Privacy Policy — Store & Forget

What this app is

Store & Forget is a local-first Android inventory tracker that helps you remember where you put physical items in your home. You take a photo of something, optionally tag and describe it, and the app records which area and spot it went into. Your inventory lives on your device; the optional features below (AI, sign-in, ads, cloud backup, and buying scan credits) are the only times the app talks to a server.

Data we collect

The app collects only what you actively put into it:

• Photos you take with the camera or pick from your photo library and attach to items.
• Text you type — item names, descriptions, specifications, tags, notes, and the names you give to areas and spots.

If you choose to sign in (see "Signing in" below), we also receive your Google account email, name, and profile photo from Google Sign-In, and the app is assigned a user ID that identifies your account to our scan-credit service.

We do not collect:

• Your location.
• Your contacts, calendar, SMS, call logs, or any other personal data on your device.
• Audio recordings (the camera permission does not record audio in this app).
• Crash reports of our own.
• Usage analytics unless you are signed in and turn them on (see "Usage analytics" below). They are off by default and off entirely while you are signed out.

Where your data is stored

Everything you enter — photos, text, item records — is stored locally on your device inside the app's private storage area. There is no cloud database that we operate that holds your inventory, and there is no cross-device sync of your inventory through our servers. The optional cloud backup (below) goes to your own Google Drive, not to us.

Optional features that use the network

The app works fully offline for manual entry, photos, browsing, and search-by-name. These features reach out over the network, and only when you use them:

Smart Scan and search indexing (Google Gemini)

When the app's Smart features are active, the app sends data to Google's Gemini API:

• Auto-describe a scanned item (on tap): when you tap "Smart Scan," the photo of the item plus any text you've already entered for that item is sent to Google's Gemini vision model so it can suggest a name, description, and tags. This happens only when you tap the scan button.
• Search-index an item (automatic, on save): when you save a new item or edit an existing one, the item's text (name, description, specs, tags, notes) is sent to Google's Gemini embedding model. The model returns a numerical search vector that the app stores locally on your device. The vector itself is meaningless without the original text and is stored only on your device.
• Smart Find semantic search (on tap): when you run a Smart Find search, your search query text is sent to Google's Gemini embedding model to produce a query vector. That vector is then compared locally, on your device, against the item vectors stored there — your inventory itself is never sent for the search, only the words you typed into the search box.

Free scans use an API key bundled in the app and call Google directly. If you buy scan credits (below) or are signed in and using server-provided scans, the same photo/text is instead routed through our scan-credit server (see "Scan-credit service") on its way to Google. Google's handling of data sent to the Gemini API is governed by Google's privacy policy and the Gemini API terms of service.

Signing in (Google Sign-In / Firebase Authentication)

Signing in is optional. You only need an account to buy scan credits, to earn extra scans by watching a rewarded ad, or to back up your inventory to your Google Drive. When you sign in, Google Sign-In provides the app with your Google account's email, name, and profile photo, and Firebase Authentication issues a user ID that identifies your account to our scan-credit service. We do not receive your Google password. You can use the entire core app without ever signing in.

Usage analytics (optional — off unless you opt in)

To understand which features people use and where the app is rough, you can optionally share anonymous product analytics. This is off by default. It is available only when you are signed in, and only after you turn on Advanced Settings → "Share usage analytics." While you are signed out, no analytics are collected at all.

When you opt in, the app uses Google Analytics for Firebase to record anonymous, behavior-only events:

• Which actions you take — e.g. starting a scan, saving an item, purchasing scan credits, or earning credits from a rewarded ad — plus standard app-lifecycle events (first open, session start).
• Basic technical context — your app version and general device/OS information.

Each event is tied only to a random, app-generated analytics instance ID. We do not send your name, email, or account ID to analytics, and we never link these events to your identity.

We do not send your inventory to analytics. Item names, photos, descriptions, specs, tags, notes, and the names of your areas and spots are never included in any analytics event — analytics see that you saved an item, never what the item is. You can turn analytics back off at any time from Advanced Settings → "Share usage analytics," which stops further collection. Analytics data is processed by Google under Google's privacy policy.

Cloud backup to your own Google Drive (optional)

If you turn on cloud backup, the app copies your inventory (item text and photos) into a private, app-specific folder in your own Google Drive (the Drive "app data" area). This data lives in your Google account, under your control — we cannot see or access it, and it is not visible in your normal Drive file list. You can disconnect backup or delete the backup folder at any time from your Google account. This uses Google Drive, governed by Google's privacy policy.

Ads (Google AdMob)

Store & Forget shows ads after a number of free scans, unless you hold purchased scan credits. Ads are served by Google AdMob, which may collect and use a device advertising ID and related device/ad information to serve and measure ads. This data is processed by Google as an advertising partner. You can reset or limit your advertising ID in your device's Google settings. See how Google uses information from apps that use its services and Google's privacy policy.

Scan-credit service (our server)

To meter free and paid scans, the app talks to a small server we operate (a Cloudflare Worker). It receives your Firebase user ID to track how many scans your account has left, and the rewarded-ad reward callback that grants you credits. On paid/credit-backed scans it also receives the item photo and text for that scan and immediately forwards them to Google's Gemini API to produce the result — it does not store your photos or item text. We keep only a per-account scan/credit balance, not your inventory.

When you are signed in, the app also sends this server anonymous counts of how many AI search-index operations your account has performed (plain numbers, grouped as search / save / re-index — never your item text, photos, or locations). This lets us keep the shared free AI tier healthy and detect abuse. These counts are sent whenever you are signed in, and are separate from the optional product analytics above (which stay off until you turn them on). Signed out, nothing is sent.

Buying scan credits (Google Play Billing)

If you buy a scan-credit pack, the purchase is handled by Google Play Billing. Google processes the payment; we receive a purchase confirmation (a token/event and the user ID it applies to) so we can add the credits to your balance. We do not receive your card number or other payment details.

Permissions the app requests

• Camera — to let you photograph items as you store them. Photos are saved to the app's private storage on your device.
• Photos / Media library — to let you attach existing photos from your library to an item.
• Internet / network — for the optional features above (AI, sign-in, ads, cloud backup, buying credits).

How to delete your data

Your inventory lives on your device for as long as you keep it there. You can delete it at any time:

• Delete individual items, areas, or spots — use the delete actions inside the app on each item, area, or spot detail screen.
• Erase everything in the app at once — open Advanced Settings → Erase all data. This wipes the local database (all areas, spots, items) and removes every photo file from the app's private storage.
• Delete the app entirely — uninstall Store & Forget from your device. Android will remove the app's private storage, including the SQLite database and all attached photo files.
• Delete your cloud backup — remove the app's data folder from your own Google Drive account.
• Delete your scan-credit balance — the only data we hold on a server is your account's scan/credit balance; email us at the address below to have it removed.

Children

This app is not directed at children under 13, and we do not knowingly collect any data from children.

Changes to this policy

If we materially change how the app collects, uses, or shares data, we will update this policy and update the in-app and Play Store listing references to it. The "Effective date" at the top reflects the most recent change.

Contact

Questions about this policy, or requests to delete your account's scan-credit balance on our server, can go to hyperkoalastudio@gmail.com.