Last updated: 24 October 2026

This policy explains what the BOPF app collects, why, and the choices you have. The app is called "BOPF: Preloved Fashion" on Google Play and "BOPF · Preloved Luxury" on the App Store. It is run by Business of Preloved Fashion LLC ("BOPF", "we", "us"), registered at Sharjah Media City Free Zone (SHAMS), Sharjah, United Arab Emirates. The app is a companion to our store at businessofprelovedfashion.com. Payments are never taken in the app: checkout, deposits and invoices are handled by Shopify's secure web checkout.

Information we collect

You can use most of the app without an account, a name or a password. Depending on what you use, we collect:

• Your app ID and notification token: a random ID the app creates when you first open it and, if you allow notifications, a push token (through OneSignal). They let us send the alerts you ask for and avoid duplicates. We also note whether your phone is an iPhone or Android and when you last opened the app.
• Your preferences: the houses and categories you follow, your price range and sizes, the pieces you save, what is in your bag, your notification settings and your privacy choices.
• Pieces you view: which pieces you open in the app (we keep your 100 most recent), so we can personalise your feed and remind you about pieces you looked at, for example when one drops in price. If your phone is set to a European time zone (including the UK), we only do this if you turn on "Learn what I like".
• Email address (optional): if you add one in the app, we use it to bring over the pieces you saved on our website and keep your saved list in sync between the app and the website. Pieces you save in the app are then also added to the saved list on our website for that email. An email you only type in is never used to show your orders, to tell you when an order is on its way, or to send you notifications based on your past orders. Those need the one-time code below.
• Email sign-in with a one-time code: "Your orders" and holding a piece ask you to confirm an email address by typing a 6-digit code we email to you. The code works once and expires after 10 minutes. There is no password. Once confirmed, that email is linked to your app profile. This is your app account. It lets the app show your orders and holds, tell you when an order is on its way, and link your past orders (see below).
• Orders you place in the app: when you check out from the app, the app adds its random ID to your order, with the time and a short tag for what led you to the piece (for example, one of our notifications). This tells us the order came from your phone.
• Your past orders: we keep a short record of the orders placed with us, online, in the app or in person, for the notifications described under "Notifications based on your past orders" below. It holds the pieces you bought (their house, kind and size) and what you paid for them, when you ordered, the country we shipped to, whether the order was marked as a gift or was a pickup, when it was delivered, and roughly how much you have spent with us in total. We do not copy your name, address, email or phone number into it. To match orders to you, we keep a coded version of each email you ordered with, not the email itself, and a coded version of the phone number on your orders, which we use only to count how many of our buyers also chat with us on WhatsApp. We only send these notifications to a phone that is linked to your orders: your app is linked when an order you check out from the app is paid, or when you confirm your email in the app with a one-time code. An email you only type into the app is never enough, and an app order that is refunded or cancelled no longer links your app.
• Contact details you choose to send us: when you ask us to sell a piece for you (Consign), join the Hermes Room waitlist or offer us a Hermes piece, you give us the brand, piece, category, condition and any notes, and an email address or WhatsApp number so our team can reply. When you hold or reserve a piece, we use your confirmed email and, for a reserve, any email you give for the deposit invoice.
• Return requests: when you ask to return a piece from "Your orders", we receive the order, the pieces, the reason you choose and any note you add. We remove links, email addresses and phone numbers from the note before we store it. We also keep your app's random ID and a coded version of your email, which we use to check earlier returns made under that email. The request is created in Shopify for our team to review.
• Zaya chats: the messages you send to Zaya, our AI concierge. See "Zaya and other AI features" below.
• Voice input: optional. Your phone turns your speech into text, and only the text reaches us. See below.
• Reports about Zaya's replies: if you use "Report this reply". See below.
• Searches and gift notes: what you type in the search box goes to Shopify to find pieces, and we do not keep it on our server. A gift note you write in your bag is added to your order at checkout.
• Approximate region: your phone's time zone and the country you shop from (not your precise location), so we can show the right prices, currency and offers for your market.
• Basic app and diagnostic data: standard technical information such as the app version, phone model and operating system, IP address, and whether notifications were delivered and opened, needed to run and troubleshoot the app.

We do not collect payment-card details (payment happens on Shopify), we do not request your precise location, we do not access your contacts, photos or files, and we do not use an advertising ID.

Zaya and other AI features

• What is sent: when you ask Zaya something, the app sends your message, the recent messages in that chat, the piece you are looking at and the country you shop from to our server. Our server passes them to Anthropic, the AI company that powers Zaya, which also sees your app's random ID. We never send your name, email address or phone number to Anthropic, unless you type them into the chat yourself, so please don't share anything in a chat that you would rather keep private.
• What we keep: our server does not store your Zaya chats. Your phone keeps the latest messages of each chat so you can pick up where you left off. They are cleared after 7 days without a new message, when you tap Clear in the chat, or when you use Delete my data. To stop misuse, we keep only a short-lived count of how many messages each app sends.
• How Anthropic handles them: Anthropic processes your chats only to write Zaya's replies, as our service provider. It does not use them to train its AI models, and it deletes them within 30 days. It keeps a message for longer (up to 2 years) only if the message is flagged for a possible breach of its usage policy, or if the law requires it.
• Voice input: speaking to Zaya is optional. When you tap the microphone, the app asks for permission to use it, and your phone's own speech service (Apple's on iPhone, Google's on Android) turns what you say into text. Depending on your phone, this happens on the phone itself or on Apple's or Google's servers, under their privacy terms. The app only sends us the text. We never receive, record or store your voice.
• Report this reply: under each of Zaya's replies there is a "Report this reply" link. Use it if a reply is wrong, offensive or inappropriate. We then receive that reply, the message you sent just before it (any email address or phone number in it is masked before we store it), the piece you were looking at, the reason you chose, whether your phone is an iPhone or Android, the app's build number and your app's random ID, so our team can review it and improve Zaya. Reports are not sent to Anthropic. We keep them for 12 months, and Delete my data removes them sooner.
• Consignment estimates: when you ask for an indicative range on a piece you want to sell, the brand, piece, category, condition and notes you gave are sent to Anthropic to estimate the range. Your contact details are not.
• Your personal edit: to put together your edit, we send Anthropic the houses and categories you follow, your sizes, your price range and the names of the pieces you saved. We never send your app ID, name or contact details for this.
• Zaya can make mistakes: her replies are written by AI. Please check what matters to you, like size or condition, on the product page or with our team on WhatsApp.

How we use it

• To send the notifications you turn on (see "Notifications" below).
• To send you a few personal notifications based on your past orders, such as a care note after a delivery or new pieces from the houses you bought from (see "Notifications" below).
• To personalise the app: your feed, your personal edit and the pieces we show you first.
• To keep your saved list in sync between the app and the website and, if you added an email, to email you about pieces you saved, such as a price drop. Every such email has an unsubscribe link.
• To show your orders, hold pieces for you, take reserve deposits through Shopify invoices, handle your return requests, and tell you when an order is on its way.
• To send you a short thank-you email after an order you place with us online or in the app. If your email is already linked to the app, it leaves out the invitation to download the app. Every thank-you email has an unsubscribe link.
• To reply to your consignment enquiries and Hermes Room requests.
• To answer your questions through Zaya, and to review replies you report.
• To show prices in the right currency for your market.
• To operate, secure and improve the app, including limits that stop misuse.

Notifications

We only send push notifications if you allow them on your phone. They include alerts about pieces (new arrivals from the houses you follow, a piece in your size, a price drop on a piece you saved or looked at, a piece back in stock) and about your holds and orders. They also include promotional notifications: our edits, sales and offers, reminders about pieces in your bag, and games such as the Hunt.

If your phone is set to a European time zone (including the UK), we only send notifications about new pieces, price drops and offers, and notifications based on your past orders, if you turn on "Tell me when a piece lands". Wherever you are, you can switch types of alert off in the app's You tab, under "How you hear from us", or turn notifications off completely in your phone's settings.

Notifications based on your past orders

If your app is linked to your past orders (see "Your past orders" above), we may send you a few personal notifications based on what you bought:

• a care note after a piece is delivered;
• new pieces from the houses you bought from;
• picks in your sizes and price range from the houses you buy most;
• an invitation to sell a piece you bought from us;
• early access to some new pieces and sales.

We never send the same notification twice, never more than one of them every 5 days, and only between 9am and 9pm your time. Orders you mark as a gift at checkout are not used for care notes, picks or invitations to sell. Like any notification, these can show on your lock screen, and they may name the house or the kind of piece you bought (for example, "A care note for your new bag"). They never show what you paid.

To stop them, turn off "From your purchases" in the You tab, under "How you hear from us". If your app does not show that switch yet, turning off "A weekly edit digest" stops them too. Turning notifications off in your phone's settings stops all of them.

Who processes your data for us

We use trusted service providers who process data only on our behalf and on our instructions:

• Shopify: our catalogue, search, bag, checkout, orders, returns, holds, deposits and invoices. We read your past orders from Shopify for the notifications described above.
• OneSignal: sends our push notifications and records whether they were delivered and opened. It receives the text of each notification, which can name a house or kind of piece you bought, but not your order history or what you paid.
• Google: Firebase Cloud Messaging delivers notifications to Android phones, and Google Workspace holds some of our records, such as the saved lists on our website and your email preferences. Apple delivers notifications to iPhones.
• Anthropic: the AI behind Zaya, consignment estimates and personal edits.
• Omnisend: our saved-items and email list.
• Resend: sends emails such as your one-time code, a thank-you note after an order, and messages about your saved pieces, holds and orders.
• Render: hosts our server and stores your app profile, preferences and our notification records securely.
• Expo: delivers app updates to your phone.

If you tap a WhatsApp button, the conversation happens in WhatsApp, under WhatsApp's own terms. Google Play and the App Store handle downloads of the app under their own terms.

We do not sell your data

We never sell or rent your personal information, and we do not share it with anyone for their own advertising. There are no ads in the app.

Your choices and rights

• Notifications: turn alerts on or off in the app's "You" tab, or disable them entirely in your phone's settings.
• From your purchases: turn it off in the You tab to stop notifications based on your past orders (if your app does not show it yet, turn off "A weekly edit digest"). If you want us to stop using your past orders for notifications altogether, ask us: we will remove them from our notification records and stop adding new orders made with the same email or account.
• Your privacy switches: if your phone is set to a European time zone, "Tell me when a piece lands" and "Learn what I like" are in the You tab. Changing either takes effect from the next message.
• Email: leave it blank, or ask us to remove it at any time.
• Zaya chats: tap Clear in any chat to delete it from your phone.
• A copy of your data: email us or message us on WhatsApp and we will send you what we hold about your app.
• Deletion: use Delete my data in the app, or ask us (see "Deleting your data" below).

If you are in the European Union, the EEA or the UK, you also have the right to access, correct, delete, restrict or move your data, to object to how we use it, and to withdraw your consent at any time. We rely on: providing the app features you ask for; your consent for promotional notifications (including notifications based on your past orders) and "Learn what I like"; and our legitimate interest in keeping the app secure and improving it. You can also complain to your local data protection authority.

Deleting your data

In the app, go to the You tab, tap Delete my data and confirm. This deletes your app profile, preferences, saved pieces, viewed pieces, bag, personal edit, notifications, reports about Zaya's replies, and the email linked to your app (your app account) from our servers straight away. It also unlinks your app from your past orders, so notifications based on them stop, and it removes your app's ID and your note from our copy of your return requests (the request in Shopify, with your note, stays with the order). It also clears everything the app stored on your phone, including your Zaya chats. The app then starts fresh with a new random ID. If you use the app on more than one phone, do this on each of them.

Your orders and return requests themselves stay in our order records, and so does the record of your past orders described above, no longer linked to your app (see "Data retention"). If you later check out from the app or confirm your email again, your app is linked to your orders again. If you want us to stop using your past orders for notifications altogether, ask us.

Uninstalling the app clears your phone but not our servers, so use Delete my data first. Can't open the app? Our Delete your app data page explains other ways to ask us, and lists exactly what is deleted and what we keep.

Data retention

• Your app profile, preferences, saved pieces and the email linked to your app: for as long as you use the app, until you delete them with Delete my data or ask us to.
• Pieces you view: your 100 most recent, until you delete them.
• Zaya chats: not stored on our server. On your phone, until 7 days pass without a new message, you tap Clear, or you use Delete my data. At Anthropic, deleted within 30 days (longer only as explained above).
• Reports about Zaya's replies: 12 months.
• One-time codes: they expire after 10 minutes.
• What we use from your past orders for notifications: the pieces you bought and the date, total and status of each order, for up to 4 years from the order; other order details, such as the country we shipped to and delivery dates, for up to 400 days; and a note of which of these notifications we have sent, so none is sent twice, for about 4 years. If you ask us to remove your orders from these records, we keep only a coded marker (not your email) so they are not added again. After Delete my data, we keep a coded marker of your old app ID so it is never linked to your orders again.
• Return requests: kept with the order they belong to, as part of our order records.
• Thank-you emails: your email address, first name, order number and the name of the piece are held only until the email is sent, at most about 5 days. After that we keep only a note of whether it went out.
• Consignment enquiries, Hermes Room requests, holds and reserves: up to 2 years, so we can follow up and keep accurate records. Ask us and we will delete them sooner, unless they are part of an order.
• Orders, invoices and deposits: at least 5 years, as UAE tax law requires.
• Your saved list on our website and our email list: until you remove the pieces, unsubscribe, or ask us to delete them.
• Back-ups: our hosting provider keeps daily back-up copies of our server for a short time, normally about a week, so deleted data can remain in a back-up until it expires.

Security

Everything the app sends travels over encrypted connections (HTTPS), and we use industry-standard measures to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.

Children

The app is for adults aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18. If you think a child has used the app, contact us and we will delete their data.

International users

We operate from the United Arab Emirates. Our service providers may store and process data in other countries, including the United States and the European Union. Where applicable law (such as the GDPR) gives you additional rights, we honour them.

Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. If we make an important change, we will tell you in the app.

Contact

Questions or requests: hello@thebopf.com, or WhatsApp +971 58 566 9311. Business of Preloved Fashion LLC, Sharjah Media City Free Zone (SHAMS), Sharjah, United Arab Emirates.