Privacy Policy

Effective date and version: 19 July 2026

This Privacy Policy explains how Datalytic AS ("we", "us") collects, uses, shares, and protects personal data when you use Item Buddy, the storage-inventory app for iPhone, iPad, and Mac. Processing complies with the GDPR and applicable data protection laws.

1. Personal Data We Collect

Account information

• Email address (for sign-in and service communications)
• Name (if you provide it)
• Password (stored only as a secure hash, never in plain text)
• Two-factor authentication settings, if enabled

Your content

• Photos of your storage boxes and items
• Box, item, and location titles, descriptions, and tags
• Receipt, warranty, and other document attachments you add for insurance purposes
• Support requests and feedback

AI analysis data

• Box and item photos and receipt attachments, which are analyzed automatically to identify contents and extract receipt details where your plan includes AI analysis (see Section 4)

Model-development data

• Selected eligible box and item photos
• Box and item descriptions, tags, corrections, and AI-generated results
• Dataset labels, quality assessments, and exclusion decisions derived from that content

Subscription and transaction data

• Your subscription tier, trial status, and renewal/expiry dates
• Purchase history for Item Buddy Pro

We do not collect or store your payment card details. Purchases are processed by Apple; we never see your card number.

Technical data

• Device model and operating system version
• IP address, access times, and error logs
• Server crash reports and diagnostics

2. How We Use Your Data

We process data to: provide the app and sync your inventory across your devices; run automatic AI content analysis; manage your subscription and entitlements; respond to support requests; keep the service secure and prevent fraud; develop and improve Item Buddy and its machine-learning features as described below; and comply with legal obligations.

3. Legal Basis

We rely on the following legal bases:

• Contract: To create and maintain your account, store and synchronize your inventory, provide subscriptions, and perform the automatic AI analysis you request.
• Legitimate interests: To secure and prevent misuse of the service; diagnose and improve its reliability; and develop, train, test, validate, evaluate, and improve Item Buddy's own machine-learning and computer-vision models. Our interests include improving accuracy and accessibility and developing models that can operate locally on users' devices, reducing future reliance on third-party processing. We limit this processing as described in Section 5 and honor your right to object through an easy opt-out.
• Legal obligations: To comply with accounting, tax, law-enforcement, and other binding legal requirements.

We do not treat acceptance of the Terms, purchase of a subscription, or continued use of the app as consent to model development.

4. AI Content Analysis

When you photograph a box or item, or add a receipt attachment, and your plan includes AI analysis, the photo is sent automatically to Google Gemini to identify contents and extract receipt details (such as price and purchase date). The generated text is stored as part of your content. Automatic analysis is an integral part of how Item Buddy processes your photos; if you do not want a photo analyzed, do not upload it. Your content is not used to train Google's or any other third party's models. AI-generated results may be inaccurate and should not be relied upon as professional or insurance advice.

5. Development of Item Buddy Models

Unless you opt out, we may select eligible existing and future content to develop, train, test, validate, evaluate, and improve machine-learning and computer-vision models and related Item Buddy features, including models designed to perform analysis locally on users' devices. Eligible content is limited to box and item photos, descriptions, tags, user corrections, and AI-generated results.

Receipts, warranties, and other document attachments are not eligible for Item Buddy model development. Before other content enters a development dataset, we use technical and organizational screening designed to exclude content containing identifiable people, content that appears to depict minors, and content containing potentially sensitive personal data. Content that has not passed this eligibility process must not be used for model development.

We remove direct account identifiers before eligible content enters a development dataset. Removing identifiers does not necessarily make information anonymous; pseudonymized information remains personal data and receives GDPR protection. We assess anonymization rather than assuming it.

Specifically authorized Datalytic personnel may review or label eligible samples under confidentiality obligations. We do not currently use external human-annotation providers. We do not allow Google or other third parties to train their own models from Item Buddy development datasets, and we do not license raw user content as a training dataset.

Your right to opt out

Model development is enabled by default based on our legitimate interests. You can turn off Help improve Item Buddy's AI models in Settings at any time. Opting out does not affect Gemini scanning, your subscription, or any other purchased functionality.

After you opt out, we stop selecting your content for new development work and remove your retained samples from active development datasets within 30 days. After account deletion, retained source samples and labels are removed within 30 days and must not be used in any future training run.

A model already trained using an eligible sample may remain in service for up to 12 months after your opt-out or account deletion. This period does not override your GDPR rights: we assess whether a person could reasonably be identified or information about them extracted from the model and take any earlier action required by applicable law. We do not assume that every trained model is anonymous.

Existing content uploaded before this version of the Policy may become eligible only after we have given you a prominent in-app notice and at least 30 days to opt out. No content may be selected while your opt-out is active.

6. Data Sharing

We share data only with:

• Infrastructure and hosting providers (including cloud storage such as Amazon S3, where your images are stored)
• Google, for the AI analysis feature described above
• Apple, which processes subscription payments and manages App Store billing
• Authorities, when legally required

All service providers operate under GDPR-compliant data processing agreements. We do not sell your personal data.

7. Data Retention

• Account information: until account deletion + 30 days
• Your content (photos, items, attachments): until account deletion + 30 days
• Selected model-development source samples and associated labels: no longer than 12 months from selection, and removed within 30 days after opt-out or account deletion; once removed, they are excluded from all future training runs
• Models previously trained using an eligible sample: may remain in service for up to 12 months after opt-out or account deletion, subject to an earlier legal obligation to restrict, retrain, or remove a model that still constitutes personal data
• Technical data: 12 months
• Transaction and subscription records: as required for financial and tax law (up to 10 years for accounting records)
• Support communications: 2 years from last interaction

8. Your Rights

Under the GDPR you have the right to access, correct, erase, export (portability), restrict, or object to the processing of your data and, where processing relies on consent, to withdraw that consent at any time.

• Delete your account: You can permanently delete your account and content directly in the app (Settings → Delete Account); removal completes within 30 days.
• Object to model development: Turn off Help improve Item Buddy's AI models in Settings. This is an objection to processing based on our legitimate interests, not withdrawal of consent. It does not affect the service provided to you.
• Other requests: Contact support@datalytic.no; we respond within 30 days.

You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

9. Data Security

We use encryption of data in transit and at rest, strict access controls, industry-standard infrastructure, and ongoing security monitoring. Passwords are stored only as secure hashes.

10. International Data Transfers

Where data is transferred outside the EEA (including to Google and Apple), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and applicable adequacy decisions.

11. Children's Privacy

Item Buddy is intended only for persons aged 18 or older. If we learn that a person under 18 has created an account or provided personal data, we will close the account and delete the data unless we must retain limited information to comply with law.

12. Cookies and Tracking

Item Buddy does not use advertising or cross-site tracking. Our website uses only essential cookies required for authentication, security, and preferences.

13. Changes to This Policy

We may update this Policy from time to time. We will communicate material changes prominently in the app or by another appropriate channel before the new processing begins. We do not treat continued use as consent to a new processing purpose.

14. Contact

See also our Terms of Service.