Privacy policy

Effective October 29, 2026

Berry Tree is run by BerryTree LLC ("we"). You snap a photo of something you need; we work out what it is, find a seller, buy it for you and keep you posted. This page says what we collect to do that, why, who else gets it, how long we keep it, and how to delete it.

What we collect

• Your account: your email; your password, which we store only in scrambled (hashed) form; your name if you give one; and your company if you gave one. Until you give a name, the account goes by the part of your email before the @, and the name on the first delivery address you save becomes its name.
• Delivery details: the name, company, address and phone number of each address you save for delivery, the name you give it, if any, and which one your orders go to; and the ZIP or postal code you give with a photo you need today.
• Your card: you type the card number into Stripe's own form and it goes straight to Stripe; it never reaches us. We keep the card type, the last four digits, the expiry month and year, and Stripe's reference numbers for you and your card. We also keep the country it was issued in and Stripe's fingerprint of its number, which is the same for one card on every account: a card from abroad costs more to take, and a first-order deal is once per card. When you delete your account the card's details go; the fingerprint of a card that took a first-order deal stays with that deal's record, so the deal isn't given to that card again.
• Your photos and what you tell us: the photos you take or upload, how many you want, any note (or what you type instead of a photo), and any details you add later; and what you send Imagine about an item, your words and photos, with the pictures it makes you. Your browser normally shrinks a photo before uploading it, which also drops hidden details such as where it was taken. If your browser can't shrink it, the original file is uploaded as it is, with whatever your camera stored in it, which can include the location.
• What we work out from your photos: the item, its details, and any text we can read on it, such as a label or a package.
• Your orders: what you ordered, how many, the price, the amounts held, charged or refunded, the card used, the address it ships to (or, for store pickup, the store it's waiting at, what to bring, and when it should be ready, worked out in the time zone your device gave with the photo), the seller we bought it from, the photo of your item our team may take when we buy it (shown on your order's page and in the email saying we bought it, with that person's first name), the carrier and tracking number, and, if you answer How did it go? once it's delivered or picked up, your answer (right item and on time, the wrong item, late, or damaged), when you first gave it and when you last changed it.
• What you do in the app: each page you open, with its full web address, and what you do there: photos taken, cards swiped and how long you looked at them, quantities changed, delivery or store pickup chosen, forms opened or closed, errors, and when you leave. Each record has the time and your IP address. What you swipe on is also kept, to see which prices get bought.
• Your device: your browser and device type, screen size, time zone and language, the site that sent you, and the first page you opened.
• Invites, credit and points: the account whose invite link you joined from, if any; your own invite link; your credit: what you were given, and what each order took off or gave back; and your points: what you started with, what each order earned, what came back off and what became credit.
• Messages you send us from the app.
• Emails we send you: a record of each one (which kind, the address it went to, when, and whether our email provider accepted it), and the links we make for you to reset your password or to sign in, stored scrambled.
• Notifications in the iPhone app: once you allow them on an iPhone, the token Apple gives it for notifications, its time zone (so a notification that can wait comes in the daytime), the app's version, and whether you turned order updates off on it; whether you said yes to deals and rewards, and when; and a record of each notification we send (which kind, when, and whether Apple took it). They say what happened to your photo or order, never a price, an address or what you ordered. Deals, points and credit come only after you say yes to them, and stop when you turn them off in Account → Notifications. An iPhone's token goes when you sign out on it or delete your account.
• Signing in with Apple or Google: if you use one, the id Apple or Google gives you for us, and the email address and name they share, and when you last signed in with it. If you choose Hide My Email, Apple gives us an address that forwards to yours, and that's the one we email. For Apple we also keep a token that lets us end the sign-in at Apple when you delete your account or take Apple off it in Account.
• Passkeys: if you add one, its public key, a count of its uses, the kind of device it was made on, and when it was added and last used. Your face, fingerprint or passcode never leaves your device.
• Apple Pay and Google Pay: if you pay with one, the card stays with Apple or Google and Stripe. We keep what we keep of a card you type in, and the name, phone number and address your wallet gives for delivery, which become your delivery address.
• Apple Wallet orders: if you pay with Apple Pay in our iPhone app, Apple Wallet can follow the order. We keep the code Wallet uses to ask about it, stored scrambled, and for each device that asks to hear when it changes, the id Wallet gives that device and its notification token. Wallet shows the order's number, total, progress and tracking, never what the item is.
• Live Activities: in our iPhone app, an order's progress can show on your Lock Screen while we buy it and when it's ready for pickup. We keep the token Apple gives for each one and the last step it showed. It never says what the item is.
• Shared photos: photos you share to Berry Tree from Photos or Safari, a link you share from Safari, and what you tap in visual search on iPhone are priced like the camera's photos. Visual search's picture stays on your iPhone unless you tap Find this with Berry Tree; untapped ones are deleted after an hour, the next time Berry Tree or visual search opens.
• Cookies: we set four, all our own. "vid" recognizes your browser for a year; it's set on your first visit, before you sign in, so we can connect your visits. "sid" keeps you signed in until 180 days after you last used Berry Tree. "flash" lasts a minute and carries a short message after a form, such as "Card saved". "ref" is set when you open a friend's invite link and holds its code, for up to 30 days or until it's noted on your account, or on a guest record if you take a photo without one. There are no advertising or analytics cookies. When card payments are on, Stripe's script (see below) can set Stripe's own cookies.

Before you sign in, what you do on our pages is kept with the "vid" cookie, and linked to your account once you create one or sign in on that browser. A photo needs an account, except at times when we let visitors take photos first and make the account when they buy. Photos taken without an account, and what you do with them, are kept under a guest record tied to the browser they were taken on, and move to your account when you create one or sign in on that browser.

How we use it

• To work out what's in your photo, find where to buy it, and price it.
• To place your order: we put a hold on your card when you order, charge it when we buy the item, and release the hold or refund you if the order is undone or cancelled, or refund all or part of it for a return or an item that arrived wrong, damaged or incomplete.
• To get your order delivered and show you each step.
• To email you when a person is getting your price and when it's ready, when we have a note for you, when a price changes on an order, and when your order is placed, bought, shipped, delivered, cancelled or refunded, or your card couldn't be charged, when a friend joins from your invite link (that someone did, never who), and when that friend gets their first order and the credit for it is yours. These are about your orders and your account, not marketing, so they come as long as you have an account. We also email you a link when you ask to reset your password or to sign in without it.
• To remind you to order something again, only when you ask for a reminder on a delivered order's page. Turn it off on that page, or with the link at the bottom of the reminder.
• To follow up once on prices you haven't bought or passed on: when a price we found you has waited 20 hours, we email you about it, at most one email a day for all such prices, and none once it's 3 days old. It tells you what each price was; we check it again when we buy. The link at the bottom of one, or your mail app's Unsubscribe button, stops them at once; your other emails still come.
• To answer you when you write to us, keep your account secure, and see how Berry Tree is used so we can fix what doesn't work.

We don't sell your information or use it for advertising.

Who we share it with

• Anthropic, the maker of the Claude AI: your photos exactly as uploaded, how many you want, your note and the details you add, so it can identify the item, and, when you need it today, the ZIP or postal code you typed, or the ZIP, city and state of the saved address your orders go to, so it can look for a store near you. It also gets short descriptions of items other customers asked about (never their photos), so it can recognize the same product. When you send a room to furnish, it gets the room's photo and your words about it, so it can plan the pieces, and the picture drawn of the room with the pieces in it, so it can put each piece's pin where the picture shows it. Anthropic doesn't get your name, email, street address or card.
• Google, the maker of the Gemini AI: when you send a room to furnish, the room's photo, each piece's name, what it is and where it goes, and the sellers' pictures of the pieces, so it can draw your room with the pieces in it; and when you use Imagine on an item, what you send it there (your words and photos), the item's name and what we know about it, the seller's picture of it and your own photo of it, so it can answer you and make the pictures you ask for; and when no seller's page gives a picture of an item you photographed, your photo of it, the item's name and what we know about it, so it can draw the item alone on white for its card; that drawing shows only the item, and may be shown to other customers who send the same item. It doesn't get your name, email, address or card. Google keeps what we send it for up to 55 days to look for abuse, and doesn't use it to train its models. Every picture it makes carries Google's invisible SynthID watermark, which marks it as made by AI.
• Web search: to find sellers, Claude searches the web and opens seller pages from Anthropic's systems, using a description of the item and the country our store is set to. When you tell us you need an item today, it also gets the ZIP or postal code you typed, or the ZIP, city and state of the saved address your orders go to, so it can look for a store near you; never your street address or your name. Search engines and sellers see those searches, not your IP address or who you are.
• Stripe, our payment processor: your name and email when you first add a card, and the card you type into Stripe's form. If you add a card while checking out on the Snap page, your delivery name, address and phone number also go to Stripe as billing details. For each order, Stripe gets the amount, a description with the quantity and its unit, the item (and its size, for something worn) and the order number, and, unless you pick it up at a store, the name, address and phone number it ships to; once it ships, the carrier and the tracking number too. If you pay with Apple Pay or Google Pay, Stripe gets the card from your wallet, with the delivery name, address and phone number it gives. When card payments are on, Stripe's script runs on the Account page whenever you open it, on the Snap page once it asks for your address and card, and on the Snap page or an order's page when your bank asks you to confirm a purchase, so Stripe can see your IP address and browser there.
• The seller we buy from, and the delivery company it uses: the name, company, address and phone number on your order, so they can deliver it. For store pickup, the store gets the name and phone number the pickup is under.
• Our hosting provider (currently Railway), which runs our servers and stores our database, your photos and our server logs. The logs can include error messages from Stripe or Anthropic about your requests. When we've connected an alerting service (a team chat or an error tracker) to be told when something needs us, it gets the same kind of thing: error messages, request numbers, item names and order amounts, never your name, email, address or messages.
• Resend, our email provider: your email address and the contents of each email we send you (the item, the price, the order and its tracking number, the photo of your item when we took one as we bought it, our notes to you, or a password reset or sign-in link). The email saying an order is ready for pickup also carries the name it's under and a picture of the item: the seller's, or your own photo of it when the seller's page gave none. Our team also gets an email about each request that needs a price, each order, each message you send us, and each delivery you tell us was the wrong item or arrived damaged, with your name and email in it.
• The friend who invited you, if you joined from their link: their Account page counts the friends who joined from it and how many have had a first order delivered, and they get credit when yours is. It doesn't show them who you are, or anything about your orders.
• Our team can see all of the above to fulfill orders and help you.

Each of these companies handles what it gets under its own privacy policy. We also share information when the law requires it.

How long we keep it

• Your account, photos, orders and messages: until you delete your account. So are the drawings of rooms you sent to furnish, and what you sent Imagine with the pictures it made you, and the drawing of an item of yours alone on white, made when no seller showed a picture of it, which are pictures of your photos.
• Sign-ins: until 180 days after you last used Berry Tree, or until you sign out, or until you reset your password, which signs you out everywhere else.
• Password reset and sign-in links: an hour, or until they're used. Our record of the emails we sent you: until you delete your account, when your address comes off it.
• A guest record with no photos is removed within a day of turning 30 days old. Photos uploaded as a guest are kept like an account's.
• Records of what you do in the app and of your device: there's no set end date. When you delete your account, they're kept without your IP address or your account, linked only to the order records we keep for our books.
• Order records: kept after you delete your account, for our books, taxes, refunds and disputes, as described below.
• Stripe keeps its payment records, and Anthropic and Google what we sent them, under their own policies. Stripe keeps payment records even after your customer record there is deleted.
• Our backups keep copies of the database and the photos as they were, so deleted information stays in them until they're replaced: within about a day for the continuous copy of the database, up to about three months for the stored copies. Our hosting provider's server logs keep error messages for as long as it keeps logs.

Your choices

• See, change and remove your delivery addresses, choose which one your orders go to, change or remove your card, and ask to confirm every buy, on the Account page.
• Cancel a request under Orders until we buy the item.
• Stop follow-ups on prices, or a reorder reminder, with the link at the bottom of one. It works at once, without signing in, and leaves your other emails as they are.
• The note with a photo is optional, and so is the photo: you can type what you need instead.
• Forgot your password? Ask for a reset link on the sign-in page, or for a link that signs you in without it. We say the same thing whether or not the address has an account, so nobody can use the form to find out.
• Delete your account on the Account page by typing your password (or DELETE, for an account without one). This signs you out on every device, and:
  • deletes your photos, the drawings of rooms you sent to furnish, the drawings of your items on white, what you sent Imagine and the pictures it made you, and any photos our team took of your items as we bought them, your swipes, your messages to us, your reorder reminders, your credit and points, the tokens your iPhones use for notifications, your sign-ins with Apple and Google (Apple's we also end at Apple), your passkeys, what Apple Wallet and your Lock Screen were following of your orders, and any password reset or sign-in links, and takes your email address off our record of the emails we sent you;
  • removes your name, email, company, addresses, phone and card details from your account, and asks Stripe to delete your customer record and saved card there;
  • stops your invite link from working, and removes the record of who invited you;
  • takes your notes, the details you added, what you wrote to us about an order, the delivery address, the card, the tracking number and the text we read from your photos off your orders, and removes your name, email, address and phone from your orders' history wherever we can find them;
  • cancels requests you hadn't ordered yet, and stops showing your items to the AI;
  • keeps the records of what you did in the app and of your device, without your IP address or your account, linked only to the order records we keep for our books.
  We keep a record of each order (the item, quantity, prices, dates, the seller, our order number with the seller, and the payment reference and status) for our books. You can delete your account once none of your orders is still being bought or delivered. Your email can be used for a new account straight away.
• If you only used Berry Tree as a guest, create an account on the same device and then delete it; what you did as a guest goes with it. Or contact us.
• For a copy of your information, or anything else about it, contact us.
• You can clear Berry Tree's cookies in your browser. You'll be signed out and counted as a new visitor.

Children

Berry Tree is for adults buying things they need. It isn't meant for anyone under 18, and we don't knowingly collect information from children. If you think a child has used it, contact us and we'll delete their information.

Changes

If we change this policy, we'll post the new version on this page and change the date at the top.

Contact

BerryTree LLC runs Berry Tree. Questions about this policy or your information? Email us at support@berrytree.io. See also our Support page, our Terms of Service and our Returns and Refunds policy.