Privacy Policy

---

Privacy Policy

Effective date: September 25, 2026

This Privacy Policy explains how Itemoro, developed by Red Cog Productions Inc. ("we", "us", or "our"), handles information when you use the Itemoro mobile application (the "App").

Optional Business Excel Connections

When available and explicitly connected, business Excel sync exchanges selected inventory fields, stable item identifiers, and deletion flags with your chosen Microsoft 365 work/school workbook. Workbook collaborators may see or change those fields under Microsoft's access permissions. Itemoro stores encrypted Microsoft authorization tokens, workbook/table identifiers, field mappings, synchronization baselines, conflict records, and status information on its backend. This permits scheduled synchronization while the app is closed; Itemoro does not receive your Microsoft password. Photos and attachments are not included by this connector.

You can pause or disconnect the Excel connection. Disconnecting removes its stored tokens and synchronization records, not the workbook or inventory. Turning off spreadsheet sync in Privacy choices queues a pause request; an offline device must reconnect to deliver that request, and an already-running request may finish. Hosted account/cloud data deletion includes associated Excel connection data. Copies in Microsoft remain under your Microsoft account and sharing controls.

Contact

- Developer: Red Cog Productions Inc.

- Support email: support@itemoro.com

- Website: https://itemoro.com/

- Privacy Policy URL: https://itemoro.com/privacy

- Terms of Use URL: https://itemoro.com/terms

- DMCA Policy URL: https://itemoro.com/dmca

- Account Deletion URL: https://itemoro.com/account-deletion

- Privacy requests: support@itemoro.com

You can contact us at support@itemoro.com if you have questions about this Privacy Policy, need help with privacy-related requests, or want to ask about information you have voluntarily sent to us for support.

Local-First App

Itemoro is local-first. Personal inventory records are stored on your device unless you choose a feature that sends them elsewhere, such as export, sharing, email, printing, backup, sync, online lookup, or an AI-assisted action. Signing in alone does not upload your Personal inventory. Items actually stored in a shared Household or Team workspace follow the separate shared-workspace sync rules below, even when Personal backup is off.

Normal photo storage is not the same as AI analysis. When you add, capture, crop, resize, rotate, re-encode, save, view, back up, or sync a normal Itemoro photo, Itemoro processes the image for Itemoro storage and display. It is not sent through Itemoro's AI recognition system unless you explicitly start an AI feature such as AI photo identification, Identify Multiple Items from Photo, Smart Lookup with an image, or another clearly identified AI-assisted action.

Supported photo imports create an Itemoro-managed copy in app storage. Once that copy is successfully saved, deleting the gallery original does not delete the Itemoro copy. App copies and backup images may be resized or compressed and are not guaranteed to preserve original quality or metadata. Older records or inaccessible source files may have missing attachments; a backup cannot reconstruct a missing photo.

Information You May Add to Itemoro

Itemoro helps you create and manage personal or business inventory records. Depending on how you use the App, you may add inventory names, item names, categories, subcategories, brands, models, quantities, prices, estimated values, serial numbers, SKU numbers, item barcode values, stock barcode values, QR code values, NFC tag data, storage locations, shelf or rack names, bins, compartments, linked items, notes, keywords, tags, custom fields, conditions, maintenance notes, maintenance dates, warranty dates, expiry dates, clothing sizes, colors, materials, measurements, photos, receipt or invoice photos, warranty photos, damage photos, packout and rental details, wishlist information, for-sale, sold, donated, gifted, disposed, or similar item status details, imported files, exported files, backup files, label branding details, and related records.

Invoice Maker Information

If you use Invoice maker, you may choose to enter business or invoice information such as your company or rental business name, company address or contact details, logo, GST/HST/VAT/tax or registration number, payment instructions, invoice notes, invoice terms, invoice number, issue date, due date, renter or client name, renter or client address, renter or client phone or email, rented item names, quantities, prices, taxes, discounts, deposits, and totals.

This invoice information is used to preview, save, export, email, or share invoices that you choose to create. You do not need to enter invoice information if you do not use Invoice maker. Saved invoice templates are intended to store reusable business details, logo, tax details, payment instructions, invoice notes, and layout choices so you do not have to type them again.

In the current local-first version, invoice information stays on your device unless you choose to save, export, email, print, share, or send the invoice or related file to another app, person, storage provider, email provider, printer, or service.

Viewing a saved receipt photo in Itemoro does not itself send that photo to AI services or a printer. Saving, printing, opening a PDF in another app, or sharing a receipt can create copies outside Itemoro. Receipts and other supported attachments stored on shared-workspace items may also be synchronized with authorized workspace members.

Information We Receive

Itemoro does not require an account to use local inventory features. If you use account, cloud backup, Sync Across Devices, workspace, subscription, Smart Lookup, AI, or other online features, Itemoro may process the information needed for the feature you start.

When account or team workspace features are used, Itemoro may use Firebase Authentication, Google sign-in, Microsoft sign-in, or other supported sign-in providers. We may receive or store account identifiers, display name, email address, provider ID, Firebase user ID, sign-in provider, device IDs generated by Itemoro, signed-in device metadata, workspace memberships, roles, invitations, entitlement status, subscription status, storage usage, sync status, and related account or workspace settings.

Password-protected manual backups use a password of at least 8 characters to protect the backup's encryption key. To resume interrupted preparation, Itemoro temporarily stores the backup request, including your password, encrypted with a device-bound key in private app storage. The request is removed when preparation completes, is canceled, or fails permanently; it can remain while a retry is pending. The password is not sent to Itemoro servers. Offline password-only backups cannot be recovered by Itemoro if you forget the password. If you choose password plus recovery email, Itemoro stores a server-protected recovery copy of that backup's random data key and associated account/backup metadata so the same signed-in account can recover that recovery-enabled backup.

Manual backup contents depend on the selected workspace, your permissions, and the backup-content choices, including private fields and attachments. A prepared encrypted file remains in private app storage while waiting for a save destination or a save retry. Choosing Later or canceling the destination picker does not save an external copy. After a successful destination save, the pending app copy is removed. Replacing or canceling the pending export, clearing app data, or uninstalling can remove unsaved preparation files.

Team and shared workspace features may require your name so other authorized workspace users can understand who made changes, sent invitations, accepted access, edited records, moved items, restored data, or performed other shared actions. Workspace audit records are intended to show user-facing names and role/action details rather than exposing internal stable account identifiers in normal app screens.

Workspace invitations may include recipient email addresses, invite links, invite tokens, expiration dates, inviter name, workspace name, role, acceptance status, verification-code hashes, and audit details needed to create, validate, revoke, or accept the invitation. The sender's device may retain a pending invite's code for display or sharing. The recipient must pass the account, code, expiry, and membership checks. Choosing the invite QR scanner can submit a valid scanned code immediately, without a second Join tap; scanning does not bypass those checks. Pending code, QR, and re-share controls are removed when acceptance is confirmed. Automatic and manual invitation checks and notifications are separate from Personal backup and optional analytics.

When you are signed in and allow invitation notifications on this device, Itemoro registers a Firebase Cloud Messaging token, a random installation identifier, your Firebase account ID, and a refresh timestamp to deliver Household, Team, and Packout alerts. Notification payloads contain an invitation reference, type, expiry, and recipient account ID, not inventory contents, email addresses or join codes. Itemoro checks the signed-in account before displaying an alert. You can disable these alerts in Android notification settings. Background alerts are separate from inventory cloud sync and optional analytics. Registrations inactive for 30 days are ignored; invalid tokens are removed when detected. Hosted account deletion processing includes notification registrations. An invitation notification does not itself grant access.

We may receive information if you voluntarily contact us for support. This may include your name, email address, message contents, screenshots, device details you choose to share, exported files, backup files, invoice files, or other information you choose to send.

Sign-In and Service Messages

Google, Microsoft, and supported email sign-in are used to authenticate an account and provide the online services you request. We use your account email for purposes such as sign-in or recovery links, security messages, invitations, and necessary account or service communications. Signing in does not subscribe you to advertising, newsletters, or unsolicited marketing. Local inventory use remains available without signing in; account-backed AI, backup, and sharing features require the applicable sign-in and access permissions.

Sign-in checks use the initiating request, selected account, expiry, provider verification, and temporary session identifiers or secrets. Email confirmation can store hashed email/session verification values, status, and timestamps on the server, with an initiating secret held on the requesting device. These checks help reject mismatched or replayed requests; they do not prove the physical identity of the person holding a device or controlling an account. Service providers may also process technical request information for authentication, delivery, security, and abuse prevention. A link expiring is not a promise that all related security records are immediately erased.

Device and Personal Online Backups

Automatic device backups and Personal online backups are separate from manual exports and live cloud sync.

Automatic device backups save recovery copies for the active workspace and local profile in private app storage, subject to workspace permissions and the private-data setting. Files are encrypted with device-bound key protection. Retention follows the selected device-backup setting, with the newest copy and the latest attachment-complete copy protected from ordinary retention cleanup. These backups and their device keys are lost when app data is erased or Itemoro is uninstalled. Copying a device-bound checkpoint alone is not a portable backup; create and save a manual export outside app storage before clearing the app or changing devices.

Personal online backup is off by default and requires eligible account access and an explicit choice to enable it. Enabling selects a source device. It uploads encrypted recovery copies of Personal items, including Recently Deleted, Personal inventory setup, and available referenced photos and documents to Itemoro's Firebase/Google Cloud services. It does not include Household or Team inventories, global app settings, account credentials, or separate activity-log and stock-transaction history tables. It checks daily over an unmetered connection, shown as Wi-Fi in the app, and resumes due work when the app opens; Android may delay work. Unchanged data is not uploaded again.

Online-backup records include your account and source-device identifiers/name, backup identifiers and times, file size, item and missing-attachment counts, content fingerprints/checksums, upload status, and protected recovery-key information. Up to five published copies are retained, preserving the newest attachment-complete copy if newer ones have missing files. Interrupted upload staging may remain until cleanup can run. The current encrypted upload limit is 192 MiB per online backup; an oversized upload fails instead of silently dropping items to fit.

Downloaded Personal online backups require recovery through the same signed-in account. Account-recoverable backups are not encrypted against Itemoro's recovery service: the service can unwrap recovery keys after account authorization. Turning online backup off keeps saved copies. Canceling a current attempt stops that attempt without turning off future scheduled backups or deleting previous copies. Deleting online backups removes hosted backup files and their list, not your inventory or exported copies. Recovery-key records are retained so already-downloaded copies can still be recovered; full account deletion includes those keys and can make account-dependent copies unusable. Deleting only online sync data does not delete Personal online recovery backups.

Backup creation and restore process records and attachments in batches rather than loading the complete archive into memory. There is no item-count threshold that deliberately drops photos from automatic backups. Available storage, individual-file and format safety limits, account limits, and Android execution limits still apply. Missing or unreadable attachments are reported; a copy saved with warnings is not an attachment-complete backup.

Cloud Sync and Shared Workspaces

Personal cloud storage and Sync Across Devices are optional and separate from Personal online recovery backups. When enabled, the selected supported records and, where enabled, photos are uploaded for the signed-in account. Local records remain available on the device, subject to deletion, device storage, and selected photo-download settings. After the initial sync, Itemoro attempts to transfer changed records and changed photos and reuse unchanged uploaded files. A record update can replace that encrypted record; it is not necessarily a field-only or byte-only patch. Initial downloads, retries, permission changes, and restores can transfer more data. Live inventory sync is not a complete, versioned backup of every app setting and recovery point. Pausing sync or canceling work does not undo changes already delivered; local pending changes may sync when the relevant service runs again.

When you create or join a server-backed Household or Team workspace, supported records actually stored in that workspace, its inventory names, order, templates and field settings, and supported item photos or documents are sent to Itemoro's Firebase/Google Cloud services and made available to authorized members according to their permissions. This sharing operates independently of Personal backup and Personal photo-sync switches. A Personal item only marked visible in Household is a local display choice and is not automatically uploaded to the shared workspace. Choose the workspace carefully before adding, moving, or importing sensitive information.

Shared edits are saved locally and may be queued while offline, then synchronized when connectivity and authorization allow. Shared stock operations and activity records can include the change, authenticated account identifier, user-facing name, device or operation identifier, reported occurrence time, and server receipt time. Device clocks can be inaccurate. These records support attribution, conflict handling, and duplicate prevention; they are not optional product analytics. Background sync timing depends on Android scheduling, network availability, and service limits.

Itemoro uses server-managed encryption for shared item/photo data and linked Packout return reports. The backend can decrypt this information to provide authorized access and apply permissions; these paths are not end-to-end encrypted against Itemoro. Turning off Personal backup does not turn off shared-workspace collaboration, invitation delivery, or an explicitly submitted Packout return report. It also does not delete previously uploaded data.

Owners or authorized managers can manage workspace membership. Removing membership blocks further authorized server access, and the app locks the local shared copy when it receives confirmed removal. Offline devices may not learn of removal immediately. Removal cannot recall screenshots, exports, or copies a recipient has already obtained, and does not delete that person's separate Personal inventory.

Individual blocking stores the blocking account ID, the blocked account ID, a display label, and a timestamp in a private server-managed list. Blocks stop direct workspace invitations and online packout requests between those accounts; they do not remove existing shared-workspace membership or erase saved content. Workspace owners can separately remove and block a member. Unblocking does not restore a removed membership. Existing packout return records and return-report workflows are retained. Blocking cannot recall messages or files already delivered, or prevent contact outside Itemoro. You can manage your list in Privacy & security. Your own list is included in full-account deletion processing; limited abuse-prevention records may require separate retention review.

Linked Packout Return Reports

When a Packout is shared through the supported in-app flow, Itemoro can retain a sender/recipient binding and item references to deliver return reports to the correct Packout and original items. When the recipient sends a return report, returned quantities, condition or damage notes, selected damage photos, attribution, and occurrence/receipt timestamps are stored by Itemoro and delivered to the authorized participants. Draft editing alone does not send a report; a submitted offline report may remain queued until delivery. Reports and linked damage history can remain as business and audit records after the initial invitation expires. A report does not itself confirm physical receipt or automatically release checked-out stock.

Device Permissions and Features

Depending on your device and the features you use, Itemoro may request or use:

- Camera access to scan barcodes or QR codes and to take item photos.

- Photo and file access through Android system pickers so you can choose specific photos, receipts, invoices, logos, imports, exports, backups, and shared packout files. Itemoro does not need full gallery access when Android's limited photo picker is available.

- Notifications for optional reminders such as maintenance, warranty, expiry, low stock, and packout or rental return reminders, plus invitation alerts and backup/sync progress, completion, save prompts, and warnings. Status notifications may include record counts and missing-attachment counts. Their visibility depends on Android notification and lock-screen settings; disabling notifications does not itself turn off a backup or sync feature.

- NFC access for optional NFC-related scanning or label features on supported devices.

- Internet access for optional features such as opening support links, website links, app links, web searches, image searches, card lookup helpers, spreadsheet file workflows, or other user-started online actions.

- Calendar and email actions through Android system apps when you choose to create reminders, send support emails, email invoices, or share files.

You can control many permissions through your device settings.

Optional Online and Third-Party Features

Some Itemoro features may open or interact with third-party apps, websites, or services when you choose to use them. Examples may include Android sharing, email apps, calendar apps, cloud storage apps, printer apps, Google Sheets, Excel or OneDrive files, web search, image search, card information lookups, or other lookup tools.

Independent third-party apps and services may handle information under their own privacy policies after you choose to send, open, save, sync, or share data with them. This is different from providers processing information on Itemoro's behalf to operate our services; using those providers does not remove our applicable privacy responsibilities.

If you use a lookup feature, search feature, or external website, the search terms or item details you submit may be handled by that external service.

Privacy Choices, Cookies, and Optional Online Tools

Itemoro does not require cookies or optional online tools for normal local inventory use. You can add items, choose photos from your device, scan codes, create labels, export files, make local backups, and manage your inventory without accepting optional online features.

When you choose to use optional online tools, those tools may send selected information outside your device. This may include search words, item names, brand/model details, selected images, barcode or QR details, trading card search terms, spreadsheet data, diagnostic information, or other information needed for the feature you start.

AI-assisted features are explicit tools. Itemoro does not use Gemini, Google Cloud Vision, OCR, reverse-image lookup, or similar recognition services merely because you add or save a normal item photo. Those services may be used when you choose a feature that clearly involves AI, image identification, online photo lookup, Smart Lookup, or batch photo analysis.

Itemoro provides privacy choices in the app so you can accept optional online tools, reject optional online tools, or customize categories such as online image/web lookup, trading card lookup, spreadsheet sync, diagnostics, and optional usage analytics. You can change these choices in App Settings > Privacy choices and related Settings screens.

Some optional features may open third-party websites, browsers, APIs, Google services, Microsoft services, card lookup services, cloud storage providers, email apps, calendar apps, or other external services. Those third parties may use cookies, similar technologies, account data, logs, or analytics under their own privacy policies. Itemoro does not control third-party cookies or third-party privacy practices.

If you enter a custom QR destination, Itemoro may store and encode that destination, including an Itemoro link such as https://itemoro.com/#itemoro... or a user-provided destination such as https://example.com/#itemoro.... When Itemoro scans or opens custom QR destinations, it may check, normalize, block, warn about, or refuse unsafe-looking links or unsupported schemes. The QR code itself may still contain information you chose to encode, so only print or share QR codes you trust.

Optional Product Analytics

Itemoro may offer an optional SHARE USAGE ANALYTICS setting in App Settings > Privacy & Security. If you turn this on, Itemoro may use Google Analytics for Firebase to collect limited product analytics about feature usage, broad workflow outcomes, performance problems, and errors so we can understand whether setup, item entry, search, scanner, import, backup, and sync workflows are working reliably.

Product analytics are disabled until you choose to turn them on, and you can turn them off at any time. Turning product analytics off stops future Itemoro product-analytics events. Your choice is stored locally on your device and is not recorded as an analytics event.

Product analytics are designed not to include inventory contents, item names, brands, models, categories, custom fields, photos, documents, barcodes, QR values, NFC contents, serial numbers, SKU values, prices, quantities, notes, descriptions, searches, voice recordings, transcripts, location names, shelf or rack names, bin names, compartment names, inventory names, household names, workspace names, share names, account IDs, email addresses, workspace IDs, invitation IDs, file names, file paths, spreadsheet contents, screenshots, screen recordings, advertising identifiers, or user-entered text of any kind.

Itemoro product analytics use approved event names and approved parameter values only. Events summarize workflow results with broad buckets such as duration ranges, error-count ranges, retry-count ranges, or result-count ranges. Itemoro does not use product analytics for session replay, heatmaps, tap recording, screen capture, continuous activity timelines, ad personalization, or advertising signals. Itemoro does not write individual product-analytics events into your inventory records, user documents, or Cloud Firestore collections.

Optional Crash Reporting

Crash reporting is off by default. The Share crash reports setting in Settings > Privacy & security separately enables Firebase Crashlytics for crash and app-not-responding reports. Reports can include stack traces and exception messages, app version, operating system and device information, event times, and diagnostic installation identifiers. Itemoro does not add account emails, account IDs, inventory records, photos, documents, or user-entered text as custom Crashlytics logs or keys. Exception messages produced by the app or its dependencies can contain technical context.

Crash reporting does not require inventory cloud sync and does not enable usage analytics. This choice stays on this device and is not imported from backups. Automatic report upload stays disabled. When Itemoro starts, it requests sending saved reports only if Share crash reports is on; otherwise it requests deletion of queued reports. Turning reporting on during a session does not send pre-existing reports; restart Itemoro after a crash to send the new report. Turning reporting off requests deletion of queued unsent reports, but cannot retract reports already submitted. Firebase may retain crash information locally while reporting is off. When usage analytics is also enabled, Firebase may include analytics breadcrumbs in crash reports.

Optional Performance Diagnostics

Performance diagnostics are off by default. Share performance diagnostics in Settings > Privacy & security separately enables Firebase Performance Monitoring. It measures app startup and lifecycle timing, supported screen rendering, and supported HTTP/S request performance. Reports include request URLs, response codes, transfer sizes and durations, app version, device and operating system details, country, and diagnostic installation identifiers. Network monitoring measures request performance, not request or response bodies. Itemoro does not add account emails, inventory records, photos, documents, or user-entered text as custom performance attributes.

This choice stays on this device and is not imported from backups. It does not enable cloud inventory storage, crash reports, or usage analytics. Turning it off disables further performance collection, but does not retract information already submitted or erase previously collected diagnostic data. Resetting local app settings turns this choice off.

How Information Is Used

Itemoro uses information you add to save and display inventory records, organize and search items, create labels, generate barcodes and QR codes, prepare packout and rental lists, make invoices, create reminders, import and export files, create PDFs and spreadsheets, restore data from backups, and provide support if you contact us.

We do not sell your inventory data.

Sharing

Itemoro shares data when you choose a sharing action or enable a service that requires it. This includes ongoing collaboration in a shared workspace, selected Personal sync, submitted Packout return reports, and user-directed export, email, printing, backup, lookup, and external-app actions. Authorized workspace members are recipients of shared workspace data. Firebase/Google Cloud and configured authentication, email-delivery, and other service providers process information needed to operate the features you use.

Security

Itemoro does not provide a separate local fallback-password lock. Protect local access with your device's screen lock. Backup passwords and online account authentication serve different purposes. Backup creation screens can be captured by screenshots or screen recording while passwords are masked; Itemoro requests Android capture protection when backup passwords are revealed. Do not assume every screen, notification, or external app is protected from capture. Review recordings before sharing them.

Itemoro uses device storage and Android platform features to help protect app data. No storage or transmission method is perfectly secure. You are responsible for protecting your device, screen lock, backups, exported files, cloud storage accounts, email accounts, and any files you share outside Itemoro.

When you choose to use third-party apps or online services, those services are responsible for their own security practices.

Itemoro may use input validation, file-type checks, size limits, path restrictions, export escaping, spreadsheet formula neutralization, image decoding checks, server security rules, and abuse-prevention controls to reduce the risk of malicious text, imports, images, QR codes, NFC data, formulas, links, or filenames. These protections are intended to reduce risk, not to promise perfect protection against every attack.

Data Retention and Deletion

Inventory data remains on your device until you edit it, delete it, clear app data, uninstall Itemoro, or restore or replace it with an imported backup.

Hosted records may remain while the corresponding account, workspace, backup, or shared-report service is in use and until its applicable deletion process is completed. Shared deletion markers, replaced photo objects, stock-operation history, and return-report versions may be retained for recovery, audit continuity, and retry safety; deleting an item from a screen does not immediately purge every hosted object. Requests to remove hosted information are handled through the account/data or workspace deletion process, with limited retention where reasonably needed for security, disputes, legal obligations, or other disclosed purposes. Other members' legitimately retained business records and recipient-controlled copies may require separate action.

Walkthrough completion and similar interface preferences are stored on the device to avoid repeating first-visit tips. When signed in, Itemoro also stores the IDs of guides already shown in your private account data so they do not replay on another signed-in device. This does not include inventory contents or guide-viewing timestamps and does not enable analytics, inventory sync, or online backup. Offline completion is retained locally until it can sync. Hosted account deletion includes this guide history. Completion may be included in a backup, and restoring an older backup or resetting ordinary settings does not intentionally reset already-completed tips.

Invoice maker fields that you type for a current invoice remain in the invoice screen while you are working. Saved invoice templates remain on your device until you delete the individual template, clear saved invoice templates in Invoice maker, clear app data, or uninstall Itemoro.

Files you export, save, email, print, back up, or share may remain wherever you saved or sent them. To delete those copies, remove them from the destination app, storage provider, email account, printer queue, backup location, recipient device, or other service.

If you contact us for support, we may retain your message and any files you choose to send for as long as reasonably needed to respond, troubleshoot, keep business records, protect our rights, or comply with legal obligations.

Copyright and Content Complaints

If you submit, respond to, or are affected by a copyright or content complaint, Itemoro may process information needed to handle that case. This may include reporter name, reporter contact information, country or region, copyright owner or representative information, complaint details, affected Itemoro-facing content references, responses, counter-notices, legal or admin case records, status, jurisdiction route, audit events, user-visible reasons, reporter-visible responses, legal hold status, retention details, and related support messages.

Itemoro does not need bank account information, credit-card information, government identification, or unrelated financial records for ordinary copyright complaint handling unless a specific confirmed legal requirement exists. Do not send unrelated sensitive records in a complaint or response.

Legal case records may be retained for as long as reasonably needed to review the report, preserve legally required records, prevent abuse, support restoration, protect rights, comply with law, or keep appropriate audit history. If a legal hold applies, Itemoro will try to preserve only the specific records required rather than the whole account indefinitely.

For U.S. copyright matters, Itemoro may process DMCA notice and counter-notice information such as electronic signatures, statements of good faith, statements made under penalty of perjury, contact information, affected content references, and restoration or repeat-infringer review records. The standalone DMCA Policy is available at https://itemoro.com/dmca.

Account Deletion

Account deletion is not required for local-only use because Itemoro does not require an Itemoro account for local inventory features. If you create or connect a hosted Itemoro account, cloud backup, Sync Across Devices, or workspace feature, you may request deletion of hosted account data or cloud data by using the in-app deletion path or by contacting support@itemoro.com.

You can request hosted account and associated server data deletion from App Settings > Delete & reset tools > Delete Itemoro account & server data. Delete online sync data is a separate, narrower action; it does not delete the account or Personal online recovery backups. You can also use the public deletion page at https://itemoro.com/account-deletion or contact support@itemoro.com.

Personal workspace data and Household/Team workspace data are handled separately. Deleting a personal hosted account does not silently delete a shared workspace controlled by another owner or used by other members. Shared workspace deletion requires the authorized workspace deletion flow and an additional confirmation because it may delete shared inventory, photos, rentals, invoices, and history.

Hosted account deletion does not remove local data from your device or copies you exported, emailed, printed, shared, backed up, or saved somewhere else. App Settings > Delete & reset tools > Erase Itemoro data from this device clears Itemoro's app data on the current phone or tablet, including local Personal, Household, and Team copies, managed photos/files, device profiles, app settings, automatic device backups, and pending exports. It does not delete your hosted account, server workspaces, other members' data, or manual backups saved outside app storage, such as in Downloads. Signing in and reconnecting cloud services can download hosted data again. Delete exported or shared copies separately at their destinations.

Children

Itemoro is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

Your Privacy Rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about personal information you have provided directly to us. To make a privacy request, contact us at support@itemoro.com.

You can manage local inventory and invoice records in the App by editing or deleting records and saved templates. Clearing app data or uninstalling removes the app's local copy, not hosted records or exported files stored elsewhere. Use the hosted-data deletion process above for server records and remove exported copies at their destinations.

Regional Privacy Notes

Canada: Red Cog Productions Inc. is based in British Columbia, Canada. We aim to handle personal information in a way that is consistent with applicable Canadian privacy laws, including federal and provincial privacy requirements where they apply.

United Kingdom, Ireland, and European Economic Area: Where UK GDPR, EU GDPR, or Irish data protection law applies, we aim to provide clear information about what data is used, why it is used, who it is shared with, how long it is kept, and how to contact us about your rights.

Australia: Where Australian privacy law applies, we aim to be open about how personal information is handled and to provide ways to contact us about access, correction, and privacy questions.

United States: Privacy rights and requirements may vary by state. You can contact us at support@itemoro.com for privacy questions or requests about information you have provided directly to us.

Changes

We may update this Privacy Policy from time to time. When we do, we will update the effective date and make the updated policy available in the App or on our website.

Where required, material changes to how personal information is used or disclosed will be accompanied by notice and an appropriate consent choice. Updating this policy alone does not enable an optional feature or replace consent required for a new purpose.