Privacy information

Information stored on your device

ThingzSafe stores the inventory you enter on your Android device, including Sites, Areas, Things, Contents, Parts, quantities, status, locations, notes, values, purchase and warranty details, contacts, events and reminders. Photos and documents you attach are also stored locally. The app encrypts its local inventory data and photo files. Encrypted backups are password protected; portable exports (including CSV, XML, HTML and original files) are not encrypted and should be kept secure. Uninstalling the app or clearing its data may remove the only local copy.

Cloud account, household and sync

If you sign in and connect to a household, the service processes your verified email/account identity, household membership, device registrations, inventory records and attachments to authenticate you, synchronise records, provide sharing and operate the web portal. Household members you or the owner invite can see shared household records. The person who owns a household can manage its members and devices. The cloud API stores inventory records encrypted by the application; uploaded photos and documents are stored in private Azure Blob Storage. Transfers use HTTPS.

Sign-in and subscriptions

Microsoft Entra External ID handles sign-in. ThingzSafe receives identity claims needed to associate your sign-in with an account; passwords and email one-time codes are entered with Microsoft and are not stored by ThingzSafe. Google Play processes subscription purchases and payment details. ThingzSafe receives purchase tokens and subscription/product, entitlement and expiry information needed to verify access; the API encrypts stored purchase tokens. ThingzSafe does not receive your full payment-card number through this integration. Cancelling a subscription is separate from requesting account deletion.

Barcode catalogue and product lookup

Barcode scanning uses Android camera/scanner components, including Google Play services Code Scanner and ZXing. When you choose online product lookup, the barcode is sent to Open Food Facts; paid household lookup can also check the ThingzSafe shared catalogue. When you choose to contribute a confirmed product, the shared catalogue may store its barcode, product name, size, manufacturer, country and language. The catalogue is shared with other users for product lookup. Your household identity, inventory quantities and photos are not included in that product contribution.

Support, feedback and technical information

Messages sent through the website Contact form include the name, email address, subject and message you provide and are delivered to ThingzSafe support. Bug reports and suggestions sent from the site or app may include your report text and optional email and are stored in the ThingzSafe feedback database so they can be reviewed and answered. Android issue reports stay on the device unless you choose to open and send them using your email app. Do not include passwords, one-time codes, payment-card information or private inventory details in a report. The public website is hosted through Cloudflare Pages; the app/API, SQL database and attachment storage run on Microsoft Azure. These providers may process technical request and security information when delivering their services. The Android app can send a barcode to the ThingzSafe catalogue and, for product lookup, to Open Food Facts. If you choose the current-value web search, the app opens Google with the search text you selected. The public site contains no advertising or analytics scripts. The newsletter sign-up page loads a signup form from Sender, which may use cookies or similar technology to run the form. Google Play, Microsoft, Cloudflare, Open Food Facts, Google, Sender and Amazon may also process service data under their own policies.

Retention and deletion

Local data stays on your device, and in any backups or exports you save, until you delete those copies. Cloud data is kept while your household is active.

You can delete your own records at any time in the app or the web portal, item by item or Site by Site. To delete your whole account and all its data, email [email protected] from your registered address (see Request account deletion). We wipe the data within 24 hours of your request. Deletion is permanent and cannot be undone. Developer tokens and ChatGPT connections are not removed separately, but they stop working once the account is deleted.

Copies you have saved outside the app, such as exports, downloads and backups, are not removed; delete those yourself. Cancelling a Google Play subscription is separate from deleting your account.

AI features and Alexa

Bulk photo recognition (Pro, Android). When you choose Process photos, the photos you selected and relevant descriptions from your inventory are sent to OpenAI to recognise items and suggest matches. The working photos are temporary and are removed from our server after processing. Unfinished or interrupted copies are normally cleared after 24 hours. OpenAI is set not to store responses, but may keep data for up to 30 days to watch for misuse. Our normal storage backups may also keep recoverable copies for a time. Nothing is added to your inventory until you save it. A photo or crop you choose to keep with an item becomes an ordinary attachment.

AI replacement valuations (Pro). When you generate a valuation, the item details used to find comparable listings, such as title, category, make, model, notes, country and currency, are sent to an AI service. Your existing values do not change until you accept a result.

Alexa voice control (Pro). You link Alexa to your ThingzSafe household. Amazon processes what you say under its own policies, and ThingzSafe receives the request so it can find or change your stock. Alexa reads out names, places, quantities and availability, but not values, private notes or contact details. Voice changes appear in your change history. You can disconnect Alexa at any time.

ChatGPT and the developer API

ChatGPT connection (Household and Pro). If a household member connects ChatGPT, ThingzSafe returns the inventory information ChatGPT asks for within the permissions you grant, such as names, places, quantities and values. With the separate photos and documents permission, it also returns the content of the files you select. That information becomes part of your ChatGPT conversation and is handled by OpenAI under your ChatGPT account’s terms and settings, not ours. Check your ChatGPT data settings before you connect. We do not receive your conversation. You do not give ThingzSafe an OpenAI API key, and ChatGPT does not receive your ThingzSafe password. Access is limited to the household you authorise. You can revoke it in the web app, which stops further access but cannot remove content already in a conversation.

Developer API (Household and Pro). The household owner can create developer tokens in the web app. A token lets whoever holds it read, and if you allow it, change that household’s inventory, so keep it secret and revoke it if it is exposed. What an application does with data it receives is governed by that application’s provider.

Reports drafted by ChatGPT. If you approve a bug report or feature request, the text you approve is stored in the ThingzSafe feedback log, linked to your account and household. Do not include passwords, tokens or details you do not want support to see.

Email receipts

If you use Email receipts (Household and Pro), emails you forward to your household’s receiving address, and their attachments, are processed to suggest items for you to review. The original email and accepted attachments are kept privately with your household as source material. Household reads text from the email and attachments. With Pro, the email text and accepted attachment content are also sent to an AI service to interpret them. Only registered household email addresses can send to the address, and the household owner manages them. Nothing is added to your inventory until you save it. Do not forward emails containing passwords or sign-in codes.

Security

The app and API use HTTPS for network connections. Your data is encrypted on your device, while it travels and in the cloud, so even our database administrators cannot read it. Passwords, sign-in codes and payment-card details are not collected by ThingzSafe through the sign-in and billing flows described above. Device security, access to your account, invited household members, and the handling of unencrypted exports and downloaded files also affect confidentiality.

Your choices

You can use Free locally without connecting a cloud account. You can decide whether to use cloud sync, invite household members, contribute a product to the shared catalogue, submit feedback, or export data. To request account or cloud-data deletion, see Request account deletion. Contact [email protected] for privacy queries.