Legal

Privacy Policy

Last updated 18 September 2026

This policy explains what personal data WORTHALYZE collects when you use worthalyze.com, why we collect it, and what rights you have over it. We have tried to write it the way we would want to read it ourselves.

1. Who we are

KM TECH LABS ("we", "us", "our") is a company based in Kristiansand, Norway (Organisation No. 934 044 029). We develop and operate WORTHALYZE, a deterministic tool that scores whether a phone upgrade is worth it. For the purposes of data protection law, KM TECH LABS is the data controller for the personal data described below.

2. Information you give us

  • Account details. If you create an account, we collect the email address and password you provide. Authentication is handled by our provider, Supabase; we never see or store your password in plain text.
  • Your comparison inputs. The device you own, its purchase date, condition, battery health and storage, the priorities you set, and the candidate device you are considering. These describe the phones being compared, not you personally.
  • Payment details. Handled entirely by Stripe, our payment processor. We never see or store your card number — only confirmation that a payment succeeded, plus billing status such as your plan and renewal date.

3. Information kept only in your browser

Your saved device profile, your comparison history and your free-verdict count are stored locally in your browser, using its built-in storage, not on our servers. This data stays on the device and browser you used it in, is never transmitted to us, and disappears if you clear your browser storage or switch devices. This is true whether or not you are signed in.

4. Information collected automatically

Like most websites, the infrastructure that hosts WORTHALYZE may automatically log standard technical information — such as IP address, browser type and request timestamps — for security, abuse prevention and reliability. We do not run advertising or cross-site tracking cookies on WORTHALYZE, and we do not use this information for advertising.

5. How we use your information

  • To create and secure your account, and to enforce the free-tier limit.
  • To process payments, manage subscriptions and single-analysis credits, and know which comparisons you have unlocked.
  • To run the comparison engine and show you your result.
  • To respond to support requests and keep the service working correctly.

We do not sell your personal data, and we do not use it to train or feed any AI model. The engine that produces your verdict is fixed arithmetic, not a language model, and it never uses your personal data beyond the device details you enter for that one comparison.

6. Who we share it with

We share personal data only with the processors WORTHALYZE is built on, only to the extent needed to run the service:

  • Supabase, for account authentication and database hosting.
  • Stripe, for payment processing, billing and subscription management.

We do not sell, rent or otherwise share your personal data with anyone else, including advertisers.

7. International transfers

Supabase and Stripe may process data on infrastructure located outside Norway and the EEA. Where that happens, it takes place under recognised safeguards for international data transfers, such as the EU Standard Contractual Clauses.

8. How long we keep it

We keep your account and billing records for as long as your account is active, and afterwards for as long as we are required to for accounting or legal purposes. Data stored only in your browser is kept until you clear it yourself — we have no way to access or delete it remotely, because we never receive it.

9. Your rights

If you are in the EU/EEA, or another jurisdiction with similar protections, you have the right to access, correct, delete or export the personal data we hold about you, and to object to or restrict certain processing. Where processing depends on your consent, you may withdraw it at any time. You also have the right to lodge a complaint with your national data protection authority — in Norway, the Datatilsynet. See "Contact us" below.

10. Children

WORTHALYZE is not directed at children, and we do not knowingly collect personal data from anyone under 16.

11. Security

Card payments are handled by Stripe under its PCI-compliant infrastructure, so your card details never reach our servers at all. We combine this with access controls on our own database. No online service can guarantee perfect security, but we take reasonable technical and organisational steps to protect your data.

12. Changes to this policy

We may update this policy as WORTHALYZE evolves. Material changes will be reflected by updating the date at the top of this page.

13. Contact us

We are finalising a dedicated contact channel for privacy requests, which will be published here. In the meantime, subscription and billing questions can be handled directly from your account using Manage subscription on the Pricing page.