Privacy Policy
Last updated: January 2026
General Information
Your privacy is important to us. It is Assetsy's policy to respect your privacy and comply with applicable laws and regulations regarding any personal information we may collect about you, including through our mobile application and website at https://assetsy.io (the "Services").
This Privacy Policy explains:
- what information we collect,
- how we use and share it, and
- which rights you have in relation to your information.
What We Mean by "Personal Information"
In this Privacy Policy, "personal information" (or "personal data") means any information that identifies you directly (such as your name or email address) or that can reasonably be used to identify you when combined with other information (for example, device identifiers together with inventory or account data).
We also collect non-personal information, which does not identify you individually (for example, aggregated statistics about app usage).
Information We Collect
We collect information in two main ways:
- Information you provide – information you knowingly and actively provide when using the Services.
- Information collected automatically – information that is automatically sent from your device as you access and use the Services.
We only collect information that is reasonably necessary to provide and improve the Services.
Account Information
When you create an account, we collect:
- Name – your display name or full name
- Email address – used for account identification and communication
- Authentication data – provided by Apple Sign In or other authentication providers
Inventory Data
When you use Assetsy to manage your inventory, we collect:
- Item information – names, descriptions, quantities, prices, custom fields, and other metadata you enter
- Folder and tag data – organizational structures you create
- Photos – images of items you upload or capture
- Receipt data – scanned receipts and extracted information
- Activity history – logs of changes made to your inventory (who made changes, when, and what was changed)
Workspace and Team Data
If you use collaborative features, we collect:
- Workspace information – workspace names and settings
- Team member data – email addresses and roles of invited members
- Contributor activity – actions performed by team members within shared workspaces
Log Data
When you access our servers via our app, we may automatically log the standard data provided by your device. It may include your device's Internet Protocol (IP) address, your device type and version, your activity within the app, time and date, and other details about your usage.
Additionally, when you encounter certain errors while using the app, we automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem.
Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.
Device Data and Permissions
To deliver core features, Assetsy may request access to the following on your device:
- Camera – to take photos of your items or scan receipts
- Photo Library / Gallery – to upload existing images of items
- Storage – to save inventory data or cached content locally on your device
- Notifications – to remind you about important updates, low stock alerts, or new features
You can allow or deny these permissions within the app, and you can change your choices at any time in your device settings.
Photos and Images
When you upload or capture photos of items, these images are stored to provide the Services. We process these images only to:
- display them within your inventory
- sync them across your devices
- share them with workspace members you have invited
We do not:
- use your photos for purposes unrelated to the Services
- share your photos with third parties except as necessary to provide the Services
You can delete your photos from the app at any time, and we will remove them from our active systems in the ordinary course of business, subject to our legal retention obligations.
How We Use Your Information
We may use the information we collect for purposes such as:
Providing and operating the Services
- enabling inventory management, organization, and tracking
- processing photos and other content you upload
- maintaining and securing your account
- facilitating team collaboration within workspaces
Improving and personalizing the Services
- understanding how users interact with the app
- optimizing UI/UX and performance
- analyzing usage patterns to improve features
Communicating with you
- sending transactional emails (e.g., account notices, security alerts)
- responding to your support requests and feedback
- informing you about important changes to the Services or this Privacy Policy
Analytics and research
- monitoring usage trends and patterns
- conducting internal analysis to improve features
Safety, security, and legal compliance
- detecting, preventing, and addressing fraud, abuse, or security incidents
- complying with legal obligations
Third-Party Services
We use third-party services to help us operate and improve the Services. These include:
Firebase (Google)
- Firebase Authentication – to manage user sign-in
- Firebase Analytics – to understand app usage
- Firebase Crashlytics – to identify and fix bugs
- Firebase Cloud Storage – to store photos and files
- Firebase Cloud Messaging – to send push notifications
- Firebase Remote Config – to manage app configuration
For more information, see Google's Privacy Policy.
RevenueCat
We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat may collect transaction data and device identifiers.
For more information, see RevenueCat's Privacy Policy.
Apple Sign In
If you sign in with Apple, we receive your name and email address (or a private relay email) as authorized by you.
For more information, see Apple's Privacy Policy.
MongoDB Atlas
We use MongoDB Atlas to store your data securely in the cloud.
For more information, see MongoDB's Privacy Policy.
Google Gemini AI
We use Google Gemini AI to provide intelligent features within the app:
- Item Recognition – when you take a photo of an item, the image is sent to Google Gemini to automatically detect and suggest item details (name, description, category, estimated value)
- Receipt Scanning – when you scan a receipt, the image is sent to Google Gemini to extract structured data (store name, items, prices, totals)
What data is sent:
- The image you capture (as base64-encoded JPEG)
- A text prompt describing what information to extract
What data is NOT sent:
- Your account information
- Your inventory data
- Your location or device identifiers
Images are processed by Google's AI services and are subject to Google's Privacy Policy and Gemini API Terms of Service. Google may use data to improve their AI models as described in their policies.
You can choose not to use AI-powered features by manually entering item information instead of using the camera recognition feature.
Internal Error Monitoring
To maintain service quality and quickly identify issues, we use an internal error monitoring system that sends technical error reports to a private channel. These reports contain:
- Error messages and stack traces
- Technical context (API endpoint, error code)
- Timestamp of the error
These reports do not contain your personal information, photos, inventory data, or any content that could identify you individually. This monitoring helps us detect and fix bugs faster.
These providers process data on our behalf and are only allowed to use it as necessary to perform their services for us, under our instructions and in accordance with applicable law.
We do not share your personal information with third parties for their own independent marketing purposes without your consent.
Data Retention
We retain your personal information only for as long as necessary to:
- provide and improve the Services
- fulfill the purposes described in this Privacy Policy
- comply with legal, accounting, or reporting obligations
When your personal information is no longer needed, we will delete it or anonymize it so that it can no longer be linked to you.
Managing Your Privacy and Account Deletion
You can delete your account at any time from within the app (where available) or by contacting us at support@assetsy.io.
When you request deletion:
- we will deactivate your account and remove personal data associated with it from our active systems in the ordinary course of business (typically within 14 business days); and
- we may retain certain information where we are required or permitted to do so by law or where it is necessary for our legitimate business purposes (for example, to resolve disputes, prevent abuse, or comply with accounting and tax obligations).
If we need to keep some data for these reasons, we will limit its use to those purposes and delete it once they are fulfilled.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than those in your jurisdiction.
Where Your Data May Be Processed
| Service Provider | Data Processed | Location |
|---|---|---|
| Firebase (Google) | Authentication, analytics, crash logs, push notifications | United States |
| MongoDB Atlas | All inventory and account data | United States (or region you select) |
| RevenueCat | Subscription and purchase data | United States |
| Google Gemini AI | Photos for item/receipt recognition | United States |
| Apple Sign In | Authentication credentials | United States |
By using the Services, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our servers and service providers may be located.
We take steps to ensure that your data receives an adequate level of protection wherever it is processed, including:
- Using service providers that maintain appropriate security certifications (SOC 2, ISO 27001)
- Implementing encryption for data in transit and at rest
- Entering into data processing agreements with our service providers
Your Rights
Depending on where you live, you may have certain rights regarding your personal information, including:
- Right to access – to request a copy of the personal information we hold about you.
- Right to correction – to request that we correct or update inaccurate or incomplete information.
- Right to deletion – to request that we delete personal information we hold about you, subject to certain exceptions.
- Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time.
- Right to data portability – to receive certain personal information in a structured, commonly used, machine-readable format.
- Right to object and restrict – in some cases, to object to or request restriction of certain types of processing.
To exercise any of these rights, please contact us at support@assetsy.io. We may need to verify your identity before fulfilling your request.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Your CCPA Rights
- Right to Know – You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete – You can request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to Opt-Out of Sale – You have the right to opt out of the "sale" of your personal information.
- Right to Non-Discrimination – We will not discriminate against you for exercising your CCPA rights.
We Do Not Sell Your Personal Information
Assetsy does not sell your personal information. We do not exchange your data for monetary or other valuable consideration with third parties.
We share personal information with service providers only as necessary to operate and improve the Services (as described in the "Third-Party Services" section above). These service providers are contractually prohibited from using your information for any purpose other than providing services to us.
Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, unique personal identifier | Yes |
| Commercial Information | Products or services purchased (subscription status) | Yes |
| Internet Activity | Interaction with app, usage data | Yes |
| Geolocation Data | General location (country/region from IP) | Yes |
| Sensory Data | Photos you upload | Yes |
| Inferences | Preferences based on app usage | No |
How to Exercise Your Rights
To exercise your CCPA rights, please contact us at support@assetsy.io with your request. We will verify your identity before processing your request.
Children's Privacy
The Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@assetsy.io.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Data Breaches
If we become aware of a data breach that affects the security of your personal information, we will:
- investigate the incident
- take reasonable steps to mitigate any harm
- notify affected users and, where required, relevant authorities in accordance with applicable laws
Business Transfers
If Assetsy or SARAFAN is involved in a merger, acquisition, reorganization, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will ensure that any acquiring entity is subject to obligations consistent with this Privacy Policy or will provide notice and choices as required by law.
Links to External Sites
The Services may contain links to third-party websites, apps, or services that we do not operate or control. We are not responsible for the privacy practices or content of those third parties.
We recommend reviewing the privacy policies of any external sites or services before providing them with personal information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect:
- changes in our practices or features
- changes in legal requirements
- feedback from users or regulators
When we make material changes, we will notify you by updating the "Last updated" date, posting the revised policy, and/or providing a notice in the app or by email.
By continuing to use the Services after an update, you acknowledge the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
General Support: support@assetsy.io
Privacy-Related Inquiries: privacy@assetsy.io
For GDPR-related requests (data access, deletion, portability), please email privacy@assetsy.io with the subject line "GDPR Request" and include:
- Your registered email address
- The specific right you wish to exercise
- Any additional information to help us verify your identity