1. Introduction
Welcome to ToteTracker. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our home inventory management application.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive basic profile information from your Google account. If you join or are invited to a shared inventory, your email address is visible to the other members of that inventory, who are identified by email because there are no display names.
2.2 Inventory Data
We store the inventory data you create, including item names, descriptions, categories, values, quantities, container hierarchies, and uploaded images. This data is stored securely in our database and linked to your account.
2.3 Image Analysis
When you use our AI-powered image analysis feature, photos you upload are sent to an AI service to identify items and extract information. These images are processed but not permanently stored by the AI service.
2.4 Payment Information
On the web, subscription payments are processed through Stripe. We do not store your credit card details. Stripe handles all payment information according to their privacy policy and PCI compliance standards.
In the Android app, subscriptions and Smart Action packs are purchased through Google Play. Google processes the payment; we receive and store purchase tokens and order identifiers to grant and audit your purchases. We never see your payment card or instrument.
2.5 Usage Data & Analytics
We collect analytics data to improve our services and fix issues. This includes:
- Product analytics (pageviews, feature usage, user journeys)
- Performance monitoring (page load times, responsiveness)
- Error tracking (automatic capture of application errors for debugging)
- Session recordings (with text inputs masked) to debug issues
- Click and scroll patterns to improve the interface
- In-app survey responses when you choose to participate
- Smart Action consumption to display your balance and send low-balance notifications
- AI feature inputs and outputs (such as item descriptions and assistant messages), with a pseudonymous account identifier, to monitor and improve AI quality
When you use AI features such as photo scanning, Smart Search, or the assistant, the text you submit and the AI's responses may be sent to our analytics provider, alongside a pseudonymous account identifier, so we can monitor and improve AI quality. Uploaded image content is redacted from these analytics.
We use first-party cookies and similar technologies (such as browser local storage) for analytics — for example, to recognize repeat visits and to link your activity to your account when you sign in. We do not use third-party advertising cookies or cross-site tracking.
We respect your browser's Do Not Track setting. When enabled, analytics data is not collected.
2.6 Shared Inventory and Invitations
ToteTracker lets you share an inventory with other people, such as a household, couple, or small team. When you invite someone, we collect the email address you provide for that person — which may belong to someone who is not yet a ToteTracker user — to send the invitation and, once it is accepted, add them to the inventory. Within a shared inventory, the items, containers, images, and member email addresses are visible to, and can be edited by, every member of that inventory.
3. How We Use Your Information
- To provide and maintain the ToteTracker service
- To authenticate your account and manage your subscription
- To process and store your inventory data
- To send inventory-sharing invitations to the email addresses you provide
- To provide AI-powered item recognition from photos
- To send important service notifications and updates
- To improve and optimize our application
- To provide customer support
- To detect and prevent fraud or abuse
4. Data Storage and Security
Your data is stored securely using industry-standard cloud infrastructure, which includes:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Access controls so your data is accessible only to you and the members of any inventory you share
- Regular security updates and monitoring
- Automated backups
5. Third-Party Services (Sub-processors)
We use trusted third-party services to operate ToteTracker. These services process your data according to their own privacy policies and applicable data protection regulations.
- Cloud Infrastructure: Database, authentication, and file storage services that securely store your account information, inventory data, and images.
- AI Services: Image analysis services that process photos you upload to identify items and extract information. Images are analyzed but not permanently stored by these services.
- Payment Processing (Stripe): Processes subscription payments made on the web and stores payment methods. We do not have access to your full card number.
- Payment Processing (Google Play): Processes purchases made in the Android app. We receive purchase tokens and order identifiers, not your payment details.
- Application Hosting: Cloud hosting services that serve the ToteTracker web application. May collect standard web server logs.
- Analytics & Monitoring: Services that collect product analytics, performance metrics, error reports, and session recordings (with text inputs masked) to help us improve the application. These services also receive the text inputs and outputs of AI features (such as item descriptions and assistant messages), with a pseudonymous account identifier, for AI quality monitoring; uploaded image content is redacted. We respect your browser's Do Not Track setting.
A complete list of our sub-processors is available upon request. Please contact us through the support form in your account settings.
Our website may also contain embedded content from third-party platforms (e.g., videos). When you interact with embedded content, these third parties may collect information about you in accordance with their own privacy policies.
6. Data Sharing
We do not sell, rent, or share your personal information with third parties except:
- With service providers necessary to operate the application (as listed above)
- When required by law or to protect our legal rights
- With your explicit consent
Separately from the above, ToteTracker's shared inventory features let you choose to share your inventory data with people you invite. When you invite someone to an inventory, the items, containers, and images in that inventory become visible to and editable by the members you add. This sharing is initiated and controlled by you — or, for an inventory you join, by the owner who invited you — not by ToteTracker. See Section 2.6 for details.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Export your data
- Withdraw consent for data processing
- Object to certain data processing activities
To exercise these rights, please contact us through the support channels in the application settings. To delete your account and data, follow the steps on our account deletion page.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. If you contributed items or containers to a shared inventory you do not own, those contributions remain with that inventory and are reassigned to its owner rather than deleted, so the other members' records stay intact.
9. Children's Privacy
ToteTracker is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
10. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA).
Your Rights
- Right to know what personal data we collect about you
- Right to request deletion of your personal data
- Right to opt-out of the sale of personal data
- Right to non-discrimination for exercising your privacy rights
Do We Sell Your Data?
No. ToteTracker does not sell, rent, or share your personal information with third parties for monetary or other valuable consideration. We only share data with service providers necessary to operate the application (as listed in Section 5 above).
How to Exercise Your Rights
To exercise your California privacy rights, please contact us through the support form in your account settings. We will respond to verifiable requests within 45 days.
11. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of ToteTracker after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this privacy policy or our data practices, please contact us through the support form in the application settings or via the contact information provided on our website.