Privacy Policy

This Privacy Policy describes how Inventory (“we”, “us”) collects, uses, and shares information when you use the Inventory mobile app and the backend services that support it.

1. What we collect

We collect the minimum information needed to operate the app:

• Account information — your email address, and (for social sign-in) a stable identifier from Apple or Google. We do not receive your name, profile picture, or contacts unless you provide them yourself.
• Inventory content you create — the items, categories, tags, descriptions, locations, quantities, and photos you choose to record in the app.
• Subscription state — whether you have an active subscription, the product identifier, and the current billing period end date. Payment details are handled by Apple and are never sent to our servers.
• API access tokens you create or that are issued to MCP clients (Claude Code, Claude Desktop, etc.) when you authorize them.
• Operational logs — request timestamps, IP addresses, and error traces, retained for a short period to keep the service running and secure.

2. How we use it

We use the information above only to:

• Provide the inventory features (storing, searching, and serving your items and photos).
• Authenticate you and the assistants you authorize.
• Enforce free-tier limits and verify your subscription status.
• Diagnose errors and protect the service against abuse.

We do not sell your data, and we do not use it to train AI models.

3. Photo recognition

When you add an item from a photo, the photo is sent to Anthropic’s Claude vision API to suggest a draft (name, category, tags). The photo is processed only to produce the draft; per Anthropic’s policy, it is not retained for training. The photo itself is also stored in our object storage so it can be displayed alongside the item in the app.

4. Who we share with

We share data only with the third parties we depend on to deliver the service:

• Anthropic — for the vision API call described above and for MCP traffic you initiate from Claude.
• Apple and Google — only the information you supply to them for sign-in.
• RevenueCat and Apple App Store — for subscription billing and entitlement state.
• Our hosting and storage providers — to run the backend and store your photos.

5. Data export and deletion

You can download a complete copy of your data from the app at any time. You can also delete your account, which permanently removes all your items, photos, API keys, and authorized assistant connections from our systems. Operational logs containing your data are removed within 30 days of deletion.

6. Security

Passwords are stored as bcrypt hashes. API keys are stored as SHA-256 hashes (the plaintext key is shown to you only once at creation). All traffic between the app, the backend, and third-party services uses TLS.

7. Children

Inventory is not directed at children under 13 and we do not knowingly collect personal information from them.

8. Changes

If we make material changes to this policy, we will update the “Last updated” date above and, where appropriate, notify you in the app.

9. Contact

Questions about this policy? Email support@flybywire.se.