Privacy Policy.

Summary

Smart Inventory is built and operated by NonZeroApps® ("we", "us", "our"). We respect your privacy. The app works fully offline — your inventory lives on your device and we don't see it unless you opt into cloud backup. We never sell your data, and we never share your inventory contents with third parties.

This policy describes what information we collect, how we use it, and the choices available to you. By using Smart Inventory, you agree to the terms below.

Information We Collect

Information you provide

• Account information. When you register for a Premium account, we collect your email address and (for sign-in with Google, or with Facebook or X (Twitter) for older accounts that were already linked to one of them) a unique identifier from that provider. We never receive your password for third-party sign-ins.
• Sign in with Apple. If you sign in with Apple in the iPhone app, Apple gives us a unique identifier for your Apple Account, your email address (or, if you choose Hide My Email, a private relay address that forwards to it) and, on the first sign-in only, the name you choose to share. We never receive your Apple Account password.
• Inventory data. If you enable cloud backup, the items, groups, tags, additional fields, quantity history, photos, and barcode values you've created are stored on our servers under your account.
• Support correspondence. Messages you send to support@nonzeroapps.com are stored to help us reply.

Information collected automatically

• Device data. App version, operating system version, and device model — used to debug crashes and prioritize compatibility.
• Usage analytics. Pseudonymous, aggregated usage statistics (for example which screens are opened), collected by our analytics provider. These are tied to a per-installation identifier, not to your name or email address. In the Android app (version 1.10.0 and later), the analytics service is told not to store or read that identifier until Google's consent check has run for your device. If you use the Android app from the European Economic Area, the United Kingdom, or Switzerland, it then stores or reads that identifier only with your consent, which you can give or withdraw under Settings → Ad Privacy Options (see Ad and analytics consent). Elsewhere, in earlier Android versions, and in the iOS app, the app does not currently offer an in-app switch for this; uninstalling the app stops the collection, and clearing the app's data resets that identifier.
• Crash reports. A technical error report (stack trace and device details) is sent to our crash and error monitoring provider when the app crashes. We do not put your inventory content or account details into it.
• Purchase data. Google Play tells us whether your account has an active Premium subscription. We don't see your card or banking details.
• App Store purchase data. In the iPhone app, Apple's App Store tells the app which Premium plan you bought, its transaction ID, and when it renews or expires. Apple handles the payment; we don't see your card or banking details.
• Notification token. The Android and iPhone apps, and your browser if you turn on notifications there, get a notification token that we store with your account. We use it only to send you notifications, such as payment problems or a reminder to finish setting up. The token goes to our notification delivery provider. You can turn notifications off at any time in your device's or browser's settings. Turning notifications off on the web settings page, signing out of the web app or deleting your account removes the token, and we also remove tokens that are no longer valid.

Information we do NOT collect

• Your GPS or precise location — the app requests no location permission. (Ads served by Google do use an approximate location derived from your IP address; see Advertising.)
• Your contacts.
• Your other apps or device storage outside the Smart Inventory folder.
• Audio, microphone input, or camera frames outside scanning sessions (camera images are processed locally and not transmitted).

How We Use Your Information

• To provide and improve Smart Inventory's features.
• To back up and download your inventory between devices (only if you enable cloud backup).
• To send transactional emails — for example, critical-stock alerts you've subscribed to, or account-related messages.
• To respond to your support requests.
• To prevent fraud, abuse, and security incidents.
• To comply with our legal obligations.

We do not use your inventory contents to train machine-learning models or share with advertisers.

Cloud Storage & Backup

Cloud backup is a Premium-only feature, opt-in. When enabled:

• Your inventory is uploaded over an encrypted connection (TLS) and stored on our cloud infrastructure.
• Only the account owner — and devices using the same account credentials — can read your inventory.
• Photos are uploaded and stored on the same infrastructure, separate from inventory text data.
• You can delete your cloud data at any time from Settings → User Settings → Delete Cloud Data.

If your Premium subscription expires, we retain your cloud data for a grace period (currently 90 days) before automatic deletion. Local data on your device is not affected.

Third-Party Services

Smart Inventory uses a small set of trusted services to function. Each is governed by its own privacy policy:

• Google Play Billing — handles Premium subscriptions. We never see your payment details.
• Apple App Store & Sign in with Apple (Apple Inc.) — handle Premium subscriptions bought in the iPhone app and the optional Sign in with Apple. We never see your payment details or your Apple Account password.
• Hosting and cloud infrastructure provider — hosts our servers and cloud database, and delivers notifications.
• Google Drive (optional, Premium only) — if you choose to back up exports to Drive, the app uses Google's authorized OAuth flow. We never see your Drive content; the integration is direct between your device and Google.
• Advertising partners, including Google — serve ads to non-Premium users (see Advertising below).
• Analytics provider — usage and performance measurement for the website (only with your consent) and for the app (see Information collected automatically above).
• Crash and error monitoring provider — error and crash diagnostics for the app and, only with your consent, for the website.
• Email delivery provider — sends account and service emails (for example welcome, password reset and purchase notices) and, only if you agreed, campaign emails.
• Sign-in providers (Google; Apple; Facebook and X for older linked accounts) — verify your identity when you sign in.
• Public authorities and professional advisers — where the law requires it, or to establish, exercise or defend legal claims.

Advertising

The free version of Smart Inventory shows ads provided by our advertising partners, including Google. They may use a non-identifying advertising ID from your device to serve more relevant ads. You can reset or limit this ID from your Android settings (Settings → Google → Ads). On iOS, we ask for App Tracking Transparency permission in context — only when you choose to watch a rewarded ad, and only if you have not already answered. You can change that answer at any time in iOS Settings → Privacy & Security → Tracking. Users with Premium — an active subscription or a one-time purchase — are not shown ads at all.

iPhone. The iPhone app shows ads only when you choose to watch one to unlock temporary Premium access. Before our advertising partners can use your device's advertising identifier (IDFA), iOS asks for your permission with Apple's App Tracking Transparency prompt. If you don't allow tracking, the IDFA is not shared and you can still watch ads, but they are less relevant. You can change this at any time in Settings → Privacy & Security → Tracking. Apple’s guide →

US state privacy choices. If you use the app from a US state with its own privacy law, Google's US States privacy message is shown instead of the European consent form. Your choice there is recorded on your device using the IAB Global Privacy Platform signal, which Google's advertising software reads in the same way. In the Android app (version 1.10.0 and later), if you opt out there of the sale or sharing of your personal information or of targeted advertising, the app also tells the analytics service to deny the two settings that Google defines as consent to send user data to Google for advertising purposes and consent to personalized advertising; the settings for storing and reading the analytics identifier and advertising-related device identifiers stay allowed, so usage analytics continue. The app derives this on your device from the recorded signal; it never passes the signal itself to the analytics service or to our servers, and never logs it. If the recorded signal cannot be read, or uses a newer US state section the app does not yet support, the app denies those two settings as a precaution.

Ad and analytics consent in the EEA, the UK, and Switzerland

If you use the Smart Inventory mobile app from the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent through Google's User Messaging Platform, a Google-certified Consent Management Platform (CMP) that implements the IAB Europe Transparency & Consent Framework (TCF). In the Android app (version 1.10.0 and later), the choices you make there cover usage analytics as well as ads. Everything this section says about usage analytics in the Android app applies from that version. The consent form is shown inside the app, and we do not request an ad until Google's consent service confirms we have a valid basis to do so.

Our legal basis for personalized advertising and, in the Android app (version 1.10.0 and later), for usage analytics linked to the per-installation analytics identifier — and for storing or reading the information on your device that makes them possible — is your consent (Article 6(1)(a) of the GDPR and UK GDPR, and Article 5(3) of the ePrivacy Directive as implemented in your country). You are free to refuse. Refusing costs you nothing: no feature of Smart Inventory is withheld, reduced, or delayed if you decline, and you are not asked to pay instead.

Your choices are recorded as the standard IAB TCF signals, which the consent form stores locally on your device — in the app's own preferences on Android and in app storage on iOS. Smart Inventory never copies these signals to its own servers, and we cannot read them remotely. Google's advertising software reads them on your device and — this is how the Transparency & Consent Framework is designed to work — passes your recorded choice to Google and to the advertising vendors involved in serving that particular ad, so each of them applies the same decision you made. The partners that may receive it are listed by Google under Ad technology providers and, for framework participants, on the IAB Europe Global Vendor List. Google acts as an independent controller for the advertising it serves; for users in the EEA, Switzerland, and the UK the Google entity is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In the Android app (version 1.10.0 and later), your choices also control usage analytics. The app turns them into four settings for Google's analytics service, each simply allowed or not allowed, and passes only those — never the TCF signals themselves: storing and reading the per-installation analytics identifier, and storing and reading device identifiers related to advertising, are allowed only if you consented to TCF Purpose 1, "Store and/or access information on a device"; sharing data with Google for advertising is allowed only if you consented to Purposes 1 and 7, "Measure advertising performance"; and personalised advertising is allowed only if you consented to Purposes 3 and 4, "Create profiles for personalised advertising" and "Use profiles to select personalised advertising". These settings follow your choices for the purposes listed; a choice about an individual vendor in the vendor list, including Google, does not currently change them. Where these consent rules do not apply to you, storing and reading the analytics identifier and the advertising-related device identifiers are allowed once Google's consent service has answered for your device, and sharing data with Google for advertising and personalised advertising are allowed too unless your US state privacy choice, or a signal the app cannot read, denies them (see above). On every Android device, in every region, all four start as not allowed and stay not allowed until the app knows your decision; if the app cannot reach Google's consent service, the consent state last recorded on your device applies (on a first launch, that is the denied default).

While the analytics identifier is not allowed, Google states that its analytics service does not store or read it. It still sends usage events (for example which screens are opened) to Google without that identifier or any other device or user identifier. Google receives your IP address as part of the connection and uses these events to estimate aggregate usage through modelling.

If you decline ad personalization, you are not cut off from the free version — you continue to see ads, but they are non-personalized: chosen from general context such as the app you are using rather than from an advertising profile built from your past behaviour. Non-personalized ads are not data-free — they still use a limited set of signals, including an approximate location derived from your IP address, the content and context of the app, and a device identifier used for frequency capping, aggregated reporting, and detecting fraud and abuse. If your consent state cannot be established at all (for example the consent form could not be loaded), we request no ads for the time being rather than serving an ad without a valid signal. In the Android app, usage analytics depend on a separate choice in the same form: if you do not consent to Purpose 1, the analytics service does not store or read the per-installation analytics identifier, so your use of the app is no longer linked to it; usage events are still sent without it, as described above.

You can change your decision at any time, and withdrawing consent is as easy as giving it. Where these rules apply to you, the mobile app shows an Ad Privacy Options entry under Settings that reopens the consent form, so you can grant or withdraw your consent whenever you like. In the Android app, a change you make there to these consent choices also applies to usage analytics straight away, without restarting the app; after you withdraw, usage events are still sent without the analytics identifier, as described above. A choice made in Google's US States privacy message does not currently change whether usage analytics may use the analytics identifier. Withdrawing does not affect the lawfulness of advertising served or analytics collected before you withdrew, and it never removes access to any part of the app. If you cannot reach the form on your device, email support@nonzeroapps.com and we will action your request.

If you have permanent Premium on Android — an active subscription or a one-time purchase — the consent form is not shown to you automatically, because you are never served ads. From version 1.10.0, the app still checks, without showing a form, whether you recorded a decision earlier (for example before you bought Premium) and applies it to usage analytics as described above; if these rules apply to you and you never recorded one, the analytics identifier stays unused. Settings shows the Ad Privacy Options entry whenever Google's consent service reports that it applies to you, so you can give or change your decision yourself. On iOS the form is currently presented at launch to everyone in a covered region, including Premium users; since Premium users are never served an ad, any choice recorded there has no practical effect.

Learn more about Google's advertising practices: Google Ads Privacy →

Cookies & Website Analytics

Our website uses cookies and similar technologies, grouped by purpose. Nothing in the analytics, diagnostics or advertising categories runs before you consent through our cookie banner; you can accept, reject, or change your choice at any time via "Cookie preferences".

• Strictly necessary (always active, no consent needed). Keep the site working and remember your cookie choice. These cannot be switched off.
• Analytics & performance (off by default, only with your consent). Our analytics provider's tools help us measure aggregate usage and page-load performance. They use pseudonymous identifiers and your IP address (truncated by the provider). Without separate advertising consent we do not use them for advertising.
• Error diagnostics (off by default, only with your consent). Our crash and error monitoring provider captures technical error and crash details so we can keep the site stable. No inventory content is sent.
• Advertising (off by default, only with your consent). Used only to measure how our own ad campaigns on other sites and apps perform, for example whether an ad led to a sign-up, through Google Ads. We do not show ads on this site and we do not use this data to personalise ads. These services may transfer data to the US; see International Data Transfers.

Rejecting analytics, diagnostics or advertising does not affect site functionality. These website choices are separate from the mobile app: the cookie banner controls this site only. In the app, usage analytics follow the consent described under Ad and analytics consent: in the Android app (version 1.10.0 and later) in the EEA, the UK, and Switzerland, the Ad Privacy Options entry in Settings controls whether usage analytics may use the per-installation identifier; elsewhere, in earlier Android versions, and in the iOS app, the app does not currently offer an in-app analytics switch (see Information We Collect).

International Data Transfers

Our cloud infrastructure and some of our processors — including our hosting, analytics, and crash and error monitoring providers — are located in the United States. If you use Smart Inventory from the EU/EEA, the United Kingdom, Turkey, or elsewhere, your data may be transferred to and processed in the US. These transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses, with equivalent safeguards for the United Kingdom and Turkey.

Data Retention

• Account & cloud data: kept as long as your account is active. After cancellation, deleted within 90 days unless legally required to retain longer.
• Support correspondence: kept for up to 2 years.
• Analytics & crash logs: retained according to our providers' default retention periods (typically up to 14 months for analytics, 90 days for crash reports).
• Purchase records: After you delete your account, we keep a record of your purchases (product, dates and a reference to the Google Play or App Store order) for 180 days after the purchase ends, to handle refunds, chargebacks and disputes; then it is deleted. For a lifetime purchase, the 180 days start when the account is deleted.

You can request immediate deletion of all your data by emailing support@nonzeroapps.com from the email address tied to your account, or follow the step-by-step instructions on our Delete Account page.

Your Rights

Depending on where you live (GDPR for EU/EEA, CCPA for California, KVKK for Turkey, similar laws elsewhere), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent to processing at any time.
• Lodge a complaint with your local data protection authority.
• Learn whether your data is processed, and which third parties in Türkiye or abroad it was transferred to.

To exercise any of these rights, contact us at support@nonzeroapps.com. We'll respond within 30 days. On request we will tell you, by name, which recipients received your personal data, and give you a copy of the safeguards used for transfers abroad.

Children's Privacy

Smart Inventory is not directed to children under 13 (under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For material changes, we'll notify Premium users by email or via an in-app notice before the change takes effect. Your continued use of Smart Inventory after the effective date constitutes acceptance.

Contact

For any privacy-related questions or requests:

Data controller: Berkay Turancı, trading as NonZeroApps®
Çankaya / Ankara, Türkiye
MERSİS: 1932247242600001
Email (also for data protection requests): support@nonzeroapps.com
The full registered address is listed in the Turkish trade registry (MERSİS) and is available on request.