Privacy Policy

Effective July 6, 2026

This policy describes how Inventurtle ("we", "us") handles information when you use the Inventurtle iOS app (the "App") and its backing service (together, the "Service"). It's intentionally short because the Service collects very little: no ads, no analytics or tracking SDKs, and no selling of personal information.

Information we collect

• Sign in with Apple. A stable identifier for your Apple ID, and — only if Apple shares them on your very first authorization — your name and email address (or the private relay email Apple generates if you choose to hide your real one). We never see your Apple ID password.
• Photos and inventory content you create. Photos you take of shelves and cabinets, the item data extracted from them (names, quantities, categories), and any edits you make. This is the core content of the Service.
• Organizational data. Names you give your houses, rooms, cabinets, and shelves.
• Sharing data. If you invite someone to a shared house, we store the invite link/token and, once accepted, which accounts have access to that house. We don't access your contacts — you send the invite link yourself (e.g. via Messages).
• Subscription data. If you subscribe to Inventurtle Premium, Apple sends us a signed transaction record so we can verify and maintain your entitlement (product identifier, expiration date, trial status). We never receive or store your payment card details — Apple handles all billing.
• Basic server logs. Standard connection metadata (e.g. IP address, timestamps) generated by any web request, kept briefly for security and debugging.

We don't collect your location, contacts, health, or financial data, and camera access is used only to let you take the shelf photos you choose to take — the App does not access your photo library without you explicitly picking a photo through the system picker.

How we use it

To run the Service: identify items in your photos, maintain your spatial map and inventory, keep shared houses in sync between members, verify your subscription, and secure the Service against abuse. We don't use your content for advertising, and we don't build profiles about you for any purpose beyond operating the Service you asked for.

Who we share it with

We use a small number of service providers to run Inventurtle, and we don't sell or rent your personal information to anyone:

• OpenAI — shelf and cabinet photos are sent to OpenAI's API so it can identify the items on them. This is the only third party that sees your photo content. Per OpenAI's API data usage policy at the time of writing, content submitted through its API is not used to train its models. See openai.com/policies/privacy-policy.
• Apple — for Sign in with Apple and to process Inventurtle Premium purchases through the App Store. Apple's own privacy policy governs the data Apple collects directly as part of your Apple ID and App Store purchases: apple.com/legal/privacy.
• Cloudflare — provides the encrypted network tunnel between the App and our server. Cloudflare handles connection-level transport only; it does not read or store your account content.

We don't use any advertising, analytics, or crash-reporting SDKs in the App.

Where data is stored

Inventurtle runs on infrastructure we own and operate directly, rather than a large third-party cloud host. Data in transit between the App and our server is encrypted (TLS). No method of storage or transmission is ever 100% secure, but we take reasonable measures to protect your data and restrict access to it.

Data retention and deletion

We keep your content for as long as your account is active. You can delete individual items, shelves, cabinets, rooms, or houses at any time in the App. You can delete your entire account at any time from Settings → Delete account in the App, or by following the steps on our account deletion page. Deleting your account immediately and permanently removes your profile, every house you own (and everything inside it), and your subscription entitlement record. If you're a member of a house someone else owns, deleting your account removes your membership but leaves that house intact for its owner and other members. Deleted data may persist for a short period (up to 30 days) in backups before being fully purged.

Your choices and rights

You can access and edit most of your data directly in the App. Where applicable law (such as the CCPA or GDPR) gives you rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict our processing of it, you can exercise those rights using the in-App controls above or by emailing us at [email protected]. We do not sell personal information, so there is nothing to opt out of in that regard.

Children's privacy

Inventurtle is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we'll delete it.

International users

Our service providers (OpenAI, Apple, Cloudflare) are U.S. companies, so your information may be processed in the United States.

Changes to this policy

If we make material changes, we'll update the effective date above and, where appropriate, notify you in the App.

Contact us

Questions about this policy? Email [email protected].