Loading page content
How PWA: Home Screen App uses store data
This page describes what the app does with data from your Shopify store, as built today. It adds detail to the HappifyApps privacy policy.
Version 0.1.0 · Reviewed against the app’s code on 2026-10-04
In short
PWA: Home Screen App reads your theme and products to set up the installable store. It has no order or customer access. The storefront embed counts install events per store, without identifying shoppers.
All Happify apps run on one platform and one Postgres database (Supabase), hosted with the apps on Vercel. Store data is kept once per store, not once per app: if you install two Happify apps, they read the same copy of your products, inventory and orders.
Permissions and why
| Shopify permission | Used for |
|---|---|
| read_themes | Check the theme and app embed status for setup and the store kit installer. |
| read_products | Read product metafield definitions for the store kit installer, and keep the shared product catalog current. |
What the app stores
- Your branding settings
- Install funnel events: event name and time per store, with no shopper identifier
- Products and variants (shared catalog)
- An audit log of branding changes
Customer data
None. The app has no order or customer access and does not need protected customer data approval.
Changes the app makes in Shopify
- Nothing in Shopify
Who else receives data
| Recipient | Purpose | Data |
|---|---|---|
| Your webhook endpoint | Install events (Pro, off by default) | Event name, your store domain and storefront origin. |
Hosting is on Vercel and Supabase, listed on our Sub-processors page. We do not sell data or use it for advertising.
Storefront, checkout, POS and Sidekick
- The embed adds a web app manifest and a small banner script to your storefront.
- It stores one item in the shopper’s browser (localStorage), the time they dismissed the banner, so it stays hidden for 7 days. It sets no cookies.
- Install events are sent with your store domain only.
Uninstall and privacy webhooks
Shopify sends every app these mandatory webhooks. This is what the app does with each.
| Webhook | What happens |
|---|---|
| app/uninstalled | Marks the app as uninstalled and its subscription as cancelled, and stops syncing for it. Nothing is deleted at this point: Shopify sends the shop redaction request below 48 hours later, and any other Happify app on the store keeps working meanwhile. |
| customers/data_request | Logged on receipt. We prepare the customer’s data by hand and send it to you, the merchant, within 30 days. |
| customers/redact | Removes the customer’s name and email from the customer record; their name, email, phone and addresses from their orders; their contact details from Local Delivery Sheet run stops, along with any proof of delivery photo or signature for those stops; stored webhook records about them; and their email address wherever it was logged as an email recipient. Order lines and totals stay, so your sales history still adds up. |
| shop/redact | Deletes this app’s data for your store: its installation and encrypted access token, subscription record, settings, app-specific data (such as delivery runs and proof of delivery, zones, internal order notes), audit log entries and webhook records. The shared store data (products, inventory, orders, customers) is deleted too when no other Happify app is installed on the store. If one is, the shared data stays for that app, cut down to the customer details it needs. |
Retention
- This app’s data is deleted when Shopify sends its shop redaction request, 48 hours after the app is uninstalled. Shared store data is deleted then too, unless another Happify app is still installed on the store; in that case it is deleted with the last app’s redaction.
- There is no fixed expiry for synced data while an app is installed; inventory snapshots and order history build up over time because history is what the analysis uses.
- Webhook payloads are emptied as soon as they have been processed; a delivery that failed keeps its payload for troubleshooting. Webhook delivery records are deleted after 30 days.
- Audit log entries are deleted after one year, except saved settings and zone versions, which are kept while the app is installed so you can restore them. Audit entries do not record customers’ email addresses.
- Encrypted database backups are deleted 90 days after they are taken, so data deleted from the live database can remain in a backup for up to 90 days.
Security
- Shopify access tokens are encrypted at rest (AES-256-GCM). Database tables are reachable only from our servers; the browser never talks to the database.
- Inside Shopify admin the app identifies your store from Shopify’s signed session token on every request. It never trusts a store name passed in a URL.
Requests and questions
To ask for a copy of your store’s data, or to have data deleted sooner, use the support form with the topic “Data, privacy or deletion”, or email admin@happifyapps.com. Settings in the app also has a “Download account data” button.