Privacy Policy

01 — Introduction

About This Policy

Saif Tech LLC (“we”, “us”, “our”) built Tracly, the household inventory app for iOS. This Privacy Policy explains what data we collect when you use Tracly, how we use it, and what rights you have over it.

By using Tracly, you agree to the practices described in this policy. If you do not agree, please do not use the app.

02 — Data We Collect

What We Collect and Why

Tracly is designed to be private by default. Most data never leaves your device. The sections below describe exactly what is collected and under what circumstances.

• Account data. When you sign in, we collect your email address via Supabase's email OTP authentication. If you set a display name in the app, that name is stored in your Supabase user profile. No passwords are stored — we use one-time codes only.
• Inventory data. Items, loans, and hardware entries you create are stored locally on your device using SQLite. This data never leaves your device unless you subscribe to the Household plan, in which case it is synced to our servers (Supabase) to enable cloud sync and family sharing. Only items you explicitly mark as “shared” are visible to household members.
• Subscription data. Subscriptions are processed entirely by the Apple App Store. We use RevenueCat to manage subscription entitlements. We receive your subscription status (Free, Pro, or Household) and a RevenueCat customer identifier. We do not store or have access to payment card information.
• Photos. Photos you attach to items, loans, or hardware entries are stored locally in the app’s private file system on your device. Photos are never uploaded to our servers and are never shared with household members.
• iCloud backup. If you enable iCloud backup in Settings, your local inventory data (items, loans, hardware, boxes, rooms) is backed up to your personal iCloud account. This backup is stored in Apple’s infrastructure — not our servers — and is governed by Apple’s privacy policy.
• Push notifications. Notification IDs are stored locally on your device and are used solely to schedule and cancel reminders you set up — for loan due dates and hardware maintenance intervals. We do not send marketing or promotional notifications. Notification IDs are never synced to our servers.

03 — How We Use Data

Purpose of Use

We use the data we collect solely to operate and improve Tracly. Specifically:

• To authenticate your account and maintain your session.
• To sync your inventory data across your devices and with household members (Household plan only).
• To verify your subscription entitlements and apply the correct feature tier.

04 — Data Sharing

Third-Party Processors

We work with a small number of trusted service providers who process data on our behalf:

• Supabase — Provides our authentication and cloud database infrastructure. Used for account sign-in and cloud sync on the Household plan. Supabase is bound by their own privacy policy and data processing agreements.
• RevenueCat — Manages in-app subscription entitlements. RevenueCat receives a device identifier and your subscription status from the App Store. They do not have access to your inventory data.
• Apple — Processes App Store purchases and manages iCloud backup storage. Governed by Apple’s Privacy Policy.

We do not share your data with any other third parties.

05 — Data Security

How We Protect Your Data

Security is built into Tracly at the data model level, not bolted on afterward.

• Row Level Security (RLS) is enabled on every server-side table. Each user can only read and modify their own data. Household members can only see rows you have explicitly marked as shared.
• No anonymous accounts. Tracly requires a verified email address. This keeps the data model clean and prevents orphaned cloud records.
• Local-first architecture. The majority of your data never leaves your device. Cloud sync is opt-in and Household-tier only.
• No cross-user visibility. Private items — those not marked as “shared” — are never visible to household members or any other user, regardless of their subscription status.

06 — Data Retention

How Long We Keep Data

Your account and cloud inventory data is retained for as long as your account is active. If you wish to delete your account and all associated cloud data, please contact us at the address below and we will process your request promptly.

Local data (stored on your device via SQLite) can be deleted at any time by uninstalling the app. Uninstalling the app does not delete your Supabase account or cloud data — you must contact us for that.

iCloud backup data is managed through your iCloud account settings in iOS. You can delete it directly from your device.

07 — Children’s Privacy

Age Restriction

Tracly is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

08 — Changes

Policy Updates

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document. For significant changes, we may notify you within the app. Continued use of Tracly after a change to this policy constitutes your acceptance of the updated terms.

09 — Contact

Get in Touch

If you have questions about this Privacy Policy, your data, or a deletion request, please reach out:

Saif Tech LLC