Privacy Policy

Last updated: 2025-09-21

1. Summary

Itemaro is an offline-first inventory app. By default, your data is stored locally on your device and is not transmitted to our servers. Optional features may request device permissions to perform core app functions (e.g., barcode scanning, photos, local Bluetooth transfer). We do not sell your data and we do not share it with third parties except as described below (e.g., Google Play Billing).

2. Data we process (default offline usage)

• Local app data: projects, items, quantities, prices, locations, notes, tags, usage history/logs; stored locally in the app storage.
• Camera & media access: used for barcode scanning and taking/attaching item photos. Photos remain on your device unless you export or share them.
• Files & storage: to create local exports/backups (CSV, PDF, XLSX) that you explicitly save or share.
• Biometrics/PIN: optional app lock using the device’s OS APIs. We do not receive or store biometric raw data.
• Bluetooth (optional): device-to-device transfer/sync without cloud.
• Network access: may be used for updates, license/purchase verification and in-app purchases. App content is not uploaded to our servers in the default offline mode.

Legal basis (GDPR): Art. 6(1)(b) performance of a contract (app functionality) and Art. 6(1)(f) legitimate interests (security, fraud prevention).

3. In-app purchases

Payments are processed by Google Play Billing (Google Ireland Limited) as an independent controller. We do not receive your payment card details. We only obtain purchase status/receipts required to unlock Pro/Premium features.

4. Optional cloud features

Currently, Itemaro does not provide cloud sync by default. If cloud sync is introduced and explicitly enabled by you, Itemaro may use Google Firebase (processor) to store inventory data and media for the purpose of cross-device sync and backup. In that case you will be informed in-app and in this policy, including data types, recipients, retention and your controls.

5. Data sharing

• We do not sell your personal data.
• We do not share data with third parties except:
  • Google Play Billing for purchases/licensing, as described above.
  • If optional cloud sync is enabled in the future: Firebase (Google) as a processor.
  • Where required by law.

6. Retention

Local data remains on your device until you delete it or uninstall the app. If optional cloud sync is enabled in the future, cloud data will be retained until you delete it or request deletion.

7. Security

Data is stored locally in the app’s private storage. Optional PIN/biometric lock can protect access. We apply the principle of data minimization and request only the permissions needed for core features.

8. Your rights (GDPR)

You have the rights of access, rectification, erasure, restriction, portability and objection (Arts. 15–21 GDPR). To exercise these rights or request deletion (including any cloud data if enabled), contact us at anfrage@bsm-onlinehandel.com.

9. Children

Itemaro is not directed to children under 13 (or the age defined by local law). We do not knowingly collect data from children.

10. Changes

We may update this policy. The current version will always be available at itemaro.com/privacy.

This privacy policy is intended to satisfy Google Play’s Privacy Policy requirement and complements the Data Safety declarations in Play Console.