Privacy Policy — Gemians: Theme Sections
Last updated: 9 November 2026
This policy explains what information the Shopify app Gemians: Theme Sections ("the app", "we") collects when a merchant installs and uses it, what we do with it, and when we delete it.
The app is provided by Harry Xuan, an individual in Vietnam, who publishes it under the name Gemians. Questions about this policy: harry@gemcommerce.com.
What the app does
The app installs Gemians Product details, a buy box for product pages, and pre-built page templates into a Shopify store's theme. The merchant chooses what to install; the app writes those files into the theme the merchant selects, and can remove them again. The merchant can also write to us from inside the app.
It also includes a Sticky add to cart app embed, which you can turn on in your theme editor. It runs in your storefront and talks only to your store; it sends nothing to us.
What we collect
When you install the app, Shopify provides us with:
- your store's
myshopify.comdomain; - an access token, and a refresh token, that let the app act on your store only within the permissions you granted — reading and writing theme files;
- the list of permissions you granted, and when the token expires.
We use offline access, which is tied to the store rather than to a staff member. We do not receive or store the name, email address or other details of the staff member who installs or uses the app.
Shopify gives every app you install access to the store owner's contact details — name, email address, phone number and address — and its install screen says so ("View staff and contributor data — Store owner"). Gemians never requests or reads this data.
When you install a page template, the app reads one file from the theme you chose — the existing template for that page type — so it can build the new template around your theme's own content. That file is processed in memory and written back to your theme. In the same request it checks whether the app's own template for that page type is already on the theme, so it can ask you before replacing it. Each time you open the app, and before it adds or removes files, it checks which of its own files are on the theme you picked, by name only, so it can show you what is already there. We do not keep a copy of your theme's files.
When you use Check my setup, the app reads the Gemians template and your other product templates on the theme you chose, and checks Product details' files on that theme, to show which setup steps are done. It processes them in memory and keeps nothing from them.
Setup records. When you first add Gemians Product details to a theme, the app records the date and the theme, because your refund window starts then (Terms of Service, section 4). When you mark Product details as live, it records that, with the date and the product you name.
When you send us a message from the app, the support form sends it with your store's myshopify.com domain. It fills in, for you to see and change, the theme and the item you are asking about, the setup step you are on, and the reference code of your latest error, which the app remembers for up to a day, in memory only. If you ask about a line of Check my setup, that line goes with your message. If you bought Gemians Product details and ask us to look at your product page, a summary of your latest product page check on that theme goes with it: the template, the date, the suggestions worth adding and how many lines asked you to check. To know whether you can still ask, the app checks when you bought Product details and whether you have asked before; it keeps nothing new for that. You add your message, links to a page or a screenshot if you like, and the email address where you want our reply. The app does not fill in that address from your Shopify account. When you send it, the app reads from your store the theme's name, role and version, and the version of the item's files on that theme, and saves them with your message. It keeps your message in its database, so we can follow it up. Our support mailbox collects it from the app and files it as an email from the address you gave, so our reply goes straight to you. Please don't include your customers' details; we don't need them.
When something isn't working with an item and we open a case for it, the app keeps a record of the case, linked to your message: the item; the purchase it is about, as Shopify reports it when the case opens (Shopify's ID for it, its date and its price); when we had what we needed to start, and any time we were waiting for you; and our decision under the Terms of Service (section 4), its date and our note on it. We use it to fix the item and to apply the refund terms.
When you buy an item, you approve and pay on Shopify's own page, through Shopify's billing. The app sees which of its items your store has bought, and the status, date and price of each purchase; it never sees card or bank details. Apart from the case and refund records described here, it does not keep a list of your purchases: it asks Shopify each time it needs to know.
Your answer about discount apps. Above Buy, the app asks whether you use a discount or bundle app, and which one if you say yes. You don't have to answer. If you do, the app saves your answer, the app you name and the date when you click Buy, because a conflict with another app counts only if that app was in your store when you bought (Terms of Service, section 4).
When we refund an item, the app keeps a record of the refund: Shopify's ID for the purchase, the item, the amount, the date, the reason under the Terms of Service, and when we checked that its files were removed from your themes, or our note of why that could not be checked. Before we refund, the app reads the names of the item's files on each of your themes, to check they are gone. It needs this record because a refunded purchase may still show as active in Shopify, and the app must not treat a refunded item as bought.
The product page check. When you run it, the app reads the product template you pick, your theme's app embeds and header, and, if you give it a link, the public page of that product in your online store, as any visitor would see it; it does not read a store that has a storefront password, and never asks for it. It works out which parts of a product page are there, for example a reviews block or a subscription option, and which apps' blocks are in your product template. It keeps the result of your latest check of each template, the product you checked and the date, so it can show them to you again, and the suggestions you choose to hide. It never keeps a copy of your theme's files or of the page.
Choosing a product. In the product page check and in Product details' setup, you can choose a product in Shopify's product picker instead of pasting a link or typing a name. Shopify then passes that one product to the app, in your browser. The app uses its address, its name and the theme template it uses to fill in the form for you, and keeps only what it would keep if you had typed them: the product you check, and the product name you mark as live.
Records of how the app is used. The app records some actions taken in it, with the time: when it is authorized on your store; when you run the product page check, how the check ended and whether your theme's buy box is one the check has studied; which buttons you use on the check's suggestions; when you open the page of Gemians Product details, start a purchase or complete one; and when you mark Product details as live. A record holds the item or the part of the check involved, never your theme, your products, a link or anything you type. Each record is filed under a code made from your store's domain with a secret key, not under the domain itself, so the records alone don't say which store they came from.
We do not collect:
- any information about your customers;
- orders, or anything a buyer enters into your store;
- product data from your Shopify admin, other than the one product you choose, as described under Choosing a product;
- payment card details;
- analytics or tracking data from third parties. The app contains no third-party analytics, tracking or advertising code and sets no tracking or advertising cookies. It keeps its own records of how the app is used, described above, without your store's domain. During sign-in, Shopify's authentication library may set short-lived, strictly necessary cookies that protect the login process; they carry no personal information and are removed when sign-in completes. If you dismiss the app's "Get started" card, your browser remembers that choice locally; it is not sent to us.
The permissions the app requests — read and write access to themes, and nothing else — do not allow it to access customer, order or product data. Shopify's product picker shows your products to you, not to the app, and passes the app only the product you choose.
How we use it
Only to provide the app: to show you your themes, to write or remove the files you choose, to check which paid items your store has bought, to answer your messages and fix problems, and to apply the refund terms. The records of how the app is used serve only to see, across all stores, which parts of the app help merchants. We do not sell this information, share it for advertising, or use it for any other purpose.
Files we write to your theme
The app writes files into your theme, all named with gemians: sections, snippets and assets whose names begin with gemians-, and templates named <page type>.gemians.json or <page type>.gemians-<name>.json. It writes only under those names, so it never modifies your theme's own files or its layout, settings or translations.
These files are part of your theme. They stay there if you uninstall the app, because the app loses access to your store at the moment of uninstall. To remove them, use "Remove all Gemians files" in the app before uninstalling.
Help in your store
If we work in your store with you (Terms of Service, section 11), you approve a collaborator request in your Shopify admin and choose what it can access; we ask only for themes and products. We use that access only for the work you asked for, inside your Shopify admin. We do not copy or export your store's data, and we do not use it for anything else. When we are done, we ask you to remove our access.
Who else processes this information
- Shopify, which operates the platform the app runs on.
- Render Services, Inc. ("Render"), which hosts the app, in its US East (Virginia) region.
- Render, which also stores the information described above, in its managed Postgres database in the same region.
- Google LLC, whose Google Workspace hosts our support mailbox: the emails you send us, the messages you send from the app, which a Google Apps Script in the mailbox collects from the app, and our replies.
- Anthropic, PBC, whose Claude API helps us draft replies to emails in our support mailbox, which can include messages you send from the app. It receives those emails, including the sender's address and subject. A person reads every draft and sends the reply.
How long we keep it
- When you uninstall the app, we delete your store's access token and session, the results of the product page check and the suggestions you hid. Our database provider's point-in-time recovery backups can still hold the deleted rows for up to 3 days, after which they are gone.
- Your messages from the app, the case, refund and setup records, and your answer about discount apps, stay while the app is installed and after you uninstall it, until Shopify sends us its deletion request for your store, which it does after you uninstall. We then delete them, and anything else that remains about your store, except the line described next. If you have installed the app again by the time that request arrives, we keep them while the app is installed, and the request that follows your next uninstall deletes them.
- The records of how the app is used are deleted 13 months after they are made, or sooner, when Shopify sends its deletion request for your store. Uninstalling does not delete them.
- When we delete your store's data, we keep one line for each refund: Shopify's ID for the refunded purchase, the amount and the date. It holds nothing else about your store, not even its domain or the item, and we keep it as our record of the payment.
- The reference code of your latest error is kept in the app's memory for up to a day, and is lost when the app restarts.
- Emails in our support mailbox, including messages sent from the app, stay there as our record of the help we gave. To have yours deleted, contact us.
- Our hosting provider keeps server logs, which contain your store's domain and the type of event we received, for 7 days. When adding or removing files, or starting a purchase, fails, the log line also holds the theme and item involved, the names of any files Shopify did not confirm, the error message, and a reference code we show you so support can find it. When saving or passing on a message from the app fails, the log line holds your store's domain, the message's number if it has one, and the error. While you use the app, the log also holds how fast its pages loaded in your browser: the page and the timings Shopify measures, with nothing that identifies you. It never holds the contents of your theme's files, or the messages you send us.
Requests about your customers' data
Because the app never accesses customer data, we hold none. If Shopify forwards a customer's request to access or delete their data, we respond that we hold no data for that customer. Requests about data in your store itself should go to you, the merchant.
Security
The information the app stores, access tokens included, is kept in Render's managed Postgres database, which encrypts data at rest, backups included, and accepts no connections from outside Render. Access tokens are only ever sent over HTTPS, to Shopify.
The app hands your messages to our support mailbox only when the mailbox's script asks for them, over HTTPS, with each request signed by a key that only the app and that script hold; without it, the app gives nothing. Only the Gemians team can open the screen where we follow up your messages, cases and refunds.
Your rights
Depending on where you are, you may have the right to access, correct or delete personal information we hold about you. We hold the store-level data described above and, if you write to us, the email address and the messages you sent. To make a request, contact harry@gemcommerce.com.
Changes
We will update this page if what the app collects changes, and change the date at the top.
Contact
Harry Xuan (Gemians), Vietnam — harry@gemcommerce.com