Privacy Policy

How Collect collects, uses, shares, and protects your information.

Last Updated: July 3, 2026

This Privacy Policy describes how Ferrix Labs Inc., a company incorporated in Canada (“Company,” “Collect,” “we,” “us,” or “our”), collects, uses, shares, and protects information in connection with the Collect mobile applications for iOS and Android, the trycollect.app website, and all related services, features, and functionality (collectively, the “Services”). The Services relate primarily to class action settlements administered in the United States, and also surface settlements administered in Canada and Australia; they are directed to users in those countries.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and our Terms of Use and Class Action Terms. If you do not agree, please do not use the Services.

The Short Version

You create an account and tell us a little about yourself so we can surface settlements you may qualify for. We collect account, profile, and in-app activity data to run and personalize the Services, and device- and purchase-level data to manage subscriptions and measure how people discover the app. We never see or store your payment card details. When you file a settlement claim, you enter your information directly on the administrator's own website — we do not receive or transmit it. Our website sets no cookies and runs no analytics or advertising trackers. Everything is described in full below.

1. Who We Are and Scope

Ferrix Labs Inc. is a Canadian company and is the organization accountable for personal information handled in connection with the Services. This policy covers the Collect iOS and Android applications and the trycollect.app website. It does not cover third-party websites, services, or applications that we do not control — including the Apple App Store and Google Play, the settlement administrator websites where you file claims, and the third-party partners identified in the “Third-Party Services and Processors” section, each of which processes data under its own privacy policy.

2. Information We Collect

Information You Provide to Us

  • Account information — your email address, an optional display name, and the authentication method you use to sign in (email and password, Sign in with Apple, or Google). If you sign in with Apple or Google, we receive basic account identifiers from that provider; we do not receive your password.
  • Contact and mailing details — an optional profile you can save in the app: your name, phone number, and mailing address (street, city, state or province, and postal or ZIP code). We store this only in your Collect account; we do not autofill, transmit, or submit it to any settlement administrator on your behalf — you enter your details directly on the administrator's own website when you file a claim.
  • Onboarding profile — a short profile you can provide when you set up the app, which may include your gender (optional), age range, how you discovered Collect, and answers to a brief eligibility quiz. We use this to estimate potential payouts and to personalize which settlements we surface for you. This profile is used inside Collect only — it is not submitted to any settlement administrator.
  • Support communications — if you email us, we receive your email address and the content of your message.

Claim Information Goes to the Administrator, Not to Us

When you file a settlement claim, you enter the required information (which may include sensitive details) directly into the administrator's own claim form on the administrator's website. Collect does not collect, receive, transmit, or store the contents of your claim submissions. That information is handled by the administrator under its own privacy policy.

Information Collected Automatically in the App

When you use the app, we and the partners identified below collect:

  • Device and app information — device model, operating system version, app version, language and region settings, and device-generated identifiers (such as the identifier for vendor on iOS or the Android ID).
  • Advertising identifier — on iOS, your IDFA is accessed only if you grant permission through Apple's App Tracking Transparency prompt; on Android, your Google Advertising ID (GAID) may be used. These are used for install attribution and advertising measurement, as described in the “Advertising, Attribution, and Your Choices” section.
  • Install, attribution, and subscription events — app installs, first opens, and conversion events such as trial starts, purchases, renewals, and net revenue. Subscription lifecycle events are forwarded server-side to our attribution partner and on to advertising networks to measure campaigns; these are shared in pseudonymous form (keyed to attribution and device identifiers, not to your name or email).
  • In-app engagement events — activity such as impressions, taps, and search queries, keyed to your account and stored in our cloud infrastructure. We use this to rank and personalize the settlements we show you and to improve the Services.
  • Push notification data — a device push token and the notification topics you are subscribed to, used to deliver the notifications you have enabled, together with your per-user notification preferences.
  • Purchase and subscription data — subscription status, product identifiers, and transaction identifiers, processed from Apple's and Google's purchase receipts by RevenueCat. We never see or store your payment card details.
  • Network information — your IP address, processed transiently by our service partners when the app communicates with them, which may yield an approximate, city-level location. We do not collect GPS location.

Website Visits

The trycollect.app website sets no cookies and runs no analytics or advertising trackers (see the “Website: No Cookies or Analytics” section). Our hosting infrastructure keeps standard, short-lived server logs (such as IP address, browser type, and pages requested) for security and operations.

3. How We Use Information

  • Provide and personalize the Services — create and manage your account, surface class action settlements you may qualify for, estimate potential payouts, and rank and personalize what you see based on your profile and in-app activity.
  • Manage subscriptions — activate and maintain your subscription entitlement and process store receipts.
  • Communicate with you — deliver the notifications you have enabled, send transactional and security emails, and respond to your support inquiries.
  • Advertising measurement and attribution — understand how users discover and install the app and measure the effectiveness of our advertising.
  • Security and integrity — verify that requests come from a genuine app and device, detect sign-ins from new devices, and detect and prevent fraud and abuse.
  • Legal compliance — comply with applicable laws, regulations, and legal processes, and enforce our Terms of Use and Class Action Terms.

4. How We Share Information

We share information only in the following circumstances:

  • Service providers and processors — the vendors identified below, which process account-, device-, and purchase-level data on our behalf to provide authentication, cloud storage and analytics, subscription management, notifications, search, transactional email, and attribution.
  • Advertising and attribution partners — device identifiers and conversion and subscription events shared with attribution and advertising-network partners to measure advertising campaigns, as described in the “Advertising, Attribution, and Your Choices” section.
  • Apple and Google, for refund requests — if you request a refund for an App Store or Google Play purchase, we may share information about your purchase and your use of the app (for example, consumption data) with the applicable store to help it evaluate your refund request.
  • Legal requirements — if required by law, regulation, legal process, or governmental request, or where disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.
  • Business transfers — in connection with a merger, acquisition, sale of assets, financing, or similar transaction, information may be transferred as part of that transaction.
  • Aggregated or de-identified data — information that cannot reasonably be used to identify you.

We Do Not Sell Your Personal Information

We do not sell your personal information for money. Some privacy laws treat sharing device identifiers with advertising partners for cross-context behavioral advertising measurement as a “sale” or “sharing.” The “Advertising, Attribution, and Your Choices” section explains how to prevent this with a single device setting. We do not, and cannot, share the contents of your settlement claims — you file those directly with administrators.

5. Advertising, Attribution, and Your Choices

We use mobile-attribution and advertising-network partners to understand how users discover the app and to measure our advertising. Our attribution partner is AppsFlyer, and we use the TikTok Business SDK for ad measurement. These partners may receive:

  • Device identifiers, including your advertising identifier (IDFA on iOS if you granted tracking permission, or GAID on Android)
  • App installation and first-open events
  • In-app conversion and subscription events (such as trial starts, purchases, and renewals), in pseudonymous form
  • Your IP address and derived approximate location

On iOS, we also participate in Apple's SKAdNetwork, which reports install attribution to ad networks in aggregate, without identifying you individually.

Your Choices

  • iOS — decline or revoke tracking permission — go to Settings > Privacy & Security > Tracking. If tracking is not permitted, the app cannot access your IDFA for cross-app attribution.
  • Android — reset or opt out of your advertising ID — go to Settings > Google > Ads to delete your advertising ID or opt out of ads personalization.
  • Disable notifications — in your device settings under Notifications, or the toggles inside the app's settings.
  • Contact us — email collect@ferrixlabs.com with the subject line “Opt-Out of Targeted Advertising” and we will honor your request as required by applicable law.

6. Communications and Transactional Email

We send transactional emails through Postmark. These include a welcome email when you create an account, password-reset and email-verification messages, and security alerts when we detect a sign-in from a new device. These are service messages tied to your account and your use of the Services.

We keep open and click tracking off for these emails. If an email to your address hard-bounces or is marked as spam, we add that address to an internal suppression list — stored as a hashed value — so that we stop emailing an address that cannot or does not wish to receive our messages.

7. Sign-In Security and Device Recognition

To help keep your account secure, we keep a per-account record of the devices you sign in from — a device identifier (the identifier for vendor on iOS or the Android ID) together with the device model, operating system, and the IP address the sign-in came from. We use this solely to recognize when a sign-in comes from a new device, so that we can send you a security-alert email. This information is not used for advertising or personalization.

8. Third-Party Services and Processors

The Services rely on the following providers, which may process the data described above. Each processes data under its own privacy policy, and we require partners that receive user data to protect it consistent with this policy and applicable law:

  • Google (Firebase and Google Cloud) — authentication, cloud data storage and analytics (Firestore and BigQuery), push notification delivery, AI-based processing of your in-app search queries to return relevant settlements (Vertex AI), and app/device integrity checks (privacy policy)
  • RevenueCat — subscription state management and receipt validation (privacy policy)
  • Superwall — display and measurement of in-app subscription offers (privacy policy)
  • AppsFlyer — mobile install attribution and advertising measurement (privacy policy)
  • TikTok — the TikTok Business SDK, used for advertising measurement in connection with our campaigns (privacy policy)
  • Postmark — delivery of transactional and security emails (privacy policy)
  • Typesense — the search infrastructure that processes your in-app search queries to return settlement results (website)
  • Apple and Google — app distribution, in-app purchase and payment processing, purchase receipts, and operating-system services used by the apps (Apple privacy policy, Google privacy policy)

The Services also link to third-party websites we do not control, including settlement administrator websites. This Privacy Policy does not apply to them; review their privacy policies before providing information.

9. Website: No Cookies or Analytics

The trycollect.app website does not set cookies and does not use analytics, advertising, or social-media trackers. The one exception is our account-action page (used for password-reset and email-verification links), which loads Google reCAPTCHA to protect against automated abuse; Google provides reCAPTCHA and may set its own cookies and collect device information under Google's privacy policy. If our website's practices ever change more broadly, we will update this policy first and, where required, ask for your consent.

10. Data Retention

  • Account and profile data — retained while your account is active, and deleted when you delete your account (see the next section).
  • In-app activity — engagement events keyed to your account are retained to operate and improve the Services, and are erased when you delete your account.
  • Support communications — retained as long as necessary to resolve your inquiry and for a reasonable period thereafter for quality and legal purposes.
  • Data held by partners — the partners identified above retain device- and purchase-level data according to their own retention policies; purchase records are kept as long as needed to honor your entitlements and to meet legal and accounting requirements.

We may retain information for longer where required by law or to resolve disputes. You may request deletion at any time as described below.

11. Deleting Your Account and Data

You can delete your account and associated data at any time.

In the App

Open Collect, go to Settings, tap “Delete Account,” and confirm when prompted.

By Email

Email collect@ferrixlabs.com from the address associated with your account, using the subject line “Delete My Account.”

Deleting your account erases your account and its associated data, including your profile, your notification preferences and push tokens, your self-declared claim tracking, and the in-app engagement data keyed to your account. Because some of that activity data lives in analytics storage (such as BigQuery) and is replicated to backups and streaming systems, erasure runs on a periodic sweep and can take up to approximately 30 days to fully propagate.

What We May Retain

We may retain limited information where the law requires it or to protect our legitimate interests — for example, transaction and purchase records for tax and accounting purposes, information needed to resolve disputes or prevent fraud, and de-identified or aggregated data. If your address is on our email suppression list (because it previously hard-bounced or reported spam), we may retain the hashed suppression entry so that we continue to honor that status.

12. Data Security

We use commercially reasonable technical and organizational safeguards designed to protect the information we handle, including encryption of data in transit and access controls. Our backend APIs are gated by app and device integrity checks (Firebase App Check) so that they respond to requests from genuine instances of our apps. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. International Data Processing

We are a Canadian company, and our cloud infrastructure and the service partners identified above operate primarily in the United States. Your information may therefore be processed in the United States, Canada, or other countries where those partners operate, which may have data protection laws that differ from those of your place of residence. Where required by applicable law, we ensure appropriate safeguards are in place for such processing.

14. Your Privacy Rights

We honor the following rights for all users, and additional rights where applicable law provides them:

All Users

  • Request access to the information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Withdraw consent where processing is based on consent (for example, by revoking tracking permission in your device settings)

United States State Privacy Laws

Depending on your state of residence (including under the California Consumer Privacy Act as amended and similar laws in other states), you may have rights to know, access, correct, delete, and obtain a copy of personal information; to opt out of the “sale” or “sharing” of personal information or its use for targeted advertising; and to non-discrimination for exercising these rights. We do not sell personal information; you can prevent the sharing of your advertising identifier as described in the “Advertising, Attribution, and Your Choices” section, and we honor these rights as required by applicable law.

Canada

As a Canadian organization, we handle personal information in accordance with Canadian federal privacy law (PIPEDA). You may request access to or correction of personal information we hold, withdraw consent, challenge our compliance with our privacy obligations by contacting us, and contact the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

Australia

If you use the Services from Australia, we handle your personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth) to the extent they apply to us. You may request access to or correction of your personal information, or complain about our handling of it, by contacting us; if you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

How to Exercise Your Rights

Contact us at collect@ferrixlabs.com with the subject line “Privacy Request.” We may need to verify your request (for example, by corresponding from the email address associated with your account), and we will respond within the timeframe required by applicable law. You may designate an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your privacy rights. For device-level data held by the partners identified above, we may fulfill your request by directing it to the relevant partner or by giving you the means to make the request directly.

15. Children's Privacy

The Services are intended only for adults, and our Terms of Use require users to be at least 18 years old. We do not knowingly collect personal information from anyone under 18, and in particular we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at collect@ferrixlabs.com.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. If we make material changes, we will provide notice through the Services or on our website, and we will update the “Last Updated” date at the top of this page. Your continued use of the Services after any changes take effect constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Ferrix Labs Inc. (Canada)

Email: collect@ferrixlabs.com

For privacy-related requests, please include “Privacy Request” in your subject line.

Collect by Ferrix Labs Inc. collects only the information needed to run the Services, personalize the settlements we surface, manage subscriptions, and measure how people discover the app. We never see your payment card details, and your settlement claims are filed by you directly with administrators — we do not receive or transmit them.