Privacy Policy

Last updated: September 2026

The short version: Your stuff is your business. Your inventory stays on your device by default. If you allow AI features, the photos and item details you choose to analyze are sent through our server to the providers described below. Price Watch sends watched-item details automatically when you enable it. We don't sell your data.

Your Stuff, Your Data

• Core inventory features work offline — AI features and other online lookups require internet access
• iCloud sync is optional — Turn it off, everything still works
• AI runs when you ask, and for price checks you turn on — Nothing is sent until you allow AI features
• We can't see your inventory — It's in YOUR iCloud, not ours
• No ads, no tracking profiles — Anonymous analytics only; in-app analytics disable anytime in Settings, website analytics respect browser Do Not Track
• Export everything anytime — PDF, CSV, Excel

What stays on your device

By default, everything:

• Product names, descriptions, and photos
• Purchase dates, prices, and receipts
• Warranty information and reminders
• Locations, notes, and categories
• Serial numbers and barcodes

This data never leaves your iPhone, iPad, or Mac unless you turn on optional features.

Optional features that use the internet

These features are ready to use, and each one asks first. The first time you use iCloud Sync, a barcode lookup, recall checking, or AI help, Stuffolio shows you exactly what gets sent and you choose whether to continue. Nothing leaves your device until you do. You can turn any of them off at any time in Settings → Privacy. AI features ask once for permission, and nothing is sent to AI providers or search and marketplace services until you allow it. You can review the AI disclosure anytime in Settings → Privacy & Network.

iCloud Sync

If you turn this on, your data syncs across your Apple devices using your personal iCloud account. Apple handles the encryption. We never see this data — it goes directly between your devices and Apple's servers.

Family Sharing & Legacy Wishes

If you choose to share with a family member, the data you share — beneficiary names, item assignments, and the shared item details — travels through your iCloud account to the person you invite, using Apple's CloudKit sharing (the same mechanism as sharing a Notes folder). Only people you explicitly invite can see it, and you can stop sharing at any time, which removes their access. We never see this data; it goes between your iCloud and theirs.

AI Features (Stuff Scout, Scanning, Repair/Keep/Replace, Product Assistant, Price Watch)

AI features need your permission once, and nothing is sent before you give it. Most of them run only when you ask: Stuff Scout (item identification and value), receipt and label scanning, Repair/Keep/Replace alternatives, and the AI Product Assistant. Price Watch is the exception: if you turn it on for an item, Stuffolio checks that item's price automatically in the background, sending its details without a tap each time. Allowing AI features does not turn Price Watch on or add items to it. When these features run:

• The details of the item you're asking about are sent to our server, then on to an AI provider. Depending on the feature and what you've filled in, that can include the photo you took, the maker and model, the category, and — if you've entered them and they're relevant to your question — the product name, UPC, or serial number. It's whatever's needed to answer what you asked, and nothing more.
• To answer product questions, find alternatives, and check prices, the Assistant, Repair/Keep/Replace and Price Watch may also run a web search, so item details can be sent to a search provider (see Third-party services below)
• We don't build a profile about you, and none of this is tied to your name or Apple account
• The AI and search providers process the request under their own privacy terms (listed under Third-party services below)

How long it's kept. AI providers may retain submitted content and responses for safety, abuse prevention, and legal compliance. Retention periods vary by provider:

• Anthropic normally deletes API inputs and outputs within 30 days. Longer retention can apply under an agreement, for usage-policy enforcement, or where the law requires it. (Anthropic)
• OpenAI keeps abuse-monitoring logs, which may contain content, for up to 30 days by default, with exceptions for legal requirements and harm prevention. (OpenAI)
• Google (Gemini) logs prompts and responses for a limited period for abuse detection and legal compliance. Google does not state a fixed duration. (Google)

Our own server keeps limited records: a summary of the most recent request (replaced by the next one, and kept at most 7 days) and usage counts per device that aren't tied to your name or Apple account.

We tell you this plainly because our other lookups are narrower on purpose — Barcode Lookup sends only the barcode, and Recall Checker sends only the maker and model. The AI features can send more, because answering a real question sometimes needs more. You start most of them yourself (Price Watch runs on its own once you turn it on for an item), and before any of them sends anything, Stuffolio shows you what gets sent and asks.

Barcode Lookup

When you scan a barcode and request product info, only the barcode number is sent. No personal information.

Recall Checker

Checking for product recalls sends only the manufacturer and model. No serial numbers or personal data.

Price & Value Estimates

When you ask Stuff Scout what something is worth, we look up what similar items are selling for. To do that, a short description of the item (what it is, its maker and model, and any product name you typed) is sent as a search to marketplace and retailer sources, including eBay, Reverb and Discogs, plus Brave Search and Tavily for wider results. For antique pocket watches, the serial number read from the photo is also looked up in Pocket Watch Database. Photos, your purchase price and your notes are never sent to these services. As with everything else here, it happens only when you ask for a value.

Product Updates (Opt-in)

You can choose to receive occasional updates about new features, tips, and improvements. This is completely optional.

• What we collect: Email address and/or phone number (only if you provide them)
• How we use it: To send you product updates and feature tips — nothing else
• How often: Infrequent — just a few times per year
• What we don't do: No marketing, no promotions, never sold or shared

Your contact information is stored securely on Cloudflare. Emails are delivered via Resend; text messages via Twilio. You can unsubscribe anytime in Settings → Updates or via the link in any message.

Crash Reports

If the app crashes, we collect anonymous technical information to fix bugs:

• Device type and operating system version
• What happened before the crash
• App version

We don't collect your name, email, inventory data, or photos in crash reports.

Usage Analytics (Opt-out)

Stuffolio collects anonymous aggregate data by default to improve the app:

• Which features are used (not what data you enter)
• App stability and performance metrics
• A persistent anonymous identifier, stored only in your device's Keychain, to count unique users and understand feature usage over time — it is not your name, email, or any personal detail, and it is never linked to your inventory

We don't see your product names, photos, or personal information through analytics. This feature is on by default. You can disable it at any time in Settings → Privacy.

Website Analytics

Separately from in-app analytics, stuffolio.app uses Plausible to count anonymous page views and outbound link clicks (for example, the number of visitors who tap "Download on the App Store"). Plausible is a privacy-friendly analytics service that does not use cookies, does not build profiles, and does not track visitors across sites.

• What's collected: anonymous page views, referrer (where you came from), country (not city), browser type, and outbound link clicks
• What's NOT collected: IP addresses (Plausible hashes them in-memory and discards), cookies, personal identifiers, anything that would let us recognize you on a return visit
• Honest asymmetry: the "disable anytime" mechanism in Settings → Privacy applies to in-app analytics. Website analytics has no per-visitor toggle today; the closest equivalent is your browser's Do Not Track setting, which Plausible honors automatically for stuffolio.app visitors. Ad-blockers like uBlock Origin also suppress the analytics script if you'd prefer that route.

What we don't do

• Sell your data — Never have, never will
• Show you ads — Stuffolio has no advertising
• Track you across apps — We don't use tracking SDKs
• Build a profile about you — Anonymous identifiers for aggregate statistics are not linked to your identity

Your data, your control

You can:

• Use Stuffolio completely offline — No account required
• Export your data — CSV, PDF, and other formats
• Delete everything — Settings → Data Management → Reset All Data wipes local data. If iCloud sync is on, deletions sync to your other devices; if you've shared with family, stop sharing to revoke their access.
• Turn off any network feature — At any time in Settings

Third-party services

When you use optional features, these services may process data according to their own privacy policies:

• Apple (iCloud) — apple.com/privacy
• Sentry (crash reports) — sentry.io/privacy
• AI providers (item identification & product info) — Photos and text you submit for AI help are processed by one or more of Anthropic (Claude), Google (Gemini), and OpenAI, depending on the request. Each handles your request under its own privacy and data-use terms, linked here.
• Cloudflare (AI backend, analytics & subscriber storage) — cloudflare.com/privacypolicy
• Web search (Product Assistant, Repair/Keep/Replace and Price Watch) — When these features need to look something up, your question and item details may go to a search provider: Brave Search, Tavily, or Exa.
• Marketplace & retailer sites (price and value estimates) — To estimate what an item is worth, a short description of the item (what it is, its maker and model) is sent to sites like eBay, Reverb, and Discogs, along with specialty and general retailer pages depending on the item, and Pocket Watch Database for antique pocket-watch serial numbers. Each has its own privacy terms.
• Plausible (website analytics) — plausible.io/privacy
• Resend (email delivery) — resend.com/legal/privacy-policy
• Twilio (SMS delivery) — twilio.com/legal/privacy

Children's privacy

Stuffolio is a general-audience app and isn't designed for children. In line with COPPA (US), we don't knowingly collect personal information from children under 13; where local law sets a higher age of digital consent (such as 16 in parts of the EU), the same applies at that age. If you believe a child has provided us information, email [email protected] and we'll delete it.

California residents (CCPA)

You have the right to know what data we collect, request deletion, and opt out of data sales. Since we don't sell data and store almost nothing about you, there's not much to request — but you're welcome to ask.

Questions?