Privacy Policy

Effective date: 10 July 2026

This Privacy Policy explains how Datalytic AS ("we", "us") collects, uses, shares, and protects personal data when you use Item Buddy, the storage-inventory app for iPhone, iPad, and Mac. Processing complies with the GDPR and applicable data protection laws.

1. Personal Data We Collect

Account information

• Email address (for sign-in and service communications)
• Name (if you provide it)
• Password (stored only as a secure hash, never in plain text)
• Two-factor authentication settings, if enabled

Your content

• Photos of your storage boxes and items
• Box, item, and location titles, descriptions, and tags
• Receipt, warranty, and other document attachments you add for insurance purposes
• Support requests and feedback

AI analysis data

• Box and item photos you choose to analyze are sent for automated content identification (see Section 4)

Subscription and transaction data

• Your subscription tier, trial status, and renewal/expiry dates
• Purchase history for Item Buddy Pro

We do not collect or store your payment card details. Purchases are processed by Apple; we never see your card number.

Technical data

• Device model and operating system version
• IP address, access times, and error logs
• Crash reports and diagnostics

2. How We Use Your Data

We process data to: provide the app and sync your inventory across your devices; run AI content analysis you request; manage your subscription and entitlements; respond to support requests; keep the service secure and prevent fraud; improve the app; and comply with legal obligations.

3. Legal Basis

We process your data to perform our contract with you (providing the app), on the basis of your consent (e.g. optional AI analysis), for our legitimate interests (security, service improvement), and to meet legal obligations (e.g. financial record-keeping).

4. AI Content Analysis

When you ask Item Buddy to identify the contents of a box or item, the relevant photo is sent to Google Gemini for automated analysis, and the generated text is stored as part of your content. This processing happens only for photos you choose to analyze. Your content is not used to train Google's or any other third party's models. AI-generated results may be inaccurate and should not be relied upon as professional or insurance advice.

5. Data Sharing

We share data only with:

• Infrastructure and hosting providers (including cloud storage such as Amazon S3, where your images are stored)
• Google, for the AI analysis feature described above
• Apple, which processes subscription payments and manages App Store billing
• Authorities, when legally required

All service providers operate under GDPR-compliant data processing agreements. We do not sell your personal data.

6. Data Retention

• Account information: until account deletion + 30 days
• Your content (photos, items, attachments): until account deletion + 30 days
• Technical data: 12 months
• Transaction and subscription records: as required for financial and tax law (up to 10 years for accounting records)
• Support communications: 2 years from last interaction

7. Your Rights

Under the GDPR you have the right to access, correct, erase, export (portability), restrict, or object to the processing of your data, and to withdraw consent at any time.

• Delete your account: You can permanently delete your account and content directly in the app (Settings → Delete Account); removal completes within 30 days.
• Other requests: Contact support@datalytic.no; we respond within 30 days.

You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

8. Data Security

We use encryption of data in transit and at rest, strict access controls, industry-standard infrastructure, and ongoing security monitoring. Passwords are stored only as secure hashes.

9. International Data Transfers

Where data is transferred outside the EEA (including to Google and Apple), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and applicable adequacy decisions.

10. Children's Privacy

Item Buddy is not intended for persons under 16. If we learn we have collected data from a child under 16 without proper consent, we will delete it promptly.

11. Cookies and Tracking

Item Buddy does not use advertising or cross-site tracking. Our website uses only essential cookies required for authentication, security, and preferences.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated in the app or on our website. Continued use after changes take effect constitutes acceptance.

13. Contact

See also our Terms of Service.