PRIVACY POLICY Adaptive Inventory App Last Updated: March 1, 2026 This Privacy Policy describes how Adaptive Inventory ("we," "us," or "our") collects, uses, and protects your information when you use the Adaptive Inventory mobile application ("App"). By using the App, you agree to the collection and use of information in accordance with this policy. ──────────────────────────────────────── 1. INFORMATION WE COLLECT ──────────────────────────────────────── 1.1 Information You Provide Directly a) Account Information: When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your name, email, and profile picture from Google. b) Business Profile: Business name, business type selection, and business configuration preferences. c) Inventory Data: Product names, descriptions, quantities, prices, categories, SKUs, barcodes, and other inventory-related information you enter. d) Invoice Data: Customer names, invoice items, amounts, dates, and payment status. e) Receipt Data: Text and data extracted from receipt images you scan using the App's OCR feature. f) Recipe Data: Recipe names, ingredients, instructions, costs, and related information. g) Storefront Data: Product listings, descriptions, pricing, product images, logo uploads, and branding information you create for your storefront. Note: Storefront features are available exclusively to Pro, Business, and Enterprise subscribers. h) Support Communications: Messages, bug reports, feature requests, and other communications you submit through the App's support features. 1.2 Information Collected Automatically a) Device Information: Device type, operating system version, unique device identifiers, and app version. b) Usage Data: Features used, screens viewed, actions taken, and interaction patterns within the App. c) Subscription Information: Plan type, subscription status, and usage counts (number of inventory items, invoices, receipts, recipes). d) Log Data: Error logs and crash reports to help us improve the App. 1.3 Information from Third-Party Services a) Google Sign-In: If you choose to sign in with Google, we receive your Google account name, email address, and profile photo. b) Payment Information: Subscription payments are processed through the Google Play Store. We do not directly collect or store your payment card details. ──────────────────────────────────────── 2. HOW WE USE YOUR INFORMATION ──────────────────────────────────────── We use the information we collect for the following purposes: a) Service Delivery: To provide, maintain, and improve the App's features and functionality, including inventory management, invoicing, receipt scanning, recipe management, and storefront services (for eligible subscribers). b) Account Management: To create and manage your account, authenticate your identity, and maintain your subscription. c) Synchronization: To sync your data across devices using our cloud infrastructure. d) Personalization: To adapt the App's interface and features based on your selected business type. e) Communication: To send you service-related notifications, updates, and support responses. f) Analytics: To understand how the App is used and to improve our services. g) Security: To detect, prevent, and address technical issues, fraud, and security threats. h) Legal Compliance: To comply with applicable laws, regulations, and legal processes. ──────────────────────────────────────── 3. DATA STORAGE AND SECURITY ──────────────────────────────────────── 3.1 Cloud Storage: Your data is stored securely using Supabase, a cloud database platform. Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption. 3.2 Local Storage: Some data may be cached locally on your device for offline access and performance optimization. 3.3 Receipt Images: Receipt images are processed on your device using on-device OCR (optical character recognition). Only the extracted text data is stored in the cloud — original receipt images are not uploaded to our servers unless explicitly shared by you. 3.4 Security Measures: We implement appropriate technical and organizational measures to protect your personal data, including: - Encrypted data transmission (HTTPS/TLS) - Encrypted data storage - Secure authentication (including OAuth 2.0 for Google Sign-In) - Row-level security policies on database tables - Regular security assessments 3.5 No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. ──────────────────────────────────────── 4. DATA SHARING AND DISCLOSURE ──────────────────────────────────────── We do NOT sell your personal data to third parties. We may share your information in the following limited circumstances: a) Service Providers: With trusted third-party service providers who assist us in operating the App, including: - Supabase (database and authentication) - Google (authentication via Google Sign-In) - Google Play (subscription billing) These providers are contractually obligated to protect your data. b) Legal Requirements: When required by law, regulation, legal process, or governmental request. c) Safety and Rights: To protect the rights, property, or safety of Adaptive Inventory, our users, or the public. d) Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your data may be transferred to the successor entity. e) With Your Consent: When you explicitly consent to sharing your data. f) Storefront Data: Product listings you publish to your storefront are intended to be publicly visible. Do not include sensitive personal information in storefront listings. Storefront features require a Pro, Business, or Enterprise subscription. ──────────────────────────────────────── 5. DATA EXPORT AND PORTABILITY ──────────────────────────────────────── 5.1 You can export your inventory data at any time in the following formats: - CSV (Comma-Separated Values) - JSON (JavaScript Object Notation) - PDF (Portable Document Format) 5.2 Export features are accessible through Settings > Import & Export in the App. 5.3 We support your right to data portability and make it easy for you to take your data with you. ──────────────────────────────────────── 6. DATA RETENTION ──────────────────────────────────────── 6.1 Active Accounts: We retain your data for as long as your account is active and as needed to provide you with the Service. 6.2 Deleted Accounts: When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements). 6.3 Subscription Records: Billing and transaction records may be retained for up to 7 years for tax and accounting compliance. 6.4 Backups: Data may persist in encrypted backups for up to 90 days after deletion before being permanently removed. ──────────────────────────────────────── 7. YOUR RIGHTS AND CHOICES ──────────────────────────────────────── Depending on your jurisdiction, you may have the following rights: a) Access: Request a copy of the personal data we hold about you. b) Correction: Request correction of inaccurate or incomplete personal data. c) Deletion: Request deletion of your personal data (subject to legal retention requirements). d) Export: Export your data using the App's built-in export features. e) Objection: Object to the processing of your personal data for certain purposes. f) Restriction: Request restriction of processing of your personal data. g) Withdraw Consent: Withdraw your consent at any time where processing is based on consent. To exercise these rights, contact us at support@adaptiveinventory.app or use the App's Settings > Support section. ──────────────────────────────────────── 8. CHILDREN'S PRIVACY ──────────────────────────────────────── 8.1 The App is not intended for use by children under the age of 13 (or the applicable age in your jurisdiction). 8.2 We do not knowingly collect personal data from children under 13. 8.3 If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. 8.4 If you believe a child under 13 has provided us with personal data, please contact us immediately. ──────────────────────────────────────── 9. THIRD-PARTY LINKS AND SERVICES ──────────────────────────────────────── 9.1 The App may contain links to third-party websites or services that are not operated by us. 9.2 We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies. 9.3 Third-party services used by the App include: - Google Sign-In: Subject to Google's Privacy Policy (https://policies.google.com/privacy) - Google Play Services: Subject to Google's Terms of Service - Supabase: Subject to Supabase's Privacy Policy (https://supabase.com/privacy) ──────────────────────────────────────── 10. INTERNATIONAL DATA TRANSFERS ──────────────────────────────────────── 10.1 Your data may be transferred to and processed in countries other than your country of residence. 10.2 When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. 10.3 By using the App, you consent to the transfer of your data to countries that may have different data protection laws than your own. ──────────────────────────────────────── 11. CALIFORNIA RESIDENTS (CCPA) ──────────────────────────────────────── If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): a) Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you. b) Right to Delete: You may request deletion of your personal information. c) Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. d) We do NOT sell personal information as defined by the CCPA. To exercise your CCPA rights, contact us at support@adaptiveinventory.app. ──────────────────────────────────────── 12. EUROPEAN RESIDENTS (GDPR) ──────────────────────────────────────── If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland: a) Legal Basis: We process your data based on: - Contract performance (providing the Service) - Legitimate interests (improving the App, security) - Consent (where explicitly given) - Legal obligations (compliance with laws) b) Data Protection Officer: For GDPR-related inquiries, contact us at support@adaptiveinventory.app. c) Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority. ──────────────────────────────────────── 13. COOKIES AND TRACKING ──────────────────────────────────────── 13.1 The App does not use browser cookies. 13.2 We may use local storage on your device to maintain session data, preferences, and cached content for performance purposes. 13.3 We do not use third-party advertising trackers within the App. ──────────────────────────────────────── 14. CHANGES TO THIS PRIVACY POLICY ──────────────────────────────────────── 14.1 We may update this Privacy Policy from time to time. The updated policy will be posted within the App and the "Last Updated" date will be revised. 14.2 We will notify you of significant changes through in-app notifications or via email. 14.3 Continued use of the App after changes are posted constitutes acceptance of the revised Privacy Policy. ──────────────────────────────────────── 15. CONTACT US ──────────────────────────────────────── If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: support@adaptiveinventory.app App: Settings > Support > Contact Us ──────────────────────────────────────── By using the Adaptive Inventory App, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein.