Home → Privacy Policy

1. Who we are

ItemAtlas3D is published by:

INFINET is a registered trade name of a Greek sole trader, so the business and the individual named above are the same legal person. Depending on which store you installed from, the app may be listed under either name.

“We”, “us” and “our” below mean that person. “The app” means ItemAtlas3D on Android, iOS, iPadOS, macOS and Windows.

2. What stays on your device

ItemAtlas3D is local-first. You can install it, use every inventory and design feature, and never create an account. In that mode there is no server involved and we receive nothing at all — we do not know you exist.

Held only on your device, in an ordinary database file inside the app’s own storage:

• Your items — names, descriptions, quantities, units, categories, tags, barcodes, expiry dates and low-stock thresholds.
• Your locations — buildings, floors, rooms, furniture and containers, including their real-world dimensions and layouts.
• Photos you take or choose, stored as image files.
• Your activity history — what changed and when.
• App settings and preferences, including a copy of your plan status so that a plan you paid for keeps working with no connection.
• A local diagnostic log of unexpected errors, which never leaves the device unless you deliberately attach it to a support email — see §6.

3. What goes to the cloud, if you sign in

Creating an account and joining or creating a household turns on cloud sync. From that point, the data below is copied to our servers so that your other devices — and anyone else in that household — can see the same inventory.

Where it is hosted. On infrastructure operated by Supabase in the AWS eu-north-1 region — Stockholm, Sweden. That is inside the EU and the European Economic Area, so your inventory does not leave the EEA.

4. What we never collect

The app contains no analytics library, no tracking SDK, no advertising SDK and no third-party crash-reporting service. Specifically, we do not collect or receive:

• Usage analytics, screen views, session lengths, feature statistics or heat maps.
• Advertising identifiers — and there is no advertising in the app.
• Your device’s GPS or network location. The app requests no location permission at all; “location” in ItemAtlas3D means a shelf or a room that you named yourself.
• Contacts, calendars, call logs, messages or browsing history.
• Health, financial or biometric data.

We do not sell, rent or share personal data with anyone for their own purposes, and we do not use your inventory, your photos or your activity to train machine-learning models.

5. What other people in your household can see

A household is a shared inventory, so joining one is a deliberate act of sharing. Every member of a household can see:

• The whole inventory of that household — every item, location, quantity, note and photo.
• The email address of every other member, and their role.
• The activity history, including which member made a change and the name of the device they used. Device names frequently contain a person’s name, because that is how phones and laptops are usually named.

Owners can additionally rename the household, generate and revoke invite codes, promote or remove members, and delete the household for everybody.

If you are removed from a household, or you leave, your device keeps a local, read-only copy of the inventory as it stood at that moment and stops receiving updates. If a household is deleted by its owner, the cloud copy is destroyed and each member keeps their own local copy.

6. Who processes data for us

We use a small number of service providers. Each is bound by a data-processing agreement and may only act on our instructions.

Transfers outside the EEA. RevenueCat and Resend are United States companies, so the limited data in their rows may be transferred there, under the European Commission’s Standard Contractual Clauses. Everything else — your inventory, your photos, your household — stays in the EU as described in §3.

Email support. If you contact us we receive whatever you write, by ordinary email. The app also offers a diagnostics option that attaches its local error log to a support message; that log can contain file paths, household identifiers and your device model, and it is attached only when you choose that option yourself and press send. Support correspondence is kept for up to two years so that we can follow up on an issue.

7. Device permissions

The app asks for a permission only at the moment you use the feature that needs it, and every one of them can be refused without breaking the rest of the app.

8. Why we are allowed to hold it

9. How long we keep it

• Your account and inventory — until you delete your account, or delete the household. There is no inactivity purge.
• A deleted household — its rows and its photo folder are destroyed at once.
• Deletion records — when you delete an item, a small record that it was deleted is kept so that the deletion also reaches your other devices. It holds an identifier and a timestamp, not the item itself, and is cleared once every device in the household has seen it.
• Backups — our hosting provider keeps rolling encrypted backups of the database for a short period for disaster recovery, after which deleted data disappears from those too.
• When a subscription ends — a cloud household it paid for keeps working for 14 days. After that its cloud copy is locked: kept, but readable by no one, until the subscription is renewed or the household or account is deleted. Nothing is deleted by the lock, and every copy on members’ devices, backup, export and account deletion keep working.
• A household over its member limit — if a plan is changed to one that allows fewer members, owners are warned and have 14 days to resolve it; after that the most recently joined members lose access (never the member who pays) until a member is removed or the plan is raised.
• Support email — up to two years.
• Purchase history at our subscription provider — until you delete your account. Our own sales records — for as long as tax law requires.

10. Your rights

Under the GDPR you have the right to access, correct, delete, export and restrict your personal data, to object to processing based on legitimate interests, and to complain to a supervisory authority. Most of these you can exercise yourself, immediately, without asking us:

Email info@infinet.gr for anything you cannot do yourself. We answer within 30 days, free of charge.

11. Deleting your account

You can delete your account from inside the app — More → Account → Delete account — without emailing anyone. Before it does anything, the app shows you exactly what will happen to each of your households and asks you to type your email address to confirm.

Deleted with the account: your sign-in record, your household memberships, your registered devices, invite codes you created, the photo folders of destroyed households, and your record and purchase history with our subscription provider — at once, or within a few hours if that provider cannot be reached at that moment.

If your subscription paid for a household that someone else now keeps, it continues for 14 days; after that it locks (§9) unless one of its members takes out a plan.

Kept: households that live only on your device, which were never ours to destroy, and any local copy of a household you were a member of. A checkbox during the flow erases those too if you want a clean slate. Also kept, naturally: other people’s accounts, and any household where somebody else remains.

If you cannot open the app, use the deletion request by email.

12. Security

• All traffic between the app and our servers uses TLS.
• Passwords are hashed by our authentication provider; nobody, ourselves included, can read them.
• Stored data and backups are encrypted at rest by our hosting provider.
• Every table and every photo folder is protected by row-level security rules, so a request can only ever reach households you are actually a member of. That is enforced by the database itself rather than by the app.
• On your own device the data sits in the app’s private storage, protected by the operating system’s sandbox.

No system is perfect. Because the app keeps an offline copy on each device, the security of your inventory depends partly on the security of your devices — use a screen lock, and remove a device from your household if you lose it.

13. Children

ItemAtlas3D is a general-purpose inventory tool and is not directed at children. The app itself contains nothing unsuitable for any age, but accounts — sign-in, sync and sharing — are for people aged 16 and over, and we do not knowingly create accounts for anyone under 16. If you believe a child has created an account, write to us and we will delete it.

14. Changes to this policy

If we change this policy we will update the version and the date at the top of the page. If a change materially affects how your data is handled — a new processor, a new category of data, a change of hosting region — we will say so in the app before it takes effect, not only here.

15. Contact

Questions, requests or complaints about this policy or about your data:

Odysseas Michanetzis, trading as INFINET
Thesi Plagia, Kapandriti 19014, Greece
info@infinet.gr