WhatFig Privacy Policy
Effective date: August 12, 2026
This Privacy Policy explains how WHATFIG LLC (“WhatFig,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you use the WhatFig mobile application and related services.
Information We Collect
The information we collect depends on the features you use and may include:
Account information, such as your name, email address, profile image, sign-in provider, and account identifier.
Collection information, including sets and minifigures in your collection or wanted list, quantities, condition, imported CSV data, and related changes.
Images you capture or select for item identification. The app may send a cropped image or the full image, depending on what is needed to identify the item.
Auction Preloader content, including images and listing information you choose to submit through Seller Tools.
Giveaway notification requests, including seller or show name, giveaway description, show date, and show link.
Device and usage information, such as IP address, device model, operating system, language, timezone, country, app version, features used, session information, and diagnostics.
Notification information, including push tokens, permission and subscription status, and giveaway categories you select.
How We Use Information
We use information to create and secure accounts; synchronize collections across devices; identify LEGO items; provide auction-preparation tools; deliver requested notifications; respond to support and giveaway requests; operate, maintain, analyze, and improve the app; prevent fraud and abuse; and comply with legal obligations.
WhatFig does not use precise device location. Location sharing is disabled in our notification configuration.
Images and Uploaded Content
Images submitted through the scanner may be cropped or sent in full for identification. Images submitted only for identification are processed for that request and are not stored by WhatFig.
Images submitted through the Auction Preloader listing tool are stored for no longer than seven days and are then deleted by an automatic retention policy. Other listing information is retained only as needed to provide the preloader workflow and for the purposes described in this policy.
Please avoid including people, personal documents, addresses, or other unnecessary personal information in images.
How We Share Information
We share information only as needed to operate the app, provide a feature you request, protect WhatFig and its users, or comply with the law.
Service providers may process information on our behalf for hosting, authentication, analytics, security, notifications, form submission, and item identification. They may use information only as permitted by their agreements with us and their applicable privacy terms.
The app uses services provided by:
We may disclose information when required by law or when we reasonably believe disclosure is necessary to protect rights, safety, or security; investigate fraud; or respond to a lawful government request.
If WhatFig is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.
We do not sell personal information for money.
Data Retention and Deletion
Account and synchronized collection data are retained while your account is active so we can provide the service.
Scanner images used only for identification are not stored by WhatFig. Auction Preloader images are automatically deleted within seven days.
Giveaway requests, support records, security logs, and operational records are retained only as long as reasonably necessary for the purpose for which they were collected, to resolve disputes, enforce agreements, protect the service, or satisfy legal obligations.
Backup copies may remain until they are overwritten through normal backup rotation.
Signed-in users may permanently delete their account and associated synchronized collection and wanted-list data in the app under:
Profile → Manage Account → Delete Account
Users may also delete only their entire collection or entire wanted list without deleting their account.
If you cannot access the app, you may submit an account and associated-data deletion request using the following public form:
Request Account and Data Deletion
We may need to verify your identity before processing a public deletion request. We will delete or de-identify associated information unless retention is required for security, fraud prevention, legal compliance, or another lawful purpose.
Uninstalling the app removes local application data but does not by itself delete information stored by WhatFig or its service providers.
Your Choices and Rights
You may:
Update account information through your sign-in provider.
Manage giveaway notification categories in the app.
Revoke notification or camera permissions through your device settings.
Delete your account through the Manage Account screen.
Delete your entire collection or wanted list without deleting your account.
Request access to, correction of, or deletion of your personal information by contacting us or using the public deletion form.
Your rights may vary based on your location. We may need to verify your identity before completing a request.
Children
WhatFig is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No transmission or storage system can be guaranteed to be completely secure.
Changes to This Policy
We may update this Privacy Policy as the app or applicable requirements change. We will post the updated policy and revise its effective date. When required, we will provide additional notice or request consent.
Contact Us
For privacy questions or requests, contact:
WHATFIG LLC
Jonathan@whatfig.com