Privacy Policy

1. Introduction

Inventory Scan X ("the App", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the App, you agree to the practices described below. If you do not agree, please do not use the App.

2. Information We Collect

We collect the following categories of information:

• Account information: your email address, the display name you choose, and authentication credentials when you create an account. If you sign in with Apple or Google, we receive the identifier, name, and email address that provider shares with us — including Apple's private relay address if you choose to hide your email.
• User-generated content: inventories, products, photos, notes, custom form templates, export rules, PDF settings, and any other data you choose to enter or upload.
• Device and diagnostic data: device model, operating system version, app version, language, time zone, and crash and performance reports.
• Advertising identifiers: if you allow tracking, your device's advertising identifier and the related advertising and usage data. See the Advertising and Tracking section.
• Purchase information: subscription status, transaction identifiers, and renewal state for in-app purchases. We never receive or store your payment card details — those are handled entirely by Apple.
• Push notification tokens: a device token used to deliver notifications about activity in inventories shared with you.
• Camera input: when you use the barcode scanner, the camera feed is processed solely to detect barcodes. We do not record, stream, or store the live camera feed.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App.
• Authenticate you and secure your account.
• Sync your data across your devices and with members of shared inventories.
• Send transactional messages, such as account confirmation and password reset emails.
• Deliver push notifications about activity in inventories shared with you.
• Process and validate subscription purchases and renewals.
• Detect, prevent, and address technical issues, fraud, and abuse.
• Display advertising in the free version of the App, personalized only where you have granted permission — see Advertising and Tracking.
• Improve features, performance, and stability through diagnostic reports.
• Comply with legal obligations.

We do not use the contents of your inventories — your products, photos, notes, or custom fields — for advertising, and we do not sell that content.

4. Camera and Barcode Scanning

The App requests camera access to scan product barcodes. The camera feed is processed on-device in real time and is not transmitted, recorded, or stored. Photos you explicitly attach to a product or inventory are saved as part of your content and stored in our cloud storage so they can be synced across your devices and with members of shared inventories.

5. Advertising and Tracking

The free version of the App displays advertising provided by Google AdMob. Advertising is not shown to users with an active paid subscription.

Before any personalized advertising occurs, we ask for your permission:

• App Tracking Transparency (ATT): iOS asks whether you allow the App to track you across apps and websites owned by other companies. If you decline, your device's advertising identifier is not shared with AdMob for tracking, and you will see non-personalized ads instead.
• Consent management (Google UMP): if you are in the European Economic Area, the United Kingdom, or another region with equivalent requirements, we present a consent form describing the advertising purposes and vendors before ads are requested. You can reopen and change these choices at any time from Settings › Privacy in the App.

You can change your tracking choice at any time in iOS Settings › Privacy & Security › Tracking.

We do not sell your personal information for money. However, personalized advertising may be considered a "sale" or "sharing" of personal information for cross-context behavioral advertising under certain U.S. state privacy laws. Declining the ATT prompt, or withdrawing consent in the UMP form, opts you out of that processing.

6. Subscriptions and Purchases

Paid subscriptions are sold through Apple's In-App Purchase system and managed on our side by RevenueCat, which validates receipts and tracks subscription status. We receive your subscription state, transaction identifiers, and an anonymous customer identifier linked to your account. We never receive your payment card number, billing address, or Apple ID password — Apple handles all payment processing.

Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period. You can manage or cancel a subscription at any time in iOS Settings › your name › Subscriptions. Refund requests are handled by Apple; see Support for details.

7. Data Storage and Processing

Your account and content are stored using Supabase, which provides our authentication, PostgreSQL database, file storage, and server-side functions. Supabase hosts our data on cloud infrastructure located in the United States (US East — North Virginia). Data in transit is protected with TLS encryption, and data at rest is encrypted by our infrastructure providers.

Product photos are stored in a private storage bucket, accessible only to your account and to members of any inventory you have explicitly shared with them.

8. Third-Party Services

We rely on the following third-party providers, each governed by its own privacy policy. We share with these providers only the data necessary to deliver their services to you:

• Supabase — authentication, database, file storage, and server-side functions.
• Apple — Sign in with Apple, the App Store and In-App Purchases, and the Apple Push Notification service.
• Google — Sign in with Google, offered through Supabase's authentication service.
• Google AdMob and the Google User Messaging Platform — advertising in the free version of the App and the consent form that governs it.
• RevenueCat — validation and management of subscription purchases.
• Sentry — crash and performance diagnostics used to find and fix defects.
• Resend — delivery of transactional emails such as account confirmation and password resets.

9. How We Share Information

We share data only in the following situations:

• Shared inventories: when you invite or accept other users into a shared inventory, the contents of that inventory — including products, photos, and notes — are visible to those users, and your display name appears in its activity history.
• Service providers: the trusted vendors listed above, who process data on our behalf under confidentiality and data protection agreements.
• Advertising partners: as described in Advertising and Tracking, and only where you have granted the relevant permission.
• Legal requirements: when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of our users or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred.

10. Your Rights and Choices

Depending on your jurisdiction (including the GDPR in the EU/UK and the CCPA/CPRA in California), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Request a portable copy of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent, including advertising consent.
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.

You can delete your account and all associated data at any time from Settings › Account › Delete Account. You can export your inventories to CSV or PDF at any time from within the App. To exercise any other right, contact us using the details below.

11. Data Retention

We retain your information for as long as your account is active or as needed to provide the App. When you delete your account, your inventories, products, photos, form templates, and settings are permanently deleted from our active systems immediately, and the associated records held by our subscription provider are deleted as well. Residual copies are removed from backups within 30 days, except where we are required to retain certain records to comply with legal obligations or resolve disputes.

12. Security

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, encryption at rest, role-based access controls, and PostgreSQL row-level security policies that ensure each user can only access their own data or data explicitly shared with them. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Children's Privacy

The App is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

14. International Data Transfers

If you access the App from outside the country where our servers are located, your information may be transferred to, stored, and processed in countries with data protection laws that differ from your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect your data during international transfers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you within the App or by email. Your continued use of the App after the changes take effect constitutes acceptance of the revised policy.

16. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, contact us and we will respond as soon as reasonably possible. You can also reach us with the Send Feedback option in the App's Settings.