Privacy policy
Last updated August 4, 2026
The short version. Your inventory lives on your phone and is encrypted. Backups are encrypted on the device before they are uploaded to your own cloud storage, with a key we never receive. We cannot read your items. The single exception is smart scan, which sends one photograph you explicitly choose to send, and is described in full below.
What we hold
If you subscribe, we hold an account record: your email address, a hashed password, your subscription status, and a count of how many smart scans you have used this month. That is the entire contents of our database as it relates to you.
We also record, for a backup you have made: which provider it went to, when it ran, how many records it contained, and its size. Not what is in it.
What we do not hold
We hold no copy of your inventory. Not your items, photographs, serial numbers, purchase prices, locations, notes, or valuations. This is structural rather than a policy we could change quietly: the data is encrypted on your device with a key that is generated there and never transmitted to us. If we were compelled to produce your inventory, we could not.
Where your inventory lives
In an encrypted database on your phone. When you enable backups, the data is encrypted on the device and the encrypted file is uploaded to your own iCloud or Google Drive account, consuming your storage. Apple and Google hold the file; neither can read it, and neither can we.
Restoring onto a new device, or moving between iPhone and Android, needs the recovery key shown to you once during setup. We do not have a copy. If you lose it and also lose your device, the backup cannot be decrypted by anyone, including us. That is the necessary cost of the guarantee above, and we would rather state it plainly than bury it.
Smart scan — the one time content leaves your device
Barcodes, QR codes, and ordinary label text are read entirely on your phone. Nothing is transmitted and there is no cost.
Some labels defeat on-device reading: etched metal, curved surfaces, glare, very small type. For those, you can choose smart scan. When you do:
- That single photograph is sent over an encrypted connection to our server, and from there to Anthropic, which operates the model that reads it.
- It is held in memory only for the seconds it takes to read. It is not written to disk by us, not stored in our database, and not logged.
- What we keep afterwards is a metered record that a scan happened — the date, which model read it, and the cost. Not the image, and not what was extracted from it.
- Anthropic processes the image to return a result. It is not used to train models.
Smart scan is never automatic. It requires a deliberate tap each time, and Settings has a switch that disables it entirely, after which no image can be sent under any circumstance.
Photographs
Photographs you attach to items are stored on your device and included, encrypted, in your backups. They are never uploaded to us. The only image that ever reaches our servers is one you specifically send with smart scan.
Analytics
This website uses no analytics and sets no cookies unless that is later enabled and disclosed here. The app contains no third-party analytics, advertising, or tracking software. We do not build a profile of you and we do not sell or share personal information.
Payments
Subscriptions are handled by Stripe. Card details are entered on Stripe's systems and are never sent to us or held by us. We receive only a customer reference and whether the subscription is active. Stripe's own privacy policy governs what they collect.
We use your email address to verify your account, reset your password, and send service messages such as a trial ending or a payment failing. Optional notification emails can be turned off in your account settings.
Children
Asset Logging is not directed at children under 13 and we do not knowingly create accounts for them.
Your rights
You can export your entire inventory from the app at any time, as a PDF or a spreadsheet, without asking us. You can delete your account, which removes your account record, subscription reference, and scan history from our systems. Deleting your account does not touch the data on your phone or the backups in your own cloud storage — those are yours to keep or remove.
Depending on where you live you may have additional rights over the personal data we hold (which is, as above, an email address and a subscription status). Email support@assetlogging.com and we will act on it.
Retention
Account records are kept while your account exists. Unverified accounts are removed after a period of inactivity. Scan-metering records are kept for billing and abuse-prevention purposes and are not linked to any image or extracted text, because neither is retained.
Changes
If this policy changes in a way that affects what we collect or how we handle it, we will say so on this page and, for material changes, by email.