Privacy Policy

My Orderly Home ("we", "our", "the app") is a personal inventory management application, operated from India. You can reach us at support@myorderlyhome.com. This privacy policy explains what data we collect, how we use it, the third-party services we use, and your rights regarding your information.

This policy covers both the app and the website at myorderlyhome.com. Sections 1(a) through 1(k) and Sections 2 through 11 describe the app. Section 1(l) describes the two things the website itself does: the free printable label maker at myorderlyhome.com/labels, and the optional mailing list. You do not need an account to use the label maker, and using it sends us nothing.

1. Information We Collect

a) Account Information (Required)

You sign in with Google or with Apple. From them we receive your email address and your name. If you use Apple's Hide My Email, we receive an Apple relay address instead of your real one. There is no password and no email sign-in link. We do not access your contacts.

• Email address — used to sign you in, to identify your account, and to send the security emails described in Section 1(i)
• Display name — shown within the app to identify you
• User ID — a random identifier assigned to your account
• Unique name — a name created automatically with your account (for example calm-otter-4821). It never changes
• Share code — an 8-character code, shown with a QR on your Profile page, that other people enter or scan to share things with you (see Section 8)
• Time zone — your phone's time zone, used to show local times in security emails
• Recovery email address — optional, only if you add one
• Your devices — the list of devices registered to your account: whether each is Android or iPhone, its app version, and when it was last seen

Who sees what. People you share with, or who share with you, see your display name and unique name. Someone who enters or scans your share code also sees your email address in masked form (like ab*****@gmail.com), so they can check they have the right person. Your full email address is never shown to other users.

b) Inventory Data (User-Created)

• Storage areas, storage units, containers, and items you create
• Item names, descriptions, tags, notes, categories, and other details you enter
• Lending records you create to track things you have lent or borrowed, including the other person's name and any contact details you enter for them
• Favorites, access labels, and organizational preferences

c) Photos (Optional)

Photos you choose to add to a storage area, storage unit, container or item (this needs camera or photo access). Before upload they are reduced to at most 2560 pixels on the longest side, and the full-size original is never sent. A new account starts with a small example inventory (a Bedroom and a Garage) with a few photos, which you can delete.

d) Voice Input (Optional)

For voice search and voice entry, your phone's built-in speech recognition (provided by Google on Android and Apple on iPhone) turns your speech into text. Depending on your phone, that service may process the audio itself. We never receive the recording. For voice entry, the text is sent to Google Gemini to turn it into a list of item names. Voice search stays on your phone.

e) AI Entry from Photos (Optional)

Photos you use for AI entry are sent to Google Gemini (a paid service) to suggest a list of items. They are not saved in your inventory or on our servers. Under Google's terms for its paid service, Google does not use them to improve its products; it keeps them for a limited period only to detect misuse of its service and for any disclosures the law requires.

f) Location

The app does not use your phone's location or GPS and does not ask for location permission. If you switch on usage data (Section 1(h)), our analytics provider estimates your country and state/region from your IP address and then discards the IP address. It keeps nothing more precise. Separately, our security logs record the country and region your IP address points to on every request, whatever you choose here (Section 1(k)).

g) Purchases

If you buy a plan or AI credits, the purchase is made through Google Play (or the App Store on iPhone). RevenueCat, our subscription provider, receives your account's random ID and your purchase history. We store your plan, its dates and your AI credit balance. We never see card details.

h) Crash Reports and Usage Data (Optional, Off by Default)

The first time you reach Home, the app asks "Help improve the app?" Both choices start off, and you can change them at any time in Settings > Privacy (Share Usage Data and Send Crash Reports).

• Crash reports (Sentry) — the type of error, where in the app's code it happened, the app version and the phone model. They never include your email, your name or anything in your inventory. If crash reports are off, the app keeps a note of the last crash on your phone only, and next time asks whether you want to send it.
• Usage data (PostHog) — which screens and features are used, recorded as fixed words and numbers, never anything you type or what is in your inventory. It also records your plan level and a few broad facts: how long your account has existed and roughly how big your inventory is (both in ranges), whether you share things or have things shared with you, whether notifications are allowed, whether you are online, and whether you signed in with Google or Apple. It includes the phone model and operating system, and your approximate country and state/region, worked out from your IP address. The IP address itself is not stored. If usage data is on, the app may occasionally show a short survey (ratings or multiple choice, no free text).

Neither service receives your name, email or account ID. Both use a random ID created on your phone, which is reset when you sign out. This data is pseudonymous, is not linked to your account, and is processed in the United States.

i) Notifications and Security Emails

We store in-app notifications about sharing: invitations, and when an invitation is accepted, declined or removed. We send them as push notifications to up to three of your most recent devices, using a device token from Firebase Cloud Messaging.

We also email you when something important happens to your account: a new account, a new sign-in, other devices logged out, account deletion requested, cancelled or completed, and a recovery address confirmed. These emails never contain your location or IP address.

j) Calendar Reminder (Optional)

When you record a loan with a return date, you can tick "Add a reminder to my calendar". The app then opens your phone's calendar app with an event already filled in: the thing's name, the other person's name, their contact details if you entered any, and the return date. You decide whether to save it. We do not read your calendar and keep no copy of the event. On iPhone, iOS may ask for calendar permission; on Android no permission is needed.

k) Feedback, Sign-In Records and Security Logs

• Feedback — Report a Bug and Request a Feature store your message with the app version and phone type. Feedback you send from the app is stored without your name or account attached, so please don't put personal details in it.
• Sign-in records — when you sign in, our hosting provider records the session's IP address and device type for security. Sign-ins are also recorded in the security logs below.
• Security logs — our servers keep a technical record of each request to the service: when it happened, a shortened form of your device's IP address (its last part removed, so it points to a network rather than to one connection) and the country, region and network it points to, your User ID (Section 1(a)) and session ID, the type of device and app making the request, and which part of the service was used and whether it worked. These records never include your email address or your name. We use them only to keep the service secure — to detect, investigate and respond to unauthorised access and other security incidents — and to answer lawful requests from authorities. They are kept for one year; see Section 5(g). Our hosting provider's own record of each request, which includes your full IP address, is deleted after 7 days.

l) Website: Label Maker and Mailing List

The label maker collects nothing. The printable label maker at myorderlyhome.com/labels runs entirely in your browser. The words you type on your labels, the styles and paper size you pick, and the sheet you print are never sent to us or to anyone else, are not stored on our servers, and do not require an account. What the page remembers between visits is kept in your own browser's local storage on your device, and clearing your browser data removes it. Like every page on this site, it loads its fonts from Google Fonts, which receives your IP address in order to deliver them.

The mailing list is optional and opt-in. The label maker page may offer a card inviting you to join a launch and product-update list. You are never required to join it in order to make or print labels. If you choose to join:

• What we collect — your email address, and the fact and time that you submitted it. We do not ask for your name, and we do not collect anything about the labels you made.
• What we use it for — to email you when the app launches, and occasionally when new label styles or printable templates are added. We do not use it for anything else.
• Who processes it — your address is submitted to, and stored by, Brevo, our email delivery provider, which hosts the list and sends the messages on our behalf. It is not shared with anyone else, and it is never sold, traded, or rented.
• How to leave — every email we send carries a one-click unsubscribe link, and unsubscribing takes effect immediately. You can also email support@myorderlyhome.com and ask us to remove you, and we will delete the record.
• How long we keep it — until you unsubscribe or ask to be removed. After that we retain only the suppression record needed to make sure we do not email you again.

The mailing list is separate from your app account. Joining it does not create an account, and deleting your app account does not remove you from the mailing list — unsubscribe separately if you want both gone.

2. How We Use Your Data

• To provide and maintain the inventory management service
• To authenticate your identity and secure your account
• To keep the service secure and to answer lawful requests from authorities, using the security logs described in Section 1(k)
• To let you share storage areas, storage units and containers with people you choose, using their share code
• To send notifications about sharing
• To email you about security events on your account
• To manage your plan and AI credits and enforce plan limits
• If you switch them on: to understand how the app is used and to fix crashes
• To enforce usage limits and prevent abuse
• To send launch and product-update emails, if — and only if — you joined the mailing list described in Section 1(l)

Why We Can Use Your Data

• To provide the service you signed up for — your account, your inventory, sharing, notifications, security emails and your plan
• Your consent — for crash reports and usage data, which you can withdraw at any time in Settings > Privacy, and for the mailing list
• Legal obligations — where the law requires us to keep or disclose something

3. Data Storage and Security

• Your account and inventory data are stored with Supabase, our cloud hosting provider (database, sign-in, and file storage)
• Data is encrypted in transit and at rest on our provider's systems
• Data is hosted in the United States (US West — Oregon)
• Security logs (Section 1(k)) are copied to Cloudflare storage in North America, where they are kept for one year and protected against being changed or deleted early
• The Service has no password. Sign-in is handled by Google or Apple, so we never receive, handle or store a password
• Access controls ensure users can only access their own data and data explicitly shared with them
• The app also maintains a local offline cache on your device, which syncs with the cloud when connectivity is available. That file lives in the app's private storage area, which Android keeps isolated from other apps; the app does not add an encryption layer of its own on top of the device's storage encryption

Media Stored on Your Device

• Photos are kept in the cloud and, as copies, on your phone. The app keeps a copy of the photos you add or view in its own storage on your phone, so they open quickly and still show offline. Signing out removes the app's copies from the phone.
• Saving a photo to your phone's gallery is something you do yourself. In Settings > Photos > My Photos, tap a photo and choose Save to phone (or long-press to pick several). It goes into an album called "My Orderly Home" in your gallery. The copies in your gallery stay until you delete them, and are covered by whatever backs up your gallery.
• Android's own backup. The app does not switch off Android's automatic backup, so Android may include data the app keeps on your phone, such as its offline copy of your inventory and its settings, in your Google account backup.

Where the App Is Offered, and Where Your Data Is Stored

The app is not currently offered in the European Economic Area (EEA), the United Kingdom, or Switzerland. Your account and inventory data are stored and processed in the United States (US West — Oregon). Security logs are stored with Cloudflare in North America (Section 5(g)). Crash reports and usage data, if you switch them on, are processed in the United States. The third-party services listed in Section 4 may also process data outside your own country.

If we make the app available in the EEA in future, data for users in that region will be hosted within the EEA rather than transferred out of it, and we will update this policy before that happens.

4. Third-Party Services and Data Sharing

We use the following third-party services to operate the app and the website. Each receives only the minimum data necessary for its function:

Sentry and PostHog are both off unless you switch them on in Settings > Privacy, and neither is ever linked to your account. See Section 1(h).

We do not sell, trade, or rent your personal data to any third party. We do not use advertising SDKs. Your inventory data is visible only to you and users you explicitly share it with.

5. Data Retention and Deletion

a) Deleting Individual Data

You can delete your data at any time without deleting your account:

• Items — Open the item and tap the delete button.
• Containers — Open the container, go to settings or options, and tap delete. All items within the container will also be deleted.
• Storage Units — Open the storage unit, go to settings or options, and tap delete. Everything within it will also be deleted.
• Storage Areas — Open the storage area, go to settings or options, and tap delete. Everything within it will also be deleted.
• Categories and Tags — Remove them from the relevant management screens.
• Shared Access — Open the storage area, storage unit or container, go to Who has access, and remove the person.

Deleted storage areas, storage units, containers and items disappear from the app immediately. They and their photos are permanently removed from our servers about 30 days later, by a daily clean-up.

b) Exporting Your Data

Settings > Data & account > Export My Data prepares a file with everything in your account. When it is ready, tap Download My Export to save my-orderly-home-export.json to your phone's Downloads. We delete the prepared file from our servers after 7 days. You can export even without a plan.

The export does not contain your photos. The file describes each photo, but the pictures themselves — and any link to them — are deliberately left out, because a link inside an exported file would work for anyone the file reaches. To keep your photos, use Settings > Photos > My Photos: tap a photo and choose Save to phone, or long-press to pick several.

c) Deleting Your Account

You can delete your entire account via Settings > Data & account > Delete Account. If the app is showing the plans screen because you have no plan, tap Delete my account there instead. Account deletion works as follows:

• Your account is immediately marked for deletion. You are not signed out — you stay signed in on purpose, because signing you out would put you outside every screen that can undo this
• There is a 14-day grace period during which you can cancel the deletion. Open Settings and tap Keep My Account on the banner shown there. If the app is showing the plans screen instead, the same Keep my account control is on that screen — you never have to pay in order to undo a deletion you asked for
• Your photos are not deleted at the moment you make the request. They stay in our storage for the whole grace period and are deleted when the 14 days expire. That is deliberate: it is what lets a cancelled deletion give you your photos back intact, and what keeps the app working normally while you decide
• After 14 days, your account and all associated data are permanently and irreversibly deleted from our servers, except security logs, which are kept until they are a year old (Section 5(g)). Things you shared stop being visible to other people
• We email you when a deletion is requested, when it is cancelled, and when it has been completed

d) Automatic Deletion

If your account has had no active plan for 90 days, we schedule it for deletion and email you. You then have 14 days to keep it by subscribing again, and after that it is erased as described above. Using the app without a plan does not count; only having a plan does.

If you sign in but never accept the terms and privacy policy, the account is deleted after 14 days.

e) Data We Keep After Account Deletion

When your account is erased we keep only an anonymous record that an erasure happened and which steps were completed — and, until they are a year old, the security logs described in Section 5(g), which hold a shortened IP address and your User ID but never your email address or name. Your record at RevenueCat is erased first. Google Play and Apple keep their own purchase records under their own policies.

Crash reports and usage data were never linked to your account, so they cannot be found and deleted by account. They expire under those services' own retention periods. Feedback you sent through the app is stored without your name or account and is not removed.

f) Data on Your Device

Signing out removes the app's offline copy of your inventory, its photo copies, your saved preferences and your privacy choices from that phone. When an account is erased, the app signs out on that phone the next time it opens. Uninstalling the app, or clearing its storage in your phone's settings, also removes them.

Photos you saved to your gallery with Save to phone stay there until you delete them, and a copy in your Google account backup (Section 3) is managed by Android, not by us.

g) Security Logs

Security logs (Section 1(k)) are kept for one year from the day they are recorded and are then deleted automatically. They are kept for that year even if you delete your account, because the laws that apply to us require records of this kind to be kept for a minimum period, which one year covers. They never contain your email address or your name, and once your account is erased nothing we keep links the User ID in them to your email or name — though the shortened IP address in them is kept until the year is up. We use them only to keep the service secure and to answer lawful requests from authorities.

6. Permissions We Request

7. Plans and Payments

My Orderly Home offers two plans, Basic and Premium (no free plan and no free trial), and optional AI credit packs. They are sold through Google Play (and the App Store on iPhone) and managed by RevenueCat. We never handle payment details. We store your plan, its dates and your AI credit balance to decide what your account can do.

8. Sharing and QR Codes

You can share a container, and on Premium a storage unit or a whole storage area, with someone you choose.

• Share codes — to share with someone, you enter or scan their share code. Every account has an 8-character code, shown with a QR on its Profile page. A code works for 7 days and for up to 5 people, and can be replaced at any time.
• Checking the person — before you send, the app shows that person's display name and a masked email (like ab*****@gmail.com) so you can check it is the right person. Their full address never leaves our servers.
• What they see — the person can accept or decline. If they accept, they see what you shared, read-only, including photos, plus your display name and unique name. They cannot change it or share it on.
• Blocking — the person can also block you. Blocking removes their access to your shares, and you are not told.
• Who has access — the Who has access page shows who holds access, and you can remove anyone at any time.
• Access labels — named groups of people you can share with in one step. They do not grant anything by themselves.
• QR stickers — stickers you print carry only a random 6-character code. Scanning one opens the thing only for you and people you have shared it with; to anyone else it shows nothing.

9. Age Requirement

This app is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

10. Your Rights

You have the right to:

• Access your personal data — use the Export My Data feature in Settings
• Delete individual data — delete specific items, containers, storage units or storage areas at any time within the app
• Delete your account — request complete account and data deletion via Settings > Data & account > Delete Account. Security logs are the one exception that carries your User ID: they are kept until they are a year old (Section 5(g))
• Withdraw a deletion request — cancel a pending account deletion at any time inside the 14-day grace period, via Keep My Account
• Crash reports and usage data — both are off unless you switch them on, and you can change either at any time in Settings > Privacy
• Withdraw consent for optional permissions (camera, microphone, photos, calendar, notifications) at any time via device settings
• Data portability — export all your data via Settings > Data & account > Export My Data
• Unsubscribe from the mailing list — use the unsubscribe link in any email we send, or email support@myorderlyhome.com. This is independent of your app account; see Section 1(l)

These rights do not depend on paying us. If you have no plan and the app shows the plans screen, that screen still carries Export my data, Delete my account and Sign out — and, while a deletion you asked for is pending, Keep my account. You never have to subscribe in order to obtain a copy of your data, ask for it to be erased, or change your mind about erasing it.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by updating the "Last Updated" date and the "Policy Version" shown at the top of this page. The app records which policy version you accepted, so that version number identifies the exact wording you agreed to. Before a significant change takes effect we will tell you in the app and by email, at least 14 days in advance, and where the law requires your agreement we will ask for it before you continue. We keep previous versions and will provide one on request.

12. Contact Us