Privacy Policy

Privacy Policy

Last updated: 30.11.2025

This Privacy Policy explains how Invendo – Home & Food Inventory App (“Invendo”, “we”, “us”, “our”) collects, uses, and protects your information when you use our mobile application or website.

Invendo is operated by:

Xaltos Technologies Ltd
Gladstonos 12–14
Paphos, 8046, Cyprus
Email: support@invendo-app.com

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable laws of Cyprus.


1. Information We Collect

Invendo can be used with or without creating an account.

1.1. When you do not create an account

You may use the app locally on your device without sharing any personal information.
In this mode, we do not collect or store any of your data in the cloud.

1.2. When you create an account

When signing in with Google or Apple:

  • Email address
  • First and last name
  • Authentication ID (Firebase)

This information is required to:

  • sync data between devices
  • secure access to your account
  • provide cloud backup

1.3. User-generated content

If you choose to use cloud features, we store:

  • Inventory items
  • Photos of items
  • Categories and lists
  • Notes, quantities, prices, expiration dates
  • Shopping lists

1.4. Automatically collected data (analytics & diagnostics)

We use:

  • Firebase Analytics (anonymous usage statistics)
  • Firebase Crashlytics (crash reports)
  • Google Analytics (website analytics)
  • RevenueCat (subscription validation, no payment details)

Collected data may include:

  • Device type, OS version
  • App version
  • Country (approximate)
  • Crash logs
  • Subscription and purchase status (no card details)

1.5. No sensitive data

We do not collect:

  • passwords
  • payment card numbers
  • health or biometric data
  • precise location data

2. How We Use Your Information

We use your data to:

  • Provide account login and sync
  • Store and display your inventory
  • Backup user data in the cloud
  • Improve app performance
  • Fix bugs and crashes
  • Detect fraud and abuse
  • Process subscriptions and entitlements (via RevenueCat)

We do not sell or rent your data.


We process data based on:

  • Contract – when you create an account to store data in the cloud
  • Legitimate interest – crash reporting, app security
  • Consent – analytics (when required)
  • Legal obligation – if required by law enforcement

4. How Long We Keep Your Data

We keep your cloud data as long as your account exists.

If you delete your account:

  • All cloud data (items, photos, lists) is permanently deleted.
  • Backups and logs associated with your account are removed within a reasonable period.

Local-device-only data is fully stored on your device and never sent to us.


5. How to Delete Your Data

You can delete your data in two ways:

5.1. Delete account inside the app

Use the “Delete Account” button in Settings.

5.2. Email request

Send a request to: support@invendo-app.com

We will delete your account and all related data.


6. Third-Party Services

We use the following services:

  • Firebase Authentication – account login
  • Cloud Firestore – database storage
  • Firebase Storage – storing photos
  • Firebase Analytics & Crashlytics
  • Google Analytics (website)
  • RevenueCat – handling subscriptions
  • Apple App Store / Google Play Store – in-app purchases
  • Apple App Store / Google Play Store

Cloudflare Web Analytics

We use Cloudflare Web Analytics https://www.cloudflare.com/privacypolicy/

Each service complies with GDPR and industry security standards.


7. Children’s Privacy

Invendo is a family-friendly tool suitable for everyday home use.

  • Children may freely use the app without an account.
  • Creating an account and using cloud sync requires being at least 16 years old, as required by GDPR.
  • We do not knowingly collect personal data from children under 16 without parental consent.

If you believe a child has created an account without permission, contact us for immediate deletion.


8. International Data Transfers

Your data may be stored or processed on servers located in the European Union or other regions via Google Cloud services.

All transfers comply with GDPR-approved mechanisms (Standard Contractual Clauses).


9. Security

We use industry-standard measures to protect your data, including:

  • Encrypted communication (HTTPS)
  • Secure authentication (Google/Apple sign-in)
  • Access controls within Firebase
  • Regular monitoring and logging

However, no system is 100% secure.


10. Your Rights (GDPR)

You have the right to:

  • Access your data
  • Correct inaccurate information
  • Delete your data (“right to be forgotten”)
  • Export your data
  • Withdraw consent (for analytics)
  • Contact a supervisory authority

For requests, email: support@invendo-app.com


11. Changes to This Policy

We may update this policy from time to time. Updates will be posted inside the app and on our website.


12. Contact Us

For privacy questions:

Xaltos Technologies Ltd
Gladstonos 12–14, Paphos, Cyprus
Email: support@invendo-app.com