Privacy Policy
Privacy Policy
Last updated: 30.11.2025
This Privacy Policy explains how Invendo – Home & Food Inventory App (“Invendo”, “we”, “us”, “our”) collects, uses, and protects your information when you use our mobile application or website.
Invendo is operated by:
Xaltos Technologies Ltd
Gladstonos 12–14
Paphos, 8046, Cyprus
Email: support@invendo-app.com
We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable laws of Cyprus.
1. Information We Collect
Invendo can be used with or without creating an account.
1.1. When you do not create an account
You may use the app locally on your device without sharing any personal information.
In this mode, we do not collect or store any of your data in the cloud.
1.2. When you create an account
When signing in with Google or Apple:
- Email address
- First and last name
- Authentication ID (Firebase)
This information is required to:
- sync data between devices
- secure access to your account
- provide cloud backup
1.3. User-generated content
If you choose to use cloud features, we store:
- Inventory items
- Photos of items
- Categories and lists
- Notes, quantities, prices, expiration dates
- Shopping lists
1.4. Automatically collected data (analytics & diagnostics)
We use:
- Firebase Analytics (anonymous usage statistics)
- Firebase Crashlytics (crash reports)
- Google Analytics (website analytics)
- RevenueCat (subscription validation, no payment details)
Collected data may include:
- Device type, OS version
- App version
- Country (approximate)
- Crash logs
- Subscription and purchase status (no card details)
1.5. No sensitive data
We do not collect:
- passwords
- payment card numbers
- health or biometric data
- precise location data
2. How We Use Your Information
We use your data to:
- Provide account login and sync
- Store and display your inventory
- Backup user data in the cloud
- Improve app performance
- Fix bugs and crashes
- Detect fraud and abuse
- Process subscriptions and entitlements (via RevenueCat)
We do not sell or rent your data.
3. Legal Basis for Processing (GDPR)
We process data based on:
- Contract – when you create an account to store data in the cloud
- Legitimate interest – crash reporting, app security
- Consent – analytics (when required)
- Legal obligation – if required by law enforcement
4. How Long We Keep Your Data
We keep your cloud data as long as your account exists.
If you delete your account:
- All cloud data (items, photos, lists) is permanently deleted.
- Backups and logs associated with your account are removed within a reasonable period.
Local-device-only data is fully stored on your device and never sent to us.
5. How to Delete Your Data
You can delete your data in two ways:
5.1. Delete account inside the app
Use the “Delete Account” button in Settings.
5.2. Email request
Send a request to: support@invendo-app.com
We will delete your account and all related data.
6. Third-Party Services
We use the following services:
- Firebase Authentication – account login
- Cloud Firestore – database storage
- Firebase Storage – storing photos
- Firebase Analytics & Crashlytics
- Google Analytics (website)
- RevenueCat – handling subscriptions
- Apple App Store / Google Play Store – in-app purchases
- Apple App Store / Google Play Store
Cloudflare Web Analytics
We use Cloudflare Web Analytics https://www.cloudflare.com/privacypolicy/
Each service complies with GDPR and industry security standards.
7. Children’s Privacy
Invendo is a family-friendly tool suitable for everyday home use.
- Children may freely use the app without an account.
- Creating an account and using cloud sync requires being at least 16 years old, as required by GDPR.
- We do not knowingly collect personal data from children under 16 without parental consent.
If you believe a child has created an account without permission, contact us for immediate deletion.
8. International Data Transfers
Your data may be stored or processed on servers located in the European Union or other regions via Google Cloud services.
All transfers comply with GDPR-approved mechanisms (Standard Contractual Clauses).
9. Security
We use industry-standard measures to protect your data, including:
- Encrypted communication (HTTPS)
- Secure authentication (Google/Apple sign-in)
- Access controls within Firebase
- Regular monitoring and logging
However, no system is 100% secure.
10. Your Rights (GDPR)
You have the right to:
- Access your data
- Correct inaccurate information
- Delete your data (“right to be forgotten”)
- Export your data
- Withdraw consent (for analytics)
- Contact a supervisory authority
For requests, email: support@invendo-app.com
11. Changes to This Policy
We may update this policy from time to time. Updates will be posted inside the app and on our website.
12. Contact Us
For privacy questions:
Xaltos Technologies Ltd
Gladstonos 12–14, Paphos, Cyprus
Email: support@invendo-app.com