not discriminate against you for exercising your rights. You may exercise these rights by emailing support@justyxco.com with the subject line “California Privacy Request” or by using the in-app deletion tools. You may designate an authorized agent to submit requests on your behalf; we will require proof of the agent’s authority and may still require you to verify your identity directly.

11. Other U.S. State Privacy Rights

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana) may have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, or profiling. We do not engage in targeted advertising, sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects. You may exercise applicable rights using the methods in Section 10, and where required by your state’s law, you may appeal a refusal by replying to our decision with the subject line “Privacy Appeal.”

Texas and Nebraska. Residents of Texas (Texas Data Privacy and Security Act) and Nebraska (Nebraska Data Privacy Act) have the rights described above, including the right to appeal a refusal. We do not sell personal data or process it for targeted advertising, so no opt-out is required; if that changes we will update this Policy and honor opt-out requests, including universal opt-out signals where the law requires.

Washington consumer health data. Justyx does not collect “consumer health data” as defined by the Washington My Health My Data Act (or the similar Nevada and Connecticut laws) through the Services: our apps do not ask for, infer, or process information about your health conditions, treatments, reproductive or sexual health, biometrics, or precise location for health purposes. HQ Console lets you import bank transactions and scan bills of your choosing; if you choose to add a medical bill, that record is treated as your financial data, is never used to infer anything about your health, and is covered by the HQ Console Privacy Policy. If a future Justyx product does collect such data, we will publish a separate Consumer Health Data Privacy Policy before collecting it and obtain any consent the law requires.

12. Website Features: Justyx Insider and Community App Listings

The Site is hosted by Netlify, Inc., which processes Site visitor data (server logs and the contents of any form you submit on the Site) as our service provider under its own privacy policy. Non-essential cookies and analytics on the Site are used only with your consent, which you can give or withdraw through the cookie banner and the Cookie settings link in the footer; see the Cookie Policy at justyxco.com/cookies.

Justyx Insider. If you join Justyx Insider (a free membership), we collect your name and email address and, if you choose to provide them, your interests and the beta programs you opt into. We use this information to deliver early-access invitations, development updates, feature polls, and — only if you opt in — offers from developers of Community Listings. We share a member’s email with a listing developer only when the member accepts that developer’s beta invitation or deal, and only for that purpose. You can leave Justyx Insider at any time from your account or by emailing support@justyxco.com; we will delete your membership data except where we must keep it for legal or accounting reasons.

Community Listings and App Spotlight. If you purchase a Community Listing or App Spotlight, we collect your business contact details, the listing content you submit (which is published on the Site by design), and your payment information. Community Listings are currently free. If we introduce paid listing tiers, payments will be processed by Stripe; we would then receive confirmation of payment and the last four digits and card type, not the full card number. We keep listing purchaser records for the life of the listing and for the period required for tax and accounting. Content you submit for a listing is public and is displayed as described in Section 21 of our Terms of Service.

13. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Services, and thereafter only as long as reasonably necessary for legitimate business purposes, such as maintaining financial and tax records, resolving disputes, enforcing agreements, and complying with legal obligations. As a general rule: account and content data are deleted or de-identified within 30 days after account deletion; residual copies in encrypted backups are overwritten on a rolling basis within 35 days (backups are taken daily and retained on a rolling 35-day cycle) days; and transaction records are retained for up to seven years as required for tax and accounting purposes. Children’s personal information is retained only as long as reasonably necessary to fulfill the specific purpose for which it was collected. We maintain a written data retention policy consistent with these practices, and we do not retain personal information — including children’s personal information — indefinitely.

14. Data Security

We maintain a written information security program that implements administrative, technical, and physical safeguards designed to protect personal information (including children’s personal information), including encryption of data in transit (TLS) and at rest, hashed passwords, role-based access controls and row-level security in our database, least-privilege access for the sole member and any contractors, and reliance on reputable infrastructure providers (Netlify, Supabase, Stripe) that maintain their own security certifications. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach of security affecting your personal information, we will notify you and the relevant authorities as required by applicable law, including Arizona’s data breach notification statute (A.R.S. § 18-552), which generally requires notification within forty-five (45) days of determining that a breach has occurred.

15. International Data Transfers

We are based in the United States, and the Services are hosted on infrastructure located in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. Where required for transfers of EEA, UK, or Swiss personal data, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, our processors’ participation in the EU-U.S. Data Privacy Framework.

16. Do Not Track

Some browsers transmit “Do Not Track” signals. Because there is no common standard for interpreting these signals, the Services do not currently respond to them. To the extent required by applicable law, we honor opt-out preference signals such as the Global Privacy Control as a valid request to opt out of any sale or sharing (which, as stated above, we do not engage in).

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address associated with your account, by in-app notice, or by prominent notice on the Site at least 14 days before the changes take effect, and we will update the “Last Updated” date above. If a change materially affects how we handle previously collected children’s personal information, we will obtain fresh verifiable parental consent where required by COPPA. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms.

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Justyx LLC, Attn: Privacy — Kiyah Abney, 4539 N 22nd St, Ste N, Phoenix, Arizona 85016-4639

Email: support@justyxco.com (subject line “Privacy Request”)

Website: justyxco.com

EEA/UK users may also lodge a complaint with their local supervisory authority. California residents may contact us using the methods above for any California privacy request.

All legal pages