Home Inventory AI Privacy Policy

Home Inventory AI ("Home Inventory") is a home inventory and belongings catalog whose optional AI features send a photo or a question to a server for processing. It is developed and maintained by Prachi, an independent developer, who you can reach any time at support@elevatedev.co.in.

This privacy policy took effect on the "last updated" date shown above (September 9, 2026). It explains, in plain language, what data the app handles, how that data is used, and — just as importantly — what the app does not do.

The short version, stated plainly because it matters: your inventory — items, photos, documents, values and insurance details — lives on your device, and the ordinary catalog, reminders, reports and exports all work on-device. But the two AI photo features send a photo off your device. Tapping "Identify item" sends that photo of your belongings to ElevateDev.co's backend, which passes it to Google Cloud Vertex AI for processing. Tapping "Scan invoice" does the same with a photo of your invoice or receipt — which commonly shows a name, address, the last four digits of a payment card and a purchase history. Asking your inventory a question sends the relevant inventory records as text, not a photo. The AI features also use Google Sign-In (your email keys your AI-credit balance), a hashed device identifier (to prevent trial abuse), rewarded-video ads served by Google AdMob — there is no banner ad in this app — and Firebase App Check (to verify genuine app installs). What we don't do: we don't sell your data, we don't keep a server-side library of your inventory, and we don't send anything anywhere unless you explicitly request an AI action. You can delete your server-side data at any time.

Home Inventory AI collects the minimum needed to run its catalog on your device and to power its optional AI features and the free credit system behind them. Your inventory — items, photos, documents, values, serial numbers and insurance details — is stored on your device in the app's sandboxed private storage, and every core feature works there. When you use an AI action, the data relevant to that action leaves your device: for "Identify item" and "Scan invoice," the photo you captured or picked is encoded on your device and sent over an encrypted connection to ElevateDev.co's backend, which forwards it to Google Cloud Vertex AI (running Google's Gemini models) for that one inference call. For "Ask your inventory," the app assembles a text block of the inventory records relevant to your question, on your device, and sends that text — no photo is sent for this feature. Nothing is sent unless you tap an AI action.

An invoice or receipt photo commonly shows a name, address, the last four digits of a payment card and a purchase history, alongside the item, price and date the feature is extracting. Scanning an invoice with AI sends the whole photo, so it sends whatever of that information appears in the frame — the AI does not selectively read only the item fields.

The AI features require Google Sign-In. When you sign in, the app receives your Google account email address and basic profile information (such as your name and profile picture); your email is the key for your AI-credit and usage ledger. The app also sends a hashed device identifier to our server, used solely to prevent abuse of free trial credits (for example, repeated reinstalls to farm credits), and our server keeps a per-account usage ledger recording your credit balance, the AI actions you have used and daily usage counts — see "Your Account, Credits & the Usage Ledger" for exactly what that ledger does and does not store. Credits earned by watching a rewarded video are granted only after server-side verification confirms the ad was genuinely completed.

Finally, Google AdMob processes advertising data to serve the banner and rewarded ads — this app shows no banner ad (see "Advertising (Google AdMob)" below) — and Firebase App Check verifies that requests to our server come from a genuine, unmodified copy of the app. We do not keep a server-side library of your inventory — your catalog, photos and documents live on your device, and the only off-device copy of your inventory that can exist is the optional backup you choose to place in your own Google Drive.

To do its job, Home Inventory AI stores the following locally, in the app's private storage on your device. This local data stays put — a photo or inventory text is transmitted only when you explicitly run an AI action, as described above:

• Item records: names, descriptions, quantities, values, purchase details, brand, model, serial numbers, barcodes, condition, status (owned/sold/lent) and warranty dates — in the app's sandboxed private storage.
• Photos and document attachments (receipts, manuals, warranties), stored in the app's private storage.
• Rooms (including nested rooms and containers), categories, tags, custom fields and in-app preferences.
• Any insurance policy details you enter (insurer, policy number, renewal date, coverage limits) and reminders you set.
• Your sign-in state and a local copy of your AI-credit balance.
• If you enable the optional app lock: a salted cryptographic hash of your PIN — never the PIN itself.
• PDF reports, CSV exports and backups you generate (including optional scheduled backups), saved only to folders you choose.

In the categories used by Google Play's Data Safety section, the information Home Inventory handles falls under:

• Photos & documents (item photos and any receipts, manuals or warranty documents you attach) — stored on-device; a photo is transmitted off your device only when you run "Identify item" or "Scan invoice."
• Personal & financial inputs (item values, purchase details, serial numbers, warranty dates and any insurance policy details you enter) — stored on-device; a compact summary of the relevant records is transmitted only when you ask the AI a question about your inventory.
• Personal information — your Google account email address and basic profile details (name, profile picture), received when you sign in to use the AI features.
• Device or other IDs — a hashed device identifier (sent to our server solely to prevent trial-credit abuse) and the Android Advertising ID (processed by Google AdMob solely to serve and measure the opt-in rewarded-video ads — this app shows no banner ad).
• App activity & settings (rooms, categories, tags, reminders, preferences, optional app-lock settings) plus, for the AI features, your AI-credit balance, the AI actions you have used and daily usage counts, and standard ad-interaction data processed by Google AdMob.
• Your inventory itself is stored on-device in the app's private storage; the categories above are transmitted only for the specific purposes stated — the AI processing you request, running the credit ledger, abuse prevention and rewarded advertising — and are never sold or used to profile you. A copy of your inventory exists off the device only if you choose to upload a backup to your own Google Drive, under your account, never ours.

The data above is used only inside the app, on your device, to provide the features you asked for. It is never used for advertising, profiling, marketing, "improving our services" or any purpose beyond these:

• To catalog your belongings by room, category and tag, with values, purchase details, serial numbers and warranty dates — on your device.
• To deliver the AI feature you request — identifying an item from a photo, scanning an invoice into structured items, or answering a question about your inventory — by sending the relevant photo or text to an AI model for processing.
• To run your AI account and credit balance — your email identifies your usage ledger, so credits you earn persist across sessions and reinstalls.
• To keep the free tier fair — daily usage counts and the hashed device identifier enforce fair-use limits and prevent trial-credit abuse.
• To grant ad-earned credits correctly — credits are added only after server-side verification confirms a rewarded ad was genuinely completed.
• To protect the service — Firebase App Check confirms requests come from a genuine, unmodified copy of the app.
• To read barcodes and receipts with on-device text recognition (a bundled model, run locally) when you use those quick-scan tools.
• To remind you before a warranty expires, a policy renews or a maintenance/loan-out reminder you set comes due, and to compute totals, charts and depreciation-aware value estimates — all on-device.
• To generate insurance-ready PDF reports, CSV exports and backups that you export and share yourself, and to upload a backup to your own Google Drive if you enable the optional backup.
• To lock the app behind your PIN, fingerprint or screen lock, if you enable the optional app lock.

ElevateDev.co does not sell, rent, trade or disclose your data to third parties for advertising or profiling. We share data only with the service providers that make the app work, and only what each needs for its role: Google Cloud Vertex AI (the photo or text relevant to an AI action you request, forwarded through our backend to generate the result), Google Sign-In, Google AdMob (the opt-in rewarded-video ads — no banner), Firebase App Check (app-integrity checks) and — only if you enable it — Google Drive (the optional backup). Each is described below.

Your inventory data can otherwise leave the app in exactly two ways, both under your control: when you explicitly export or share something yourself (a PDF report, CSV or backup file, transferred by the app you share it to under that app's policies), and when you run the optional backup to your own Google Drive.

Home Inventory AI integrates a small, fixed set of third-party services, each receiving only what is needed for its role: Google Cloud Vertex AI, running Google's Gemini models (receives the photo or inventory text relevant to an AI action you request, forwarded by our backend, to generate the result — see "AI Features" below and "Do We Use Your Photos to Train AI?"), Google Sign-In (provides us your email and basic profile when you sign in, governed by Google's privacy policy at https://policies.google.com/privacy), Google AdMob (serves the banner and rewarded ads, described in its own section below), Firebase App Check (verifies genuine app instances, governed by Firebase's privacy documentation at https://firebase.google.com/support/privacy) and — only if you enable it — Google Drive (the optional backup). There are no analytics platforms and no data brokers in the app.

The core app and the optional Google Drive backup are free, and as of this version no purchase is reachable anywhere in the app. AI features run on credits — a small free trial, then credits you earn by watching optional rewarded-video ads. The app contains Google Play Billing code for a possible future purchase, but no purchase screen is presented and no payment is ever processed. If a purchase is enabled in a future version, Google Play Billing — not ElevateDev.co — will handle the payment, the developer will never receive or store card details, and this policy will be updated first, with a new date, before that version ships.

If you install the app from Google Play, Google's own terms and privacy policy govern the store itself (downloads, payments and reviews), independently of this app.

Home Inventory may request the following Android permissions, and only for the reasons stated. Denying an optional permission never locks you out of the rest of the app:

• Camera (optional) — to photograph items, scan barcodes and capture receipts or labels. Photos are used on-device for the catalog and quick text recognition; a photo is only sent to our backend when you run an AI action (identify an item, or scan an invoice with AI).
• Notifications (optional) — to deliver warranty-expiry, policy-renewal and custom reminders you set. You can use the entire app without notifications.
• Photo access (via the system photo picker) — to let you attach existing photos to items. The picker shares only the photos you select.
• Internet / network state — required for the AI features (sending the photo or text you choose to process and returning the result), Google Sign-In, syncing your credit balance, the opt-in rewarded-video ads from Google AdMob, and the opt-in Google Drive backup. Every connection is encrypted (HTTPS). The ordinary catalog, reminders, reports and exports work without a connection.
• Advertising ID (AD_ID) — used by the Google AdMob SDK to request, and where you consent personalise, and measure the opt-in rewarded-video ad. You can reset or delete your Advertising ID, and opt out of personalised ads, at any time in Android Settings → Privacy → Ads.

Home Inventory AI contains no analytics SDKs and no third-party trackers beyond the two services it plainly discloses: Google AdMob (the banner and rewarded ads, detailed in the "Advertising (Google AdMob)" section below) and Firebase App Check (app-integrity verification). We do not profile you, and your inventory content is never shared with the ad SDK or used to target ads.

There is no banner ad anywhere in this app. Ads are rewarded video only: a full-screen video plays only when you deliberately tap "Watch a video" to earn AI credits, and the app never shows an ad you did not ask to see.

Your inventory is held in the app's private storage, which Android sandboxes from every other app on the device, and the app is excluded from Android's automatic cloud backup. The database itself is not separately encrypted at rest, so the protection it has is the Android sandbox plus the device lock screen; you can add the app's own optional biometric or PIN lock in Settings for a second layer. All communication between the app, ElevateDev.co's backend and Google Cloud Vertex AI is encrypted in transit (HTTPS/TLS); the backend logs only metadata about each request (method, path, timing, a request id) and never logs a request body, so a photo you send for an AI action is never written to a request log; server access is restricted; Firebase App Check rejects requests that do not come from a genuine copy of the app; and the device identifier we store is a hash, not the raw hardware identifier. If you enable the optional Google Drive backup, the backup file travels over an encrypted (HTTPS) connection to a hidden, app-private folder of your own Google Drive; it is protected by your Google account, but it is not end-to-end encrypted — there is no separate passphrase that only you hold — so it is exactly as private as your Google account.

If you enable the optional app lock, your PIN is stored only as a salted cryptographic hash (PBKDF2), never in plain text, and biometric checks are verified by Android — the app never sees your fingerprint or face data.

We do not claim a specific security certification such as ISO 27001, and we do not run a formal penetration-testing or third-party security-audit programme.

For an extra layer of protection we recommend using your device's screen lock (PIN, pattern or biometrics), which also protects everything inside the app, and keeping Android's full-disk encryption enabled (it is on by default on modern devices).

Any backup or export features in Home Inventory produce files that you control. They are created only when you ask, written only where you choose, and are never uploaded by the developer. If you copy an export to a cloud drive, that storage provider's policy applies to the copy you made. This user-initiated path is the only way your data can leave the device.

Standard Android device backups (if you have them enabled in system settings) are managed by Android and your device manufacturer under Google's terms, not by Prachi.

Your inventory itself: on your device, retained until you delete it.

Your photos, sent for an AI action: our backend forwards each photo to Google Cloud Vertex AI for that one inference call and does not write the photo to any durable store on our side — not to the usage ledger described below, not to a request log, and not to any cache. Our backend does not keep the AI's text output either: it is returned to your device and written to no store on our side. This no longer depends on the app asking for it — the backend has no path that persists an AI result, so an old or modified client cannot opt itself back in. We could not find, in the app's code, any place a submitted photo is written to disk or database on our backend. We do not control, and cannot independently verify, how long Google's Vertex AI infrastructure itself might retain a submitted image for abuse and safety enforcement before discarding it — see "Do We Use Your Photos to Train AI?" for what Google states about that processing.

The one repeat-scan convenience cache in this app lives only on your device: if you re-submit the exact same photo(s) for "Identify item" or "Scan invoice," the app recognizes the match locally and reuses the earlier result without re-uploading the photo — a small, capped (50-entry) cache in the app's private storage that is never transmitted and is cleared when you clear the app's data or uninstall. This is a device-side convenience, not a server-side cache — no equivalent photo cache exists on our backend.

Your AI account and usage ledger, kept on our server while your account is active: your email, AI-credit balance and grants, which AI actions you have used, daily usage counts, and a per-call ledger row (operation, status, token counts, credits spent and how long the call took). That row records that a call happened and what it cost — never its content: not the question you asked, not the model’s reply, and not a photo you sent, only the fact that N photos were attached to that call. We do not enforce a fixed automatic expiry on this ledger; it is retained until you delete it, using either path below.

When you delete your data, we permanently remove your credit balance and grants, your account record (the email that keys your account), your entire usage ledger, your usage and rate-limit counters, and any pending rewarded-ad verification records. The one thing we deliberately keep is the one-way hashed device identifier used solely to stop repeated free-trial abuse — it contains no name, email or personal information and cannot identify you.

Deleting your data is straightforward:

• Use the in-app "Delete my data" option (Settings → Help & FAQ). Your personal records — credit balance, account record and usage ledger — are erased the moment you confirm, and you are signed out. A scheduled server process then makes a second, automatic pass over any request raised out-of-band (for example, by email) to finish an incomplete deletion.
• Or email support@elevatedev.co.in from your sign-in address and we will delete your server-side data within a reasonable time (normally within 30 days).
• On-device: delete individual items, photos, documents, rooms or reminders inside the app; clear the app's data from Android Settings → Apps → Home Inventory → Storage (this also clears the on-device repeat-scan cache described above); or uninstall the app, which removes everything it stored on the device.
• If you created a Google Drive backup, that copy lives in your own Google Drive: delete it from the app's backup settings, or disconnect the app and remove its hidden app data from your Google account's Drive settings. The developer holds no copy of it.
• Data processed by Google (Sign-In, AdMob, Firebase, Vertex AI) is governed by those services' own retention policies and controls; you can reset or delete your Advertising ID at any time in Android Settings → Privacy → Ads.

Home Inventory AI is not directed at children under 13 (or the equivalent minimum age in your country), and ElevateDev.co does not knowingly collect personal data from children. The AI features require Google Sign-In, which itself requires a Google account meeting Google's own age requirements. Rewarded-video ads are configured in line with Google's ad-content policies, and the app never shows a personalised ad without the consent described under "Advertising Consent & Choices." If you believe a child has provided personal data through the app, contact support@elevatedev.co.in and we will delete it.

Depending on where you live — including under the GDPR, the UK GDPR and India's DPDP Act — you have rights over your personal data: access, correction, deletion, portability, objection to or restriction of certain processing, and withdrawal of consent. The GDPR article each one derives from is noted below; you can exercise most of them directly.

• Access (GDPR Art. 15) — your inventory is on your device, fully visible there; email us for a copy of your server-side usage ledger.
• Correction (GDPR Art. 16) — edit any item directly in the app; email us to correct your account email or a ledger entry.
• Erasure / deletion (GDPR Art. 17) — use the in-app "Delete my data" option, or email support@elevatedev.co.in (see "Data Retention & Deletion").
• Portability (GDPR Art. 20) — exported PDF and CSV files, and your full backup, are yours, in ordinary formats, stored where you choose.
• Restriction of processing (GDPR Art. 18) — email us and we will act on a request to restrict processing of your account or ledger data.
• Objection (GDPR Art. 21) — the app shows personalised rewarded-video ads where you consent, and personalised advertising is profiling under the GDPR; you have an unconditional right to object, by declining or withdrawing consent from the ad-privacy choice in the app or via "Opt out of Ads Personalisation" in Android Settings. This means non-personalised rewarded ads instead of none, since ads are how AI credits beyond the free trial are earned.
• Withdraw consent (GDPR Art. 7(3)) — where a purpose relies on your consent (personalised ads, or the optional Google Drive backup), withdraw it at any time as easily as you gave it; signing out also stops any further AI transmission.
• Automated decision-making (GDPR Art. 22) — an AI model produces the text, tags or extracted fields you see after an AI action, but you review and can edit or discard every result before it changes your inventory; the app makes no decision about you that produces a legal or similarly significant effect on its own.
• Complaint (GDPR Art. 77) — see "How Do I Lodge a Complaint?" below.

This is the most important section of this policy: two of the three AI features send a photo off your device. AI results are generated by Google Cloud Vertex AI, running Google's Gemini models, accessed through ElevateDev.co's backend — we do not run our own AI model. When you request an AI action, the relevant data travels: your device → ElevateDev.co's server → Vertex AI → back to your device, over encrypted (HTTPS/TLS) connections at every step.

• Nothing is sent until you tap an AI action. The ordinary catalog, reminders, reports, exports and on-device barcode/receipt scanning work on your device.
• "Identify item": the photo you captured or picked (of the item itself) is sent so Vertex AI can read it and return a name, brand, category and similar fields.
• "Scan invoice": the photo of the invoice or receipt (or, for a multi-page document, up to 10 rendered pages) is sent so Vertex AI can extract items, prices and purchase details. An invoice or receipt commonly also shows a name, address, the last four digits of a payment card and a purchase history — sending the photo sends whatever of that appears in the frame, because the AI reads the whole image, not just the item fields.
• "Ask your inventory": no photo is sent. The app assembles, on your device, the inventory records relevant to your question and sends that as text. Depending on your question this may include your full item list — names, rooms, values, purchase details, serial numbers, barcodes and notes — because answering a question about your whole inventory requires the whole inventory.
• What happens to a submitted photo on our side: our backend forwards it directly to Vertex AI for that one inference call. It is not written to our usage ledger (which records only the fact that N photos were attached to the call, never the image bytes), not written to any server-side cache — this app does not use one — and not saved afterwards in any form: our backend keeps neither the photo nor the text the model extracted from it. See "Data Retention & Deletion" for the full retention picture, including what we could not verify about Google's own processing.
• Vertex AI processes your data as a service provider, under Google Cloud's own terms, solely to generate the result you requested. See "Do We Use Your Photos to Train AI?" below for exactly what Google states about training and retention on its side.
• A practical note: submit through an AI action only what you are comfortable sending to Vertex AI, and always review AI output before relying on it — an AI model can misread a label or a receipt.

AI features require signing in with Google and run on credits — granted as a small free trial and earned by watching optional rewarded ads. Here is exactly what that involves:

• Google Sign-In provides us your email address and basic profile; your email is the key for your per-account usage ledger.
• The ledger records your credit balance, which AI actions you have used and daily usage counts — this keeps your credits available across sessions and reinstalls, and enforces fair-use limits that keep the service free.
• A hashed device identifier is sent to our server solely to prevent trial-credit abuse (for example, repeatedly reinstalling the app or creating many accounts on one device to farm credits).
• Credits earned from rewarded ads are added only after server-side verification confirms the ad was genuinely completed.
• Firebase App Check verifies that requests to our backend come from a genuine, unmodified copy of the app — protecting the service against bots and abuse.
• You can sign out at any time (which stops any further AI transmission), and you can delete your server-side data whenever you like via Settings → Help & FAQ → "Delete my data," which erases your credit balance, account record and usage ledger and signs you out immediately (see "Data Retention & Deletion").

ElevateDev.co does not use the photos or text you submit through an AI action to train any model of ours — we do not operate or train an AI model at all; every AI action is a single inference call to Google Cloud Vertex AI.

By default, Google Cloud does not use content submitted to Vertex AI — including the photos and text this app sends it — to train or improve its foundation models, and does not use it to train, retrain or improve any Google product or service; this default is set out in the Service Specific Terms of the Google Cloud Platform agreement. This is a materially different commitment from Google's free consumer AI products (such as the free Gemini app or the free tier of the Gemini API), which can use submitted content to improve Google's models unless a user separately turns that off — this app never routes your data through those free consumer surfaces; every call goes through the enterprise Vertex AI product, which the app's backend is hard-configured to require (the backend refuses to start in production if that requirement is not met).

We are relaying Google's published commitment, not verifying Google's infrastructure ourselves — we have no way to inspect Google's training pipelines. If you want Google's own wording, see Google Cloud's Service Specific Terms at cloud.google.com/terms/service-terms and "How Gemini for Google Cloud uses your data" at docs.cloud.google.com/gemini/docs/discover/data-governance.

If a future version of Home Inventory AI ever used submitted content to train a model — ours or anyone else's — that would be a material change to this policy, and it would be disclosed here, with a new date, before it happened, not applied silently.

Home Inventory AI's AI features are funded by rewarded video ads served by Google AdMob, an advertising service provided by Google. They are opt-in: an ad plays only when you choose to watch one to earn credits, and ads never interrupt your cataloguing.

To serve and measure ads, AdMob and its advertising partners may collect and process data from your device, including:

• The Android Advertising ID — a resettable, user-controllable identifier used for advertising.
• Device and app information, such as device model, operating system version, app version, language, mobile network information and IP address.
• Coarse (approximate) location derived from your IP address, where permitted. The app itself does not request any location permission.
• Ad-interaction data, such as which ads were shown and whether you viewed, tapped or completed them — used for measurement, frequency capping, fraud prevention and verifying that a rewarded ad was completed before credits are granted.
• Personalized vs non-personalized ads: ads may be personalized (selected by Google based on interests inferred from your activity across apps and sites) or non-personalized (based only on context). Non-personalized ads still use the Advertising ID for frequency capping and fraud prevention.
• Consent (EEA, UK and Switzerland): before any personalized ad loads, the app shows a consent choice using Google's User Messaging Platform (UMP). You can accept or decline; if you decline you only see non-personalized ads (or none), and you can change your choice at any time from the app's settings.
• You are in control: you can opt out of ad personalization, and reset or delete your Advertising ID, at any time in Android Settings → Privacy → Ads.
• How Google uses this data is described in "How Google uses information from sites or apps that use our services" (https://policies.google.com/technologies/partner-sites), in Google's privacy policy (https://policies.google.com/privacy) and in the Google AdMob and Google Ads policies (https://support.google.com/admob).
• AdMob is the only advertising SDK in the app, and your inventory content is never shared with AdMob or used to target ads.

Home Inventory AI can back up your inventory to Google Drive so you can move to a new phone, or recover from a lost one, without losing your catalog. This feature is strictly opt-in: it is off by default, and nothing is ever uploaded until you explicitly enable it and sign in with your own Google account.

• When you run a backup, the app uploads a backup file to the hidden app-private folder (appDataFolder) of your own Google Drive. It is stored in your Google Drive, under your Google account — not on any server of ours. ElevateDev.co never sees, receives or holds a copy of it, and no other app can browse that hidden folder.
• The backup is account-protected, not end-to-end encrypted: it travels over an encrypted (HTTPS) connection and is protected by your Google account's sign-in security, but there is no separate passphrase that only you hold. In other words, it is exactly as private as your Google account — we recommend protecting that account with a strong password and two-factor authentication.
• Data held in your Google Drive is governed by Google's privacy policy (https://policies.google.com/privacy), like anything else you keep in Drive.
• You can delete the backup at any time — remove it from the app's backup settings, or disconnect the app and delete its hidden app data from your Google account's Drive settings — and you can sign out to stop any future uploads.
• If you never enable the backup, the app never contacts Google Drive at all, and your inventory exists only on your device.

Home Inventory AI is developed by Prachi and published by ElevateDev.co, and is distributed on Google Play under the Android package com.vishwk.home_inventory.

For the personal data this app involves — your Google account email and profile, your AI usage ledger, the hashed device identifier and the advertising data described in this policy — ElevateDev.co is the data controller within the meaning of the GDPR and the UK GDPR, and the Data Fiduciary within the meaning of India's Digital Personal Data Protection Act 2023. Google acts as an independent controller for the Google Sign-In, Vertex AI, App Check, AdMob and Drive data it processes, under its own privacy policy. No purchase is reachable in this version, so no payment processor is involved.

ElevateDev.co is a processor, not a controller, of the photo or text content of an AI action itself: that content is transmitted only to carry out the specific action you requested, is not retained by us afterward (see "Data Retention & Deletion"), and is never used for our own purposes.

You can reach us about anything in this policy — including a request to exercise your rights, or a grievance — by email at support@elevatedev.co.in. We answer privacy requests within 30 days, and usually much sooner.

If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR requires us to state the legal basis for each purpose personal data is processed for. Your inventory itself is never transmitted to us (only your account, ledger and the specific content of an AI action you request are), so most of this app involves no processing by us at all. The purposes below are the ones that do involve processing, each with its own basis:

• Running your account and AI-credit balance (Google Sign-In, the usage ledger). The legal basis is performance of a contract with you (Article 6 para. 1(b) GDPR): you cannot use the AI features, which you have chosen to use, without an account to hold your credits.
• Processing a photo or question you submit for "Identify item," "Scan invoice" or "Ask your inventory." The legal basis is performance of a contract with you (Article 6 para. 1(b) GDPR): each call happens only because you tapped that specific action, to receive the specific result you asked for.
• The hashed device identifier used to prevent free-trial abuse, and Firebase App Check's verification that a request comes from a genuine app instance. The legal basis is the developer's legitimate interest in operating a fair, abuse-resistant free tier and protecting the service from bots (Article 6 para. 1(f) GDPR), balanced against your privacy by using a one-way hash rather than a raw device identifier.
• The optional Google Drive backup. The legal basis is your consent (Article 6 para. 1(a) GDPR): the feature is off by default and only activates once you explicitly connect your Google account to it.
• Serving a non-personalised rewarded-video advertisement (shown by default, before consent is given or where consent is declined). The legal basis is the developer's legitimate interest in funding a free AI feature (Article 6 para. 1(f) GDPR), limited to the minimum ad-request data Google AdMob needs to serve and measure one ad.
• Serving a personalised rewarded-video advertisement. The legal basis is your consent (Article 6 para. 1(a) GDPR), collected through Google's User Messaging Platform (UMP), built on the IAB Transparency & Consent Framework, before the first ad request in a region where consent is required. You may withdraw consent at any time — see "Advertising Consent & Choices" below.
• Storing or accessing an identifier on your device for advertising purposes (for example, the AdMob SDK reading or setting your Advertising ID). This is separately governed by the consent requirement in Article 5(3) of the ePrivacy Directive — implemented in Germany as §25 TDDDG and in the UK as PECR. The same consent prompt and withdrawal mechanism cover this.

In the EEA, the UK and Switzerland the app shows a consent prompt, built on Google's User Messaging Platform (UMP), before the first rewarded-ad request it makes — no ad, personalised or not, is requested in these regions until that prompt has been shown. The prompt discloses Google AdMob (Google LLC) as the advertising SDK involved and links to Google's privacy policy at policies.google.com/privacy. You may accept or decline, and declining does not restrict any feature of the app — you can still earn credits by watching a non-personalised ad.

You can change your mind at any time from the ad-privacy choice in the app's Settings, which reopens the same consent choices; withdrawing consent there deactivates personalised advertising and stops further ad-personalisation data sharing with Google AdMob going forward, and takes effect immediately for future ad requests. You can also reset or delete your Advertising ID entirely in Android Settings → Privacy → Ads — the app continues to work normally either way.

Your inventory is never transferred anywhere on its own; only your account, usage ledger and the content of an AI action you specifically request leave your device (see "Data We Collect" and "AI Features" above). Those transfers go to Google: ElevateDev.co's backend runs on Google Cloud Run in the United States (region us-central1), and forwards AI content to Google Cloud Vertex AI in the same region. Google Sign-In, Firebase App Check, Google AdMob and — if you enable it — Google Drive are also operated by Google, with processing that can occur in the United States and other countries where Google operates.

For transfers out of the EEA, Google is a certified participant in the EU-U.S. Data Privacy Framework; for transfers out of the UK, Google relies on the UK Extension to that framework; for transfers out of Switzerland, the Swiss-U.S. Data Privacy Framework applies. Where a transfer falls outside those frameworks, Google relies on the European Commission's Standard Contractual Clauses. The safeguards Google applies are set out in Google's own privacy policy and its data transfer documentation at business.safety.google.

If you believe your data has been handled unlawfully, please contact us first at support@elevatedev.co.in — we would rather fix a problem than have you go elsewhere with it.

You also have the right to lodge a complaint with a data protection supervisory authority, and you do not need our agreement to do so. In the EEA this is the authority in the country where you live, work, or where you believe the infringement occurred; the full list is published at edpb.europa.eu. In the UK it is the Information Commissioner's Office at ico.org.uk. In Switzerland it is the Federal Data Protection and Information Commissioner at edoeb.admin.ch.

A supervisory-authority complaint is not your only option. Under GDPR Article 79 (and the equivalent UK GDPR provision) you may instead, or in addition, bring your claim directly before a competent court.

Home Inventory AI is used across the United States, where privacy is governed by a growing patchwork of state laws rather than one federal statute. This section explains how those laws apply to an app whose inventory stays on-device but whose AI features and advertising involve real data transmission.

California (CCPA, as amended by the CPRA): the personal information this app is involved with includes your account email and profile, your AI usage ledger, and the advertising identifier and ad-request data described under Advertising (Google AdMob) — your on-device inventory is not personal information we collect, because it never reaches us on its own. Showing you a personalised ad counts as "sharing" personal information for cross-context behavioural advertising under the CCPA/CPRA, even though no money changes hands; ElevateDev.co does not sell personal information for money. You have the right to know, delete, correct, limit use of sensitive personal information, and opt out of that sharing — decline personalised ads in the consent prompt, use "Delete my data" in the app, or reset your Advertising ID in Android Settings → Privacy → Ads.

Most other US states have now enacted a comprehensive consumer privacy law of their own. These laws differ in wording but share a common core: the right to know, access, correct, delete and export the personal data a business holds about you, and to opt out of targeted advertising and of "sale" or "sharing." If you live in a state with such a law, these rights apply to you the same way as under the CCPA above, and reach the same personal data: your account, usage ledger and advertising data. Exercise them using "Delete my data" in the app, declining or withdrawing ad consent, or resetting your Advertising ID in Android settings.

Sensitive personal information: several state laws single out categories such as government identification numbers and precise geolocation for extra protection. ElevateDev.co does not collect any government ID number, precise (GPS-level) geolocation, health information or biometric identifier from anyone, through any feature of the app; an invoice photo you submit for AI processing can show a payment card's last four digits, which is handled exactly as described under "AI Features & How Your Data Is Processed" and never stored by us afterward.

To exercise any of the rights on this page, email us at support@elevatedev.co.in. We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised a privacy right.

On Google Play this app's store listing is localized, so the name you see depends on your device language. Every listing below describes the SAME single app -- Android package com.vishwk.home_inventory, published by ElevateDev.co -- and this privacy policy applies to all of them, in every language and country.

The name on your home screen after installing is Home Inventory AI in every language; only the Play Store listing name is translated. If the store name differed from the one on your device, that is why.

The table below is the complete, current list. It is kept in step with the store listings, so if a name changes there it changes here.

If this policy ever changes, the updated version will be published on this page with a new "last updated" date, which is also the date the changes take effect. Material changes (for example, if a future version added an optional online feature) will be described here before that version ships. The fundamental promise will never change retroactively: data you stored under a no-collection policy will never be silently collected later.

This policy explains how Home Inventory handles data. It is not a warranty about the app itself, and it does not make Prachi responsible for how you use it.

Home Inventory is provided "as is", without warranties of any kind. Prachi is not liable for any loss you may suffer through using it — including lost data, missed reminders, lost profits or decisions you make based on what the app shows you — to the maximum extent applicable law allows. Nothing here excludes liability that cannot lawfully be excluded.

Please check the app's output before you act on it. Home Inventory organises what you enter; it does not verify that what you entered is correct, and you remain responsible for the decisions you make. The full terms, including the complete limitation of liability, are at https://elevatedev.co.in/terms.

Questions about privacy in Home Inventory? Email Prachi at support@elevatedev.co.in and you will get a reply from the developer, typically within 1–2 business days.