Privacy Policy

INFINITY SRL (trading as Infinity Milano) is the data controller.

• Via Paolo da Cannobio, 5 — 20122 Milano (MI), Italy
• VAT / P.IVA 12832170968
• Email [email protected]
• Telephone +39 328 4740006

Because we are established in Italy, we process personal data under the EU General Data Protection Regulation (GDPR).

We do not ask for, and the app does not collect, your contacts, calendar, SMS, call logs, microphone recordings or health data.

If you enable biometric sign-in, the check is performed by your own device — Android biometrics, Face ID / Touch ID, or Windows Hello — which simply tells the app whether the unlock succeeded. Your face or fingerprint data stays in your device's secure hardware.

We never receive, transmit or store face images, fingerprints or biometric templates.

You can remove a biometric enrolment at any time from the app's security settings, or by revoking it in your device settings.

Where the app or site lets you pay online, the payment is completed by a licensed payment provider. Card numbers are entered on the provider's own secure page and are never sent to, or stored on, our servers. We keep only the outcome of the payment and a reference, so we can match it to your order.

We use a small number of service providers, each only for the purpose shown:

• Our jewellery management software — the register that holds our catalogue and issues quotations, proformas and invoices. Your customer record and documents are created there.
• Hosting and storage — our application servers and DigitalOcean Spaces object storage, which hold the database and product images.
• Push notifications — Google Firebase Cloud Messaging and Expo, which deliver the message to your device.
• In-app assistant — OpenRouter, which routes your assistant messages to a language model in order to generate the answer. Please do not enter information in the assistant that you would not want processed by a third party.
• Payment provider — where an online payment is offered, as described above.

These providers act on our instructions under a data-processing agreement. Where a provider processes data outside the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.

We do not sell your personal data, and we do not share it for third-party advertising or profiling.

• Account details — while your account is open, and then up to 12 months.
• Orders, proformas and invoices — 10 years, as Italian tax and accounting law requires.
• Notification tokens — until you disable notifications or uninstall the app.
• Camera images used for a feature — kept only as long as that feature needs them.
• Technical logs — normally 90 days.

Under the GDPR you may ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete your data, where we are not required to keep it;
• restrict or object to a particular use;
• transfer your data to another provider;
• withdraw a consent you gave — for notifications, camera or location.

Write to [email protected] and we will reply within one month. You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

You can ask us to close your account and delete your data by emailing [email protected] from the address registered to the account, or from the account screen in the app where that option is available. We will confirm once it is done. Documents we must retain by law (invoices and related records) are kept for the period stated above and nothing more is done with them.

Traffic between the app and our servers is encrypted with HTTPS. Access to the database and to the admin panel is restricted to named accounts, passwords are stored only as salted hashes, and sessions are signed. No system is perfectly secure, but if a breach ever affected your rights we will notify you and the supervisory authority as the GDPR requires.

The app is intended for adults purchasing jewellery and is not directed at children under 16. We do not knowingly collect their data; if you believe a child has given us personal data, contact us and we will remove it.

If we change how we use personal data we will update this page and move the “last updated” date. Where the change is significant we will also tell you in the app.

INFINITY SRL, Via Paolo da Cannobio, 5 — 20122 Milano (MI), Italy
[email protected] · +39 328 4740006