Privacy Policy

Effective date: October 1, 2026

Junk Drawer is an iPhone app. You share things to it from other apps (a link, some text, a screenshot, a map pin), and it works out what the thing is and files it in your private Drawer. You can also put saves on the Fridge, which only your accepted friends can see.

Junk Drawer is made by Tyler Kershaw, an individual developer. In this policy, “we” and “us” mean Tyler Kershaw. Questions go to tylerakershaw1@gmail.com.

The short version

We collect your account details, what you share to Junk Drawer, and what you do with your saves.
To work out what you shared, our server sends its text to AI services and looks names up in public catalogues. You agree to this before any of your shares are processed.
Screenshots and photos never leave your phone. The app reads the text in them on your device and sends only that text.
The app never reads your contacts list. It uses your approximate location only if you allow it, only while you’re using the app, and our servers never store it (see “Your location” below).
Your Drawer is private. Only friends you’ve accepted see what you put on the Fridge, and only friends you invite see a plan.
Notifications are optional. If you allow them, Expo, the service that delivers them, gets your phone’s push token and the text of each notification.
No ads. No tracking. No selling your data. No analytics or ad SDKs in the app.
You can delete your account in the app at any time. That deletes your saves, shares, friendships, blocks, and the reports you made.

1. What we collect

Your account

Email address. You give it when you sign up with email, or Apple or Google gives it to us when you sign in with them. With Sign in with Apple you can choose to hide your email, and Apple gives us a relay address instead.
Your name, if Apple or Google provides it. Apple shares your name only the first time you sign in, and only if you allow it. Google’s sign-in shares your name and a link to your Google profile photo.
Password, if you sign up with email. Our sign-in provider stores it only in hashed form. We never see it.
Your @handle and display name. You choose a unique handle. The display name is optional.
Sign-in details. An account ID from Apple or Google if you use them. For Sign in with Apple, we also keep a token that lets us cancel your Apple sign-in when you delete your account.
Agreements. When you accepted the Terms and when you agreed to AI processing.
Account status. Whether the account has been banned for breaking the community rules.

What you share to Junk Drawer

When you share something to Junk Drawer, the share extension sends our server:

the link (web address) you shared;
any text the other app included, such as a page title or a caption;
a contact card, if one was shared. Apple Maps shares a place this way. If you share a card for a person, it is sent and processed like any other share, so please don’t share other people’s contact cards;
text read from a screenshot or photo. The app reads the text on your phone using Apple’s built-in text recognition. The image itself is never uploaded.

We store each share with your account, along with what we worked out from it: what kind of thing it is, the matches we found, how confident we were, and a technical record of each step (which service or model was used and what it decided).

Screenshot text can contain anything that was on your screen, such as messages or names. Only share screenshots you’re comfortable having processed as described here.

What you do in the app

Your saves: whether you want to do it or have done it, your rating, your note, whether it’s private or on the Fridge, and when you last did anything with it (so old saves can look old, and be cleared out if you choose).
Plans: the save you planned, the day and time, an optional note, the friends you invited, and whether each is going or declined.
Settings: which kinds of notifications you want, and whether to clear out old saves automatically.
Your picks when we couldn’t tell what something was, including a name you type yourself.
Searches you type, such as a search for the right movie or a friend’s handle. These aren’t saved to your account, but they can appear briefly in our server logs (see below).
Friends: friend requests you send and receive, your accepted friends, and people you’ve blocked.
Reports: reports you make (the reason, an optional note, and the post or person you reported), and reports other people make about your posts or account.

Technical information

Server logs. When our server handles a request, it logs the time, the address requested (which can include something you searched for), the result, and network details that may include an IP address. We use these logs only to keep the service running and fix problems.
Push notifications. If you allow notifications, the app sends us your phone’s push token (an address for delivering notifications to that phone) and its time zone, so we can send them at sensible local times. We keep a record of each notification (its text, when it was sent, and whether you opened it) for 90 days, to avoid sending too many and to stop sending kinds you ignore.
On your phone. Your sign-in session is kept in the iPhone keychain. A share that can’t be sent right away (for example, when you’re offline or signed out) waits on your phone until the app can send it.

What we don’t collect

Your precise location, or your location in the background. If a link or map pin you share contains a place’s address or coordinates, that’s part of what you shared.
Your contacts list, your photo library, or the images you share.
Advertising identifiers, analytics, or crash reports from third-party SDKs.
Payment information. The app has no purchases.

2. How we use it

To run Junk Drawer: to sign you in, file your shares, show your Drawer, show your Fridge posts to your friends, and share your plans with the friends you invite.
To send notifications you’ve allowed: plan invites, reminders and changes, friend requests, when a friend wants something you just saved, and an occasional nudge to clear out old saves.
To work out what you shared: by reading the shared page and sending text to AI services and catalogues (section 3).
To keep people safe: to check Fridge text, plan notes, and handles automatically, review reports, enforce blocks, and remove content or ban accounts that break the community rules.
To get better at filing things: we review the record of how shares were classified, including your corrections, to find and fix mistakes. We don’t train AI models on your content.
To help you: to answer support requests and send account emails, such as confirming your email address or resetting your password.

We don’t sell your data. We don’t share it for advertising. We don’t track you across other apps or websites, and we don’t build advertising profiles.

3. Who receives your data

We use the services below to run Junk Drawer. Each receives only what it needs for the job described.

Supabase: accounts and database

What they get: Everything we store: your account, sign-in details, shares, saves, plans, friends, blocks, reports, push tokens, and notification records. Supabase also sends account emails (like email confirmation and password reset).
Where: United States (Amazon Web Services, US East).

Fly.io: runs our server

What they get: Every request the app makes to our server passes through it. It also holds our server logs.
Where: United States (Virginia).

Expo: delivers notifications

Only if you allow notifications. Expo’s push service passes each notification to Apple, which delivers it to your iPhone.

What they get: Your phone’s push token and the notification itself: its text (which can name a friend and the thing you saved, like “Maya invited you to Lucali, Fri 7:30 PM”) and a link to the right screen in the app. Not your email, account details, or anything else.
Where: United States.

OpenRouter and the AI models it connects us to

OpenRouter is a service that passes our requests to AI models. We never send your name, email, or account ID to OpenRouter or to the models.

What they get, to classify a share: The text of the share: the link, page title and description, caption, the post’s author and hashtags, a shared contact card’s name, address and coordinates, text read from a screenshot, and for TikTok videos, the location tag and automatic captions. When choosing a match, the classifier also sees the list of possible matches.
Which models: DeepSeek, a large language model, reads the text to pull out the name of the thing when the share doesn’t state it plainly. Jev, a classifier made by Typesafe, decides what kind of thing it is and picks the best match.
What they get, for moderation: Before anything goes on the Fridge, an automated moderation model (also reached through OpenRouter) checks your note and any title that didn’t come from a catalogue (for example, a name you typed or a web page title). A plan’s note, and a typed title in a plan you invite friends to, are checked the same way, as are your handle and display name when you set them.
Where: OpenRouter is a US company. The companies that host the models may process the text in the United States or other countries. We ask OpenRouter to send it only to hosts that don’t store it or use it for training.

Some shares never reach an AI model. For example, an IMDb link or an Apple Maps place link names the exact item, so we look it up directly.

Catalogues and maps

To find the real thing you shared, we search these services. They receive only the search text (the name of the thing, and sometimes a year or an address). They don’t receive who you are.

TMDB (The Movie Database): Movie and TV show names.
Open Library (Internet Archive): Book names.
Wikidata (Wikimedia Foundation): Game and product names.
Apple Maps (Apple): Place and restaurant names. Sometimes also a street address, a city or neighborhood mentioned in the share, or coordinates taken from a map link or contact card you shared. If you’ve allowed location, also your approximate location (rounded to about 1 km) so nearby places come first.
OpenFreeMap: The map tiles for the Map tab. Your phone asks for the part of the map on screen, so OpenFreeMap sees your device’s IP address and that map area. It doesn’t receive your saves or who you are.

The websites and apps your links point to

Your location

When you search for a restaurant, place or event, the app can ask to use your approximate location so the right one near you comes first, and shows how far away each choice is. This is optional: say no and search works as before. The app only asks while you’re using it, never in the background. It rounds your location to about 1 km before sending it. Our server uses it for that search only, passes it to Apple Maps to find nearby places, and doesn’t store or log it. If you’ve allowed location, the app also notes your approximate location on your phone when you open it, so the share sheet can put nearby places first; the share sheet uses it only if it’s under 6 hours old and never asks for location itself. You can turn location off any time in Settings › Junk Drawer › Location.

The map. The Map tab can show where you are and list what you’ve saved nearby. For that, the app uses your location, precise if you allow it, on your phone only: it’s never sent to our servers or anyone else, and nothing is stored. If you’ve chosen approximate location, tapping Near me asks iOS for precise location for that session only. The map itself is drawn from OpenFreeMap’s servers, which see your device’s IP address and the area of the map being shown, as any online map does.

To read what a link is about, our server opens the link, just as a browser would. It also follows short links (like bit.ly or t.co) to see where they lead. For some services we use their public embed tools: TikTok, Instagram (run by Meta), and YouTube (run by Google). For TikTok videos, we also read the video page for its location tag and automatic captions.

These sites receive a request from our server for the link you shared. They don’t receive your IP address, your account, or anything else about you. For Google Maps links, we only read the place name from the link itself. We never load Google Maps pages.

If you sign in with Apple or Google, they handle the sign-in under their own privacy policies and tell us your account ID and email (and, if you allow it, your name). When you delete your account, we ask Apple to cancel Junk Drawer’s Sign in with Apple access.

Other times we may share data

If the law requires it, or to protect someone’s safety. We report child sexual abuse material to the National Center for Missing & Exploited Children and to law enforcement.
If Junk Drawer changes hands. If the app is transferred to someone else, your data would go with it, and this policy would keep applying to it. We’d tell you first.

4. What other people can see

Your Drawer is private. Only you can see saves you keep in it.
The Fridge: friends you’ve accepted see what you put there: the item, your note, your rating, whether you’ve done it, when you posted it, and your handle and display name.
Plans: friends you invite to a plan see the thing you planned, the day and time, your note, your handle and display name, and who else was invited and whether they’re going. When a friend invites you, they see whether you said you’re going or declined. A plan you decline drops out of your list.
Finding you: anyone signed in to Junk Drawer can search for your handle and see your handle and display name. People you’ve blocked, and people who have blocked you, can’t find you.
Reports: we don’t tell people who reported them. We (the developer) can see reported posts and accounts in order to review them.

5. How long we keep it

Your account, shares, saves, friends, blocks, and the reports you made: for as long as you have an account.
Deleting a save deletes it, and the original share too unless it filed other saves you still have. Dismissing a card hides it from you, but we keep the original share until you delete your account. If you want a particular share deleted sooner, email us and we’ll delete it.
Tossed saves. A save you toss (in a clear-out, or with the automatic clear-out if you turn it on) goes to your Tossed pile, where you can bring it back for 30 days. After that it’s deleted, the same way as deleting a save. The automatic clear-out is off unless you choose an age (90 days, 6 months, or a year) in Settings; it never tosses something you’ve planned.
Plans stay in your past plans until you delete your account. If the host deletes their account, the plan is deleted and the friends going are told it’s off.
Push tokens are kept until you sign out on that phone, delete your account, or Expo tells us the token no longer works. Notification records are deleted after 90 days.
When you delete your account, we delete that data from our database right away. Copies can remain in our database provider’s backups for a limited time, until they’re overwritten.
Server logs are kept for a short time by our hosting provider and then discarded.
Reports other people made about you may be kept as long as needed to handle them and enforce the community rules.
Shared catalogue records. Records for the things people save (a movie, a restaurant, an article’s page) are shared by everyone who saves them and aren’t about you. They stay after you delete your account, with no link to you. The same goes for a record you created by typing your own name for something. If you’d like one of those removed, email us.
Services in section 3 keep what they receive under their own policies. We don’t send them your identity.

6. Deleting your account

You can delete your account in the app: open your account settings and tap Delete account. This permanently deletes:

your account and profile (handle, display name, email);
all your saves and shares, including notes, ratings, and everything on your Fridge;
your friendships and friend requests;
your plans (plans you host are called off, and the friends going are told it’s off), and your answers to other people’s plans;
your push tokens and notification records, and notifications to your friends that name you;
your blocks and the reports you made.

If you used Sign in with Apple, we also cancel Junk Drawer’s Sign in with Apple access. Deleting your account can’t be undone.

If you can’t get into the app, email tylerakershaw1@gmail.com from the address on your account and we’ll delete it for you.

7. Your choices

Drawer or Fridge. Every save starts private unless you choose the Fridge. You can take a save off the Fridge at any time.
Block and report. You can block or report anyone, and report any Fridge post.
Notifications. Optional. The app asks before sending any, and you can say no. You can turn each kind (plans, friends, and nudges such as “you and a friend both want this” or a clear-out reminder) on or off in the app’s Settings, or turn them all off in Settings › Junk Drawer › Notifications on your iPhone. Signing out stops notifications to that phone.
Clear-out. Off by default. Choose an age in Settings and saves you haven’t touched in that long are tossed for you (and can be brought back for 30 days).
AI processing. Junk Drawer can’t file your shares without the AI processing described in section 3, so you need to agree to it before your shares are processed. Anything you share before agreeing waits unprocessed. You can stop sharing at any time. To withdraw your agreement, delete your account.
Your profile. You can change your handle and display name in the app.
A copy of your data, or corrections. Email us and we’ll send you a copy of your data or fix it.

Rights where you live

Depending on where you live (for example, the European Economic Area, the UK, or California), you may have the right to access, correct, delete, or get a copy of your data, and to object to or restrict how we use it. Email us to use any of these rights. We’ll respond within the time the law requires, and we won’t treat you differently for asking.

If you’re in the EEA or the UK, the legal bases we rely on are:

Contract: to provide the service you signed up for.
Consent: to send your shares to the AI services in section 3, and to send you notifications.
Legitimate interests: to keep the service safe and secure, moderate content, and fix classification mistakes.
Legal obligation: where the law requires us to keep or disclose data.

You can also complain to your local data protection authority.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.

8. Security

Data travels between the app and our server over encrypted connections (HTTPS). Your sign-in session is stored in the iPhone keychain. Our server checks who you are on every request and gives each account only its own data and its friends’ Fridge posts. Only the developer can access the systems behind Junk Drawer. No system is perfectly secure, but we work to protect your data. If a breach affects you, we’ll tell you as the law requires.

9. Children

Junk Drawer is not for children under 13. You must be at least 13, or older if the law where you live requires it. We don’t knowingly collect data from children under 13. If we learn that a child under 13 has an account, we’ll delete it. If you think a child has given us data, email tylerakershaw1@gmail.com.

10. Where your data is processed

Our server and database are in the United States. Some AI model hosts may process share text in other countries, as described in section 3. By using Junk Drawer, you understand that your data will be processed in the United States and in those countries, where data protection laws may differ from yours.

11. Changes to this policy

If we change this policy, we’ll post the new version here and update the effective date. If a change significantly affects how we use your data, we’ll tell you in the app before it takes effect.

12. Contact

Tyler Kershaw, developer of Junk Drawer
Email: tylerakershaw1@gmail.com