Privacy notice
What we collect, and what we do with it
This is a plain-language notice of what the product actually does today. The formal privacy policy is with counsel; this page states the facts now, so nobody has to create an account without knowing them.
Who is responsible
Mobile Inventory, contactable at [email protected]. A postal address and registered entity will be added when counsel confirms them.
What we collect
- Account: your email, your name if you give one, a password hash (never the password), and sign-in times.
- Shop: the shop name, locations, team members and their roles.
- Inventory: items, SKUs, barcodes, quantities, suppliers, counts, purchase orders and the stock movement history — including who made a change, when and from which device.
- Billing: the store or billing provider's customer and subscription identifiers. Card details are handled by Google Play, the App Store or the payment provider; they never reach this service.
- Operational: error reports (without your inventory data), and security logs of requests.
We do not run advertising or third-party analytics tags on this site, and we do not sell or rent data to anyone.
Why we hold it
- To provide the service you signed up for — the account, the shop, the ledger (contract).
- To keep it secure and diagnose failures (legitimate interest).
- To meet tax and accounting duties when a paid plan exists (legal obligation).
- To email you the reports you switch on. You can turn them off at any time in Settings.
Where it is stored, and who processes it
- Supabase — database, authentication and file storage, hosted in Frankfurt (EU).
- Cloudflare — the website and its delivery network.
- Resend — transactional email (confirmation, password reset, reports), when enabled.
- RevenueCat, Google Play and Apple — subscription state, when store billing is live.
- Sentry — error reports from the website and app, without stock data.
How long we keep it
Shop data stays while the shop exists. Deleting your account deletes your membership; deleting the shop deletes its inventory and history. Live records are removed immediately. Encrypted backups run on a daily cycle with a recovery point of up to 24 hours, so a deleted record can persist in a backup until that cycle overwrites it — and it is not restored on request. Email delivery records are kept for troubleshooting and then expire.
Your choices
- See and take it: export your data as JSON, CSV or Excel from Settings.
- Correct it: edit items, locations and your profile in the product.
- Delete it: delete your account in the app or web console, or use the deletion page if you cannot sign in.
- Ask us: write to [email protected]. You also have the right to complain to your data protection authority.
Cookies and local storage
The site stores your session so you stay signed in, and remembers your theme on this device. There are no advertising cookies. Cloudflare may set security cookies as part of protecting the site.
Children
The service is for businesses and is not intended for anyone under 16.
Changes
If this notice changes in a way that matters, the change is dated here and announced in the product. The formal policy, with the registered entity, transfers and retention periods confirmed by counsel, will replace this notice when it is ready.
Last updated: 22 October 2026.