Privacy Policy.

Summary

Smart Inventory is built and operated by NonZeroApps ("we", "us", "our"). We respect your privacy. The app works fully offline — your inventory lives on your device and we don't see it unless you opt into cloud backup. We never sell your data, and we never share your inventory contents with third parties.

This policy describes what information we collect, how we use it, and the choices available to you. By using Smart Inventory, you agree to the terms below.

Information We Collect

Information you provide

• Account information. When you register for a Premium account, we collect your email address and (for sign-in with Google or Facebook) a unique identifier from that provider. We never receive your password for third-party sign-ins.
• Inventory data. If you enable cloud backup, the items, groups, tags, additional fields, quantity history, photos, and barcode values you've created are stored on our servers under your account.
• Support correspondence. Messages you send to support@nonzeroapps.com are stored to help us reply.

Information collected automatically

• Device data. App version, operating system version, and device model — used to debug crashes and prioritize compatibility.
• Usage analytics. Pseudonymous, aggregated usage statistics (for example which screens are opened), collected via Google Firebase Analytics. These are tied to a per-installation identifier, not to your name or email address. In the Android app (version 1.10.0 and later), Firebase Analytics is told not to store or read that identifier until Google's consent check has run for your device. If you use the Android app from the European Economic Area, the United Kingdom, or Switzerland, it then stores or reads that identifier only with your consent, which you can give or withdraw under Settings → Ad Privacy Options (see Ad and analytics consent). Elsewhere, in earlier Android versions, and in the iOS app, the app does not currently offer an in-app switch for this; uninstalling the app stops the collection, and clearing the app's data resets that identifier.
• Crash reports. When the app crashes, a stack trace is sent via Firebase Crashlytics. No personal data is included.
• Purchase data. Google Play tells us whether your account has an active Premium subscription. We don't see your card or banking details.

Information we do NOT collect

• Your GPS or precise location — the app requests no location permission. (Ads served by Google do use an approximate location derived from your IP address; see Advertising.)
• Your contacts.
• Your other apps or device storage outside the Smart Inventory folder.
• Audio, microphone input, or camera frames outside scanning sessions (camera images are processed locally and not transmitted).

How We Use Your Information

• To provide and improve Smart Inventory's features.
• To sync your inventory between devices (only if you enable cloud backup).
• To send transactional emails — for example, critical-stock alerts you've subscribed to, or account-related messages.
• To respond to your support requests.
• To prevent fraud, abuse, and security incidents.
• To comply with our legal obligations.

We do not use your inventory contents to train machine-learning models or share with advertisers.

Cloud Storage & Sync

Cloud backup is a Premium-only feature, opt-in. When enabled:

• Your inventory is uploaded over an encrypted connection (TLS) and stored on our cloud infrastructure.
• Only the account owner — and devices using the same account credentials — can read your inventory.
• Photos are uploaded and stored on the same infrastructure, separate from inventory text data.
• You can delete your cloud data at any time from Settings → User Settings → Delete Cloud Data.

If your Premium subscription expires, we retain your cloud data for a grace period (currently 90 days) before automatic deletion. Local data on your device is not affected.

Third-Party Services

Smart Inventory uses a small set of trusted services to function. Each is governed by its own privacy policy:

• Google Play Billing — handles Premium subscriptions. We never see your payment details.
• Google Firebase — provides our cloud database, analytics, and crash reporting.
• Google Drive (optional, Premium only) — if you choose to back up exports to Drive, the app uses Google's authorized OAuth flow. We never see your Drive content; the integration is direct between your device and Google.
• Google AdMob — serves ads to non-Premium users (see Advertising below).
• Google Analytics 4 & Firebase Performance (Google LLC) — website usage and performance measurement, only with your consent.
• Sentry (Functional Software, Inc.) — website error and crash diagnostics, only with your consent.

Advertising

The free version of Smart Inventory shows ads provided by Google AdMob. AdMob may use a non-identifying advertising ID from your device to serve more relevant ads. You can reset or limit this ID from your Android settings (Settings → Google → Ads). On iOS, we ask for App Tracking Transparency permission in context — only when you choose to watch a rewarded ad, and only if you have not already answered. You can change that answer at any time in iOS Settings → Privacy & Security → Tracking. Users with Premium — an active subscription or a one-time purchase — are not shown ads at all.

US state privacy choices. If you use the app from a US state with its own privacy law, Google's US States privacy message is shown instead of the European consent form. Your choice there is recorded on your device using the IAB Global Privacy Platform signal, which the Google Mobile Ads SDK reads in the same way. In the Android app (version 1.10.0 and later), if you opt out there of the sale or sharing of your personal information or of targeted advertising, the app also tells Google Analytics for Firebase to deny ad_user_data and ad_personalization, which Google defines as consent to send user data to Google for advertising purposes and consent to personalized advertising; analytics_storage and ad_storage stay granted, so usage analytics continue. The app derives this on your device from the recorded signal; it never passes the signal itself to Google Analytics for Firebase or to our servers, and never logs it. If the recorded signal cannot be read, or uses a newer US state section the app does not yet support, the app denies those two signals as a precaution.

Ad and analytics consent in the EEA, the UK, and Switzerland

If you use the Smart Inventory mobile app from the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent through Google's User Messaging Platform (UMP), a Google-certified Consent Management Platform (CMP) that implements the IAB Europe Transparency & Consent Framework (TCF). In the Android app (version 1.10.0 and later), the choices you make there cover usage analytics as well as ads. Everything this section says about usage analytics in the Android app applies from that version. The consent form is shown inside the app, and we do not request an ad until Google's consent SDK confirms we have a valid basis to do so.

Our legal basis for personalized advertising and, in the Android app (version 1.10.0 and later), for usage analytics linked to the per-installation analytics identifier — and for storing or reading the information on your device that makes them possible — is your consent (Article 6(1)(a) of the GDPR and UK GDPR, and Article 5(3) of the ePrivacy Directive as implemented in your country). You are free to refuse. Refusing costs you nothing: no feature of Smart Inventory is withheld, reduced, or delayed if you decline, and you are not asked to pay instead.

Your choices are recorded as the standard IAB TCF signals (IABTCF_gdprApplies and IABTCF_PurposeConsents), which the UMP SDK stores locally on your device — in the app's own preferences on Android and in app storage on iOS. Smart Inventory never copies these signals to its own servers, and we cannot read them remotely. The Google Mobile Ads SDK reads them on your device and — this is how the Transparency & Consent Framework is designed to work — passes your recorded choice to Google and to the advertising vendors involved in serving that particular ad, so each of them applies the same decision you made. The partners that may receive it are listed by Google under Ad technology providers and, for framework participants, on the IAB Europe Global Vendor List. Google acts as an independent controller for the advertising it serves; for users in the EEA, Switzerland, and the UK the Google entity is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In the Android app (version 1.10.0 and later), your choices also control Google Analytics for Firebase. The app turns them into Google's four Consent Mode signals, each simply granted or denied, and passes only those — never the TCF signals themselves: analytics_storage (whether the per-installation analytics identifier may be stored and read) and ad_storage (whether device identifiers related to advertising may be stored and read) are granted only if you consented to TCF Purpose 1, "Store and/or access information on a device"; ad_user_data only if you consented to Purposes 1 and 7, "Measure advertising performance"; and ad_personalization only if you consented to Purposes 3 and 4, "Create profiles for personalised advertising" and "Use profiles to select personalised advertising". These signals follow your choices for the purposes listed; a choice about an individual vendor in the vendor list, including Google, does not currently change them. Where these consent rules do not apply to you, analytics_storage and ad_storage are granted once Google's consent SDK has answered for your device, and ad_user_data and ad_personalization are granted too unless your US state privacy choice, or a signal the app cannot read, denies them (see above). On every Android device, in every region, all four start as denied and stay denied until the app knows your decision; if the app cannot reach Google's consent service, the consent state last recorded on your device applies (on a first launch, that is the denied default).

While analytics_storage is denied, Google states that Firebase Analytics does not store or read the analytics identifier, but still sends usage events (for example which screens are opened) to Google without that identifier or any other device or user identifier. Google receives your IP address as part of the connection and uses these events to estimate aggregate usage through modelling.

If you decline ad personalization, you are not cut off from the free version — you continue to see ads, but they are non-personalized: chosen from general context such as the app you are using rather than from an advertising profile built from your past behaviour. Non-personalized ads are not data-free — they still use a limited set of signals, including an approximate location derived from your IP address, the content and context of the app, and a device identifier used for frequency capping, aggregated reporting, and detecting fraud and abuse. If your consent state cannot be established at all (for example the consent form could not be loaded), we request no ads for the time being rather than serving an ad without a valid signal. In the Android app, usage analytics depend on a separate choice in the same form: if you do not consent to Purpose 1, Firebase Analytics does not store or read the per-installation analytics identifier, so your use of the app is no longer linked to it; usage events are still sent without it, as described above.

You can change your decision at any time, and withdrawing consent is as easy as giving it. Where these rules apply to you, the mobile app shows an Ad Privacy Options entry under Settings that reopens the consent form, so you can grant or withdraw your consent whenever you like. In the Android app, a change you make there to these consent choices also applies to usage analytics straight away, without restarting the app; after you withdraw, usage events are still sent without the analytics identifier, as described above. A choice made in Google's US States privacy message does not currently change whether usage analytics may use the analytics identifier. Withdrawing does not affect the lawfulness of advertising served or analytics collected before you withdrew, and it never removes access to any part of the app. If you cannot reach the form on your device, email support@nonzeroapps.com and we will action your request.

If you have permanent Premium on Android — an active subscription or a one-time purchase — the consent form is not shown to you automatically, because you are never served ads. From version 1.10.0, the app still checks, without showing a form, whether you recorded a decision earlier (for example before you bought Premium) and applies it to usage analytics as described above; if these rules apply to you and you never recorded one, the analytics identifier stays unused. Settings shows the Ad Privacy Options entry whenever Google's consent service reports that it applies to you, so you can give or change your decision yourself. On iOS the form is currently presented at launch to everyone in a covered region, including Premium users; since Premium users are never served an ad, any choice recorded there has no practical effect.

Learn more about AdMob's practices: AdMob Privacy →

Cookies & Website Analytics

Our website uses cookies and similar technologies, grouped by purpose. Nothing in the analytics or diagnostics categories runs before you consent through our cookie banner; you can accept, reject, or change your choice at any time via "Cookie preferences".

• Strictly necessary (always active, no consent needed). Keep the site working and remember your cookie choice. These cannot be switched off.
• Analytics & performance (off by default, only with your consent). Google Analytics 4 and Firebase Performance Monitoring, provided by Google LLC, help us measure aggregate usage and page-load performance. They use pseudonymous identifiers and your IP address (handled and truncated by Google). We do not use them for advertising.
• Error diagnostics (only with your consent). Sentry, provided by Functional Software, Inc. (dba Sentry), captures technical error and crash details so we can keep the site stable. No inventory content is sent.

Rejecting analytics or diagnostics does not affect site functionality. These website choices are separate from the mobile app: the cookie banner controls this site only. In the app, usage analytics follow the consent described under Ad and analytics consent: in the Android app (version 1.10.0 and later) in the EEA, the UK, and Switzerland, the Ad Privacy Options entry in Settings controls whether usage analytics may use the per-installation identifier; elsewhere, in earlier Android versions, and in the iOS app, the app does not currently offer an in-app analytics switch (see Information We Collect).

International Data Transfers

Our cloud infrastructure and some of our processors — including Google LLC and Functional Software, Inc. (Sentry) — are located in the United States. If you use Smart Inventory from the EU/EEA, the United Kingdom, Turkey, or elsewhere, your data may be transferred to and processed in the US. These transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses, with equivalent safeguards for the United Kingdom and Turkey.

Data Retention

• Account & cloud data: kept as long as your account is active. After cancellation, deleted within 90 days unless legally required to retain longer.
• Support correspondence: kept for up to 2 years.
• Analytics & crash logs: retained according to Firebase's default policies (typically up to 14 months for analytics, 90 days for crash reports).

You can request immediate deletion of all your data by emailing support@nonzeroapps.com from the email address tied to your account.

Your Rights

Depending on where you live (GDPR for EU/EEA, CCPA for California, KVKK for Turkey, similar laws elsewhere), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent to processing at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@nonzeroapps.com. We'll respond within 30 days.

Children's Privacy

Smart Inventory is not directed to children under 13 (under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For material changes, we'll notify Premium users by email or via an in-app notice before the change takes effect. Your continued use of Smart Inventory after the effective date constitutes acceptance.

Contact

For any privacy-related questions or requests:

NonZeroApps
Ankara, Turkey
Email: support@nonzeroapps.com