Mister1920 App — Privacy Policy

Last updated: 2026-09-10

This policy explains what the Mister1920 mobile app ("the app") collects, why,

and who it is shared with. It covers the app only. Purchases you make are

processed by Shopify on mister1920.com and are also governed by the

[Mister1920 store privacy policy] and [Shopify's privacy policy].

Mister1920 ("we", "us") is the data controller for the app.

Contact: orders@mister1920.com.

---

1. What the app is

The app is a companion for existing Mister1920 customers: browse products,

manage subscriptions, track orders, and use the 1920 Club rewards program.

Checkout happens in a secure Shopify-hosted web page inside the app — we never

see or store your card details.

2. Information we collect

You provide it

Data	When	Why
Email address, name	When you sign in with your Shopify account	Authenticate you; show your orders, subscriptions and rewards; send support replies
Shipping / billing addresses	Shown from your Shopify account	Display your order and subscription details (cached on your device and briefly on our server; Shopify remains the primary system where your customer, order, and address information is maintained)
Birth month & day (optional)	If you add it in Rewards	Award your annual birthday reward. Sent to our loyalty provider (Appstle). Optional — the app works without it.
Support messages	When you use "Contact us"	Answer your question (relayed to our support inbox by email)

Collected automatically

Data	Why
A random per-install identifier ("device ID")	Tie your in-app activity together for analytics and advertising measurement. It is generated on your device, not derived from device hardware, and is reset if you reinstall.
App activity: screens viewed, products viewed, categories browsed, items added to bag, checkouts started, subscriptions started, rewards redeemed, products shared, sign-ins	Understand how the app is used and measure the performance of our advertising (advertising use on iOS requires your permission — section 5)
Purchase amount and the items in an order	Measure advertising performance ("this ad led to this sale"). Sent from our server when an app order is paid.
IP address and device/browser user-agent	Our servers and infrastructure providers receive your IP address as part of normal network requests and short-term operational logs. We do not maintain it as a field in your Mister1920 customer profile. When analytics/advertising events are sent, the IP and user-agent are included so the advertising and analytics providers can match activity to a person or household and estimate approximate (city-level) location.
Push notification token, notification preferences	Send the notifications you opt into (shipping updates, subscription reminders, and — only if you opt in — promotions)
Diagnostic data from app updates (e.g. update success/failure)	Deliver over-the-air fixes reliably

We do not collect your precise location, contacts, photos, microphone, or

health data. The app does not read your device's advertising identifier (IDFA /

Android Advertising ID).

3. How we use your information

• Provide the app: sign-in, order history, subscription management, rewards.
• Loyalty program: points, tiers, rewards, birthday reward.
• Communications: transactional and subscription push notifications; support

replies; promotional push only if you opt in (off by default).

• Analytics: understand feature usage and improve the app.
• Advertising measurement: attribute engagement and purchases to our ad

campaigns on Meta, Google and TikTok, and build audiences for those campaigns.

Data sent for this purpose includes a one-way hashed (SHA-256) version of your

email used for matching by the advertising platform, the random device ID, IP

address, user-agent, and the events listed above. **On iOS this only happens

if you allow it — see section 5.**

• Security and fraud prevention; legal compliance.

We do not sell your personal information for money.

4. Who we share it with

We share the minimum needed, with providers acting on our instructions:

Provider	What they receive	Purpose
Shopify	Your account, orders, addresses, cart and checkout	Core commerce. Shopify is the primary system where your customer, order and address information is maintained.
Appstle (Subscriptions)	Your customer ID and the contents, delivery schedule and status of your subscriptions, plus changes you make (skip, swap, pause, cancel)	Run and let you manage your subscriptions
Appstle (Loyalty & Rewards)	Your customer ID, points activity, birth month/day (if provided), and reward redemptions	Run the 1920 Club — points, tiers, rewards, birthday reward
Judge.me	Order and product identifiers	Product reviews
Resend	Your name, email and message	Deliver "Contact us" emails to our support inbox
Omnisend	A flag that you use the app	Avoid sending you duplicate email/SMS for things the app already notifies
Expo (EAS)	Push token, app-update diagnostics	Push delivery and app updates
Meta, Google (Google Analytics 4 / Google Ads), TikTok	A one-way hashed version of your email, the random device ID, IP address, user-agent, and the app-activity and purchase events above	Advertising measurement, attribution and audience building. On iOS, only if you allow tracking (section 5).

These advertising platforms process the data under their own terms and may

combine it with data they already hold. Their policies:

Meta Privacy Policy,

Google Privacy Policy,

TikTok Privacy Policy.

We may also disclose information if required by law, to enforce our terms, or in

a merger or sale of the business.

5. Advertising and your choices

• **App activity, a hashed email, the random device ID, IP address and

user-agent are shared with Meta, Google and TikTok for advertising

measurement, attribution and audience building.** The advertising platforms

may combine this with data they already hold about you.

• On Apple devices, before any of this activity is shared for that purpose

the app asks for your permission through Apple's App Tracking Transparency

prompt. If you choose "Ask App Not to Track", we do not share your in-app

activity, hashed email or identifiers with the advertising platforms for

cross-company measurement or audience building. The rest of the app —

sign-in, orders, subscriptions, the 1920 Club, notifications — works exactly

the same.

• On Android, there is no equivalent in-app prompt today, and the app does

not read your device's Advertising ID — so changing or resetting it in

Settings has no effect on this sharing. To limit how Meta, Google or TikTok

personalise ads with what we send them, use their account settings

directly. To stop the sharing itself, contact orders@mister1920.com.

• The app does not read your device advertising identifier (IDFA on Apple

devices, Advertising ID on Android) on either platform.

• Reinstalling the app resets the random device ID.
• Turning off "Sales & promotions" in the app's Account → Notifications

stops promotional push (it is off by default).

6. Data retention

• On your device: your sign-in session, a cached copy of your profile, your

bag, and issued reward codes — cleared when you sign out or uninstall.

• On our servers: we keep only your registered device and push token, your

notification preferences, a log of processed store webhooks, and your

back-in-stock ("notify me") requests. Analytics and advertising events are

**forwarded to our analytics and advertising providers and are not maintained

as a persistent event history on Mister1920 servers.** Cached

profile/address/loyalty data carries a short time-to-live.

• The advertising platforms retain data per their own policies.
• Shopify retains order and account data per its policies and your store

account settings.

7. Your rights

Depending on where you live (e.g. EEA/UK GDPR, California CCPA/CPRA), you may

have the right to access, correct, delete, or port your data, to object to or

restrict processing, and to opt out of "sharing" for cross-context behavioural

advertising.

• In the app: Account → "Delete account & data". You can choose to (a)

delete only the app-specific data we hold — your registered device and push

token, notification preferences, and back-in-stock requests — or (b) request

deletion or anonymisation of your Mister1920 customer account and associated

personal data held by us and by Shopify.

• On the web: the same options are available at [Delete your data]

(https://mister1920.com/pages/app-data-deletion) without reinstalling the app.

• Certain records (for example completed-order and payment records) may be

retained where required for tax, accounting, fraud-prevention or other legal

obligations.

• To exercise any other right, email orders@mister1920.com. We respond within

the time your law requires (generally 30–45 days).

We will not discriminate against you for exercising these rights.

8. Children

The app is for customers 16 and older and is not directed to children. We do not

knowingly collect data from children.

9. International transfers

We and our providers may process your data in the United States and other

countries. Where required, transfers rely on appropriate safeguards such as the

EU Standard Contractual Clauses.

10. Security

Data is encrypted in transit (HTTPS/TLS). Your sign-in session and reward codes

are held in the device's secure keystore. We never store card details — Shopify

handles payments end to end.

11. Changes

We will update this policy as the app changes and revise the "Last updated"

date. Material changes will be highlighted in the app.

12. Contact

orders@mister1920.com — Mister1920, 971 US Highway 202N, STE 4471, Branchburg, NJ 08876.

Delete your data: https://mister1920.com/pages/app-data-deletion

Mister1920 store privacy policy: https://mister1920.com/policies/privacy-policy