Security
At FetchValue, security is fundamental to how we build and operate our service. We protect your data with industry-standard encryption and privacy-first design.
Last updated: December 20, 2025
Our Security Principles
Privacy by Default
FetchValue works anonymously by default. We don't require personal information to use the app, and we minimize data collection to only what's needed for the service.
Data Minimization
We collect only what we need. Photos are processed and deleted within 24 hours. We don't store images longer than necessary for valuation.
Encryption Everywhere
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Your information is protected at every stage.
No Data Selling
We will never sell your personal data. Your valuations, photos, and account information stay private and are never shared with advertisers.
Infrastructure Security
Cloud Platform
FetchValue runs on Google Cloud Platform (GCP), which maintains SOC 2 Type II, ISO 27001, and other industry certifications. Our infrastructure benefits from Google's world-class security practices.
Data Storage
- Firebase Authentication: Secure identity management with optional Sign in with Apple for maximum privacy
- Cloud Firestore: Encrypted database with strict security rules limiting access to authorized users
- Cloud Storage: Temporary image storage with automatic deletion after processing
Network Security
- HTTPS enforced on all connections
- Content Security Policy (CSP) headers to prevent XSS attacks
- Strict transport security (HSTS) enabled
- Regular security scanning and vulnerability assessments
Application Security
Authentication
We offer multiple secure authentication options:
- Anonymous accounts: Use the app without providing any personal information
- Sign in with Apple: Privacy-focused authentication that can hide your email
- Email magic links: Passwordless authentication via secure email verification
API Security
- All API requests require valid Firebase authentication tokens
- Rate limiting protects against abuse
- Input validation prevents injection attacks
- Secure parameter handling on all endpoints
Payment Security
In-app purchases are processed through Apple's App Store, which handles all payment information. We never see or store your credit card details.
Your Data Rights
You have full control over your data:
- Access: Request a copy of your data at any time
- Export: Download your valuation history
- Delete: Request complete deletion of your account and data
- Portability: Your data belongs to you
For data requests, contact us at admin@scoutdog.ai.
Reporting Security Issues
We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly.
Security Contact
Email: admin@scoutdog.ai
Please include details about the vulnerability, steps to reproduce, and any potential impact. We will acknowledge receipt within 48 hours and work with you to understand and address the issue.
Compliance
FetchValue is designed with privacy regulations in mind:
- GDPR: We respect the rights of EU users including data access, portability, and erasure
- CCPA: California residents can request information about data collection and opt out of data sharing (though we don't share data)
- App Store Guidelines: We comply with Apple's privacy and security requirements
Questions?
For questions about our security practices, please contact us at admin@scoutdog.ai or visit our Support page.