Privacy Policy – Inventory

Last Updated: 30. Oct. 2026

1. Introduction

Inventory ("the App") is committed to protecting your privacy. We believe that your business data — inventory, customers, sales, and finances — belongs to you, and you alone. This Privacy Policy explains how Inventory handles your information to ensure your privacy remains uncompromised.

2. Data Collection

Core App: We Collect Nothing.

Inventory does not collect, process, store, or transmit any personal data for its core functionality.

• No Data Collection: We do not collect your name, email address, location, inventory records, customer data, sales figures, or any other personal or business information.

• No Device Data: We do not access your device's advertising ID, unique identifiers, or hardware information.

• No Usage Data: We do not track how you use the app, how long you use it, or what you enter.

Feedback: Optional and Explicit.

If you choose to submit feedback or a feedback comment, we process the following:

• A unique identifier (UUID) generated on your device, used to link your feedback and comments to you.

• The text of your feedback or comment.

• The timestamp of your submission.

We do not collect your name, email address, or any other directly identifying information unless you voluntarily include it in your feedback text.

Legal basis: Legitimate interest – Art. 6(1)(f) GDPR. We link your feedback to you so you can identify and manage your own submissions.

Tips via Stripe (External Link):

The App includes a link that opens Stripe's payment page in your browser. If you choose to send a tip, your payment data is processed directly by Stripe (Stripe, Inc., 510 Townsend St, San Francisco, CA 94103, USA). We do not collect, store, or process your payment data.

As the recipient of the tip, we receive payment metadata from Stripe (amount, transaction ID, timestamp, and the email address you provide at checkout). This is processed under Art. 6(1)(b) GDPR (contractual necessity) and retained for accounting purposes.

For details on how Stripe handles your data, see Stripe's Privacy Policy.

3. How the UUID Works

• One UUID is generated on your first feedback submission and stored securely on your device.

• The same UUID is reused across all subsequent submissions.

• The UUID persists if you uninstall and reinstall the app.

• A factory reset of your device removes the UUID.

4. Data Storage

Core App: 100% Offline & Local.

• Local Only: All your inventory items, customer contacts, sales records, receipts, and cashflow data are stored exclusively on your device.

• No Cloud Storage: We do not use any cloud services, servers, or third-party databases for your business content. Your data never leaves your device unless you explicitly choose to export or back it up yourself.

• No Internet Connection: The App functions entirely offline. No internet connection is required to manage inventory, record sales, track cashflow, or view receipts.

Feedback: Feedback and comments are transmitted over TLS and stored on encrypted servers. No other data is transmitted.

5. Your Responsibility as a Data Controller

Inventory is a tool. If you store customer contacts, names, or other personal data of your customers within the App, you are the data controller for that data. You are responsible for complying with applicable data protection laws (e.g., GDPR) regarding how you collect, use, store, and delete your customers' personal information. The App itself does not process, transmit, or share that data on your behalf.

6. Third-Party Sharing

Inventory does not share any data with third parties. We do not sell, rent, or trade your data. Because we collect no data for core functionality, there is nothing to share. We do not use any third-party analytics, advertising networks, or tracking libraries.

No third-party crash reporting SDK is used. Crash data is collected by Apple / Google under their respective privacy policies. Stripe is used solely for processing optional tips via an external link. We do not share user data with Stripe.

7. Security & Encryption

• PIN Security: The App includes a built-in PIN security feature to protect your local business data from unauthorized access.

• Open Source: Inventory is an open-source application. This means our code is transparent and can be audited by anyone to verify that no hidden data collection or transmission occurs.

• Local Backups: If you choose to create backups, they are stored locally on your device or on storage you control (e.g., Files app). We do not have access to these backups.

• UUID Storage: The UUID is stored in the iOS Keychain / Android Keystore, which provides hardware-level encryption.

• Feedback Transmission: Feedback data is transmitted over TLS and stored on encrypted servers.

8. Retention

• Your UUID persists on your device until you unlink it or perform a factory reset.

• Feedback and comments (unmarked) are retained until you delete or unlink them.

• Feedback and comments marked with '💪' by our team are retained permanently as a record of the issue and its resolution.

• Your business data (inventory, contacts, sales, receipts, cashflow) is retained on your device until you delete it. We have no access to it.

9. Your Rights

Under GDPR you have the right to:

• Access – Request a copy of all personal data we hold about you (Art. 15).

• Rectification – Correct inaccurate data (Art. 16).

• Erasure – Delete your data, subject to the restriction below (Art. 17).

• Restriction – Limit processing (Art. 18).

• Objection – Object to processing based on legitimate interest (Art. 21).

• Data portability – Receive your data in a structured format (Art. 20).

• Complaint – Lodge a complaint with your local data protection supervisory authority (Art. 77).

In-app: You can unlink your UUID from all feedback and comments, or delete individual feedback entries, via Settings → Privacy.

Exception to erasure: Feedback marked with '💪' by our team cannot be deleted by you. This is necessary for us to maintain a record of the issue and its resolution. If you wish to request deletion of such entries, contact us and we will review your request.

10. Unlinking

When you unlink your UUID:

• The UUID is removed from all your feedback and comments.

• The mapping between your UUID and your submissions is destroyed.

• The feedback content is retained but can no longer be traced back to you.

After unlinking, you cannot manage or delete your previous submissions.

11. Children's Privacy

Inventory is not intended for use by children under the age of 13. Because we collect no data for core functionality, we do not knowingly collect personal information from children. The optional feedback feature is not designed for use by minors.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the App and on this page. Your continued use of Inventory after any changes constitutes your acceptance of the new policy.

13. Contact Us

If you have any questions about this Privacy Policy or the Inventory application, please contact us via:

Email: hello@mylife.plus
GitHub Repository: https://github.com/mylife-plus/Inventory

14. Compliance

Inventory complies with all applicable data protection laws, including the GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act). For core app functionality, we do not process any personal data — your business data never leaves your device. For the optional feedback feature, processing is based on legitimate interest and is fully transparent as described above.

Key changes from the SpaceTime version:

• App name, GitHub repo, and all references updated

• "memories, photos, videos, audio recordings, categories, and contacts" → "inventory items, customer contacts, sales records, receipts, and cashflow data"

• New Section 5 (Your Responsibility as a Data Controller): This is the critical addition. Since the app stores other people's data (your customers), you need to make clear that the user is the controller for that data and the app is merely a tool. Without this, a regulator could theoretically argue the app is a processor on behalf of the user, which would require a DPA (Data Processing Agreement).

• Children's Privacy: updated to the softer wording from the earlier discussion

• Section 8 adds a line clarifying that business data retention is entirely under the user's control