Privacy Policy

This page is maintained by the Takeover Secret Shop team and describes how the web app and the iOS/Android apps handle information. Last updated 2026.

Who we are

Takeover Secret Shop is a marketplace where businesses order mystery shops and verified shoppers complete scorecards. We are the app owner and are responsible for the data described below.

Information we collect

  • Account information — name, email address and the role you choose (business or shopper). If you sign in with Google, we receive your name, email and profile image from Google.
  • Business and shop details — company name, industry, shop locations, due dates, scorecard selections and pricing.
  • Scorecard submissions — section scores, written comments and photos you upload as proof of a visit.
  • Technical information — basic log and error data generated when the app runs, used to keep it working.

We do not ask for payment card numbers in the app, and we do not collect device location in the background.

How we use information

  • Create and secure your account and show the right screens for your role.
  • Match open shops to shoppers and deliver completed scorecards to the business.
  • Generate written experience reports from a submission's scores, comments and photo context using an AI model provider. Report content is stored with the submission.
  • Operate, debug and improve the service.

We do not sell your personal information and we do not use it for advertising.

Sharing and service providers

We share information only with the providers needed to run the app: our hosting and backend platform (our secure cloud provider, which stores the database, authentication and photo files), Google when you choose Google sign-in, and the AI model provider that generates report text. Scorecards, comments and photos for a shop are visible to the business that ordered that shop and to platform administrators.

Storage, retention and security

Accounts, shops, scorecards and reports are kept while your account is active. Photos are stored in a private file bucket and are not publicly listed. Access is restricted by row-level database rules so businesses see their own shops and shoppers see the jobs assigned to them. No online service can be guaranteed perfectly secure, and this page is not a security certification or an audit result.

Your choices and deletion

You can edit your submissions before a report is finalized, and you can remove photos you uploaded. To access, correct, export or delete your account and its data, email rcrautos@gmail.com. We respond to deletion requests within 30 days.

Children

The service is intended for people 18 and older. We do not knowingly collect information from children.

Changes and contact

If this policy changes, we will update this page and its date. Questions or privacy requests: rcrautos@gmail.com.