Gallo Fino · GALLO FINO IP LLC
Privacy Policy
FINO Verify (iOS) · Last updated June 25, 2026
This policy explains what we collect across the FINO Verify iOS app and the FINO Wholesale web portal, why, and how we handle it. We keep this plain and honest: we collect only what we need to run your account, we do not run any advertising or analytics SDKs, and we do not track you across other apps or websites.
The short version. FINO Verify is an invite-only app for Gallo Fino wholesale partners and customers. To run your account it stores your email and name, and — if you sign up as a wholesale partner — your store name and the contact handles you choose to add (Instagram, WhatsApp, phone). It stores the orders you look up or claim, and a securely hashed password if you set one. The FINO Verify iOS app may also store a device token if you allow push notifications. We do not sell your data, we do not show ads, and we do not embed third-party tracking.
1. Who we are
FINO Verify is published by GALLO FINO IP LLC (operating the Gallo Fino brand), Chino Hills, California, USA. For any privacy question or request, contact admin@gallofinosupport.com.
2. Who the app is for
FINO Verify is an invite-only app for two groups: Gallo Fino wholesale partners (approved businesses that order from us) and customers who buy our hats and want to view and verify their items and orders. It is not a general-public, ad-supported app.
3. What we collect
We only collect information you provide or that your device sends to run the app's features:
| Data | When / why we collect it |
|---|---|
| Email address | When you create an account or sign in (email/password or Sign in with Apple). Used to identify your account, look up your orders, send sign-in and account emails, and contact you about support. |
| Name | From your sign-up or your sign-in provider, and editable in your profile. Used to personalize your account. |
| Password (hashed) | If you sign up with email/password. We never store your actual password — only a one-way salted hash (PBKDF2). We cannot read it back. |
| Store name & contact handles (wholesale) | Optional. If you use the app as a wholesale partner, you may add your store name and the contact handles you choose to share — Instagram username, WhatsApp number, and phone. Used to identify your business and stay in touch about orders. |
| Shipping / order details | For wholesale checkout, the address and order items you enter so we can prepare your order and shipping. Address suggestions are powered by Google Places, and labels by Shippo. |
| Shipping payment | For wholesale checkout, shipping charges are paid through Stripe. Stripe processes your card directly; we receive a confirmation and the purchase record (what you bought), but we do not store your full card number. |
| Orders you view or claim | When you look up or claim an order with an order number and email, we confirm it against our store records and link it to your account so it appears in your order history and hat collection. |
| Basic diagnostics | To keep the app reliable we log non-identifying technical events (e.g. a screen that failed to load, app version, iOS version, an error reason). These never include your email, password, address, or message content. |
FINO Verify iOS app
The FINO Verify iOS app includes a few app-only features. When you use those features, we may collect or store:
- Device push token (APNs): if you allow notifications, Apple issues a device token that we store so we can send you push notifications, such as a support reply. This is an Apple-issued identifier for your device, not a tracking ID.
- Profile photo: optional. If you set an avatar in the app, the image is stored for your account.
- In-app support messages: if you contact support in the app, we store the messages you send so we can read and reply.
4. What we do NOT do
- We do not use any third-party advertising or analytics SDKs.
- We do not track you across other companies' apps or websites, and we do not build advertising profiles.
- We do not sell or rent your personal information.
- We do not access your contacts, microphone, or location.
- We do not collect data from people we have no relationship with — the app is invite-only.
5. How we use your information
- To create and secure your account and sign you in.
- To show your orders, your hat collection, and (for wholesale) to prepare and ship your orders.
- To send account, verification, and password-reset emails.
- To send push notifications you've opted into (such as a reply to your support thread).
- To answer your support requests.
- To keep the app working — diagnosing errors and reliability problems.
6. Sign in with Apple
You can create your account with Sign in with Apple. We receive only the information Apple shares to confirm your identity — a unique provider identifier, and your email and name where you've allowed it. If you use Apple's Hide My Email relay, we store the relay address; we never receive your real email. We verify this sign-in on our server and never use it to access anything else in your Apple account.
7. FINO Verify iOS app
Push notifications
Push notifications are optional and only work if you allow them. When you do, Apple's Push Notification service (APNs) gives us a device token that we store to deliver notifications. Notification content is kept generic (for example, "You have a new reply") so sensitive details don't appear on your lock screen. You can turn notifications off at any time in iOS Settings; if you do, your device token stops receiving them and is removed when it is no longer valid.
Profile photos, support, and device sessions
In the FINO Verify iOS app, you can edit your name, profile photo, and (for wholesale users) store and contact details. You can also message support from the app and sign out of individual devices or sessions.
8. Where your data is stored & how it's secured
Our backend runs on Cloudflare. Account and order data is stored in Cloudflare's D1 database; app-only images such as FINO Verify profile photos are stored in Cloudflare R2 storage. All traffic between the app, web portal, and our servers is encrypted in transit (HTTPS/TLS).
- Passwords are stored only as a one-way salted hash (PBKDF2) — never in plain text.
- Sessions use revocable tokens, and we never store your raw session token in a readable form.
- Access to your data is limited to running the app's features and providing support.
9. Service providers
We share data only with the providers needed to run the app, and only for that purpose:
- Cloudflare — hosting, database, and image storage for our backend.
- Apple — Sign in with Apple, and Apple Push Notification service for notifications.
- Shopify — our store platform, used to confirm and display your orders.
- Stripe — payment processing for shipping charges at wholesale checkout. Stripe handles your card details directly; we do not store full card numbers.
- Google Places — address autocomplete when you enter a shipping address, so addresses are accurate. We send what you type into the address field to return suggestions.
- Shippo — generating shipping labels and rates. We share the order's name and shipping address to buy postage and produce a label.
- An email delivery provider — to send account, verification, and password-reset emails.
These providers process data on our behalf; we do not authorize them to use it for their own advertising.
10. Data retention
We keep your account information for as long as your account is active so the app keeps working for you. Diagnostic logs are short-lived and kept only as long as needed to operate and troubleshoot the app. When you ask us to delete your account, we remove your personal information from our active systems as described below. Some records may be retained where required for legitimate business or legal reasons (for example, order and tax records).
11. FINO Wholesale web portal
The FINO Wholesale web portal at partners.finowholesale.com is the browser-based surface for approved wholesale partners to sign in, manage orders, and request account help. Password changes for the web portal happen through /forgot-password. For portal support or privacy questions, contact admin@gallofinosupport.com.
12. Your choices & deletion requests
You are in control of your data:
- Edit your name and, for wholesale accounts, store and contact details through the surface you use.
- Change your web portal password through /forgot-password.
- For the FINO Verify iOS app, you may edit your profile photo, sign out of individual devices or sessions, and turn push notifications on or off in iOS Settings.
- Request a copy of your data, or request deletion of your account and personal information.
To request access or deletion, email admin@gallofinosupport.com from the address on your account. FINO Verify iOS app users may also message us from the app's support screen. We'll confirm and process your request.
13. Children
FINO Verify is intended for businesses and adult customers. It is not directed to children under 13, and we do not knowingly collect personal information from them.
14. Changes to this policy
We may update this policy as the app evolves. When we make a meaningful change we'll update the "Last updated" date above and, where appropriate, notify you in the app.
15. Contact
Questions or requests about your privacy:
admin@gallofinosupport.com
GALLO FINO IP LLC · Chino Hills, California, USA