Privacy policy

1. Controller and contact

You can contact this address with questions about privacy or to exercise your rights.

2. Visiting the website and technical provision

When you visit the website, the server processes technical connection data, in particular your IP address, access time, requested address, browser information and response status. This is necessary to deliver the service and ensure its stability and security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure operation of myInventory.

The app uses technically necessary session data and cookies for sign-in and security. Selecting “Stay signed in” sets a corresponding cookie. The app also stores information such as search history and certain display preferences locally in your browser. You can delete this data through your browser settings. The legal basis for technically necessary storage and access is section 25(2) TDDDG; personal data is processed under Article 6(1)(b) or (f) GDPR.

3. Account and inventories

For your account, we process your sign-in details, name, hashed password if you use a password, settings and subscribed plan details. Your inventories store data you enter or upload: locations, containers, items, descriptions, photos, coordinates where applicable and other details you create. Processing provides and manages your account and inventories (Article 6(1)(b) GDPR).

When you share an inventory, we process the share and the information required for invitations. Authorised people can view or edit the contents you share according to their permissions. Only upload images or information about other people if you are entitled to do so.

Deleted containers and items are initially placed in the trash and can be restored there. They remain stored while in the trash.

Registration requires, in particular, an email address and password. You enter additional inventory contents voluntarily; without these details, the corresponding features are unavailable. No solely automated decision with legal or similarly significant effects takes place.

4. AI features

When you start an AI analysis, our server sends the selected image or voice text you entered, together with the context data required for the feature, to the OpenAI API. Voice-based assignment may include container names and paths. OpenAI generates item suggestions, which you can review and edit before saving. An image may be saved as a file in myInventory during processing.

Data is transferred only when you use the feature. The legal basis is Article 6(1)(b) GDPR. The recipient is OpenAI as the API provider. Processing outside the European Economic Area may occur; appropriate safeguards under Chapter V GDPR are required. Further information is available in the OpenAI business services data processing terms. According to OpenAI, API inputs and outputs are not used to train models by default.

5. Map and location

The map loads map tiles from OpenStreetMap. For technical reasons, the map provider receives, in particular, your IP address and information about the requested map areas. When you use your device's location feature, the browser asks for permission first. Approved coordinates are saved for the location you selected in your inventory. You can revoke browser access in your device settings at any time. The legal basis for storing your selected inventory locations is Article 6(1)(b) GDPR; the map is integrated to provide this feature.

6. Payments and subscription

When you purchase or manage a paid subscription, you are redirected to Stripe. We send the data required to identify your account and process the transaction, and receive, in particular, customer identifiers, subscription status and payment events from Stripe. You enter payment details directly with Stripe. The legal basis is Article 6(1)(b) GDPR. Statutory retention requirements for billing records remain applicable. Information about Stripe's processing is available in Stripe's privacy policy.

7. Push notifications

If you enable push notifications, we store your browser's technical push address, the keys required for delivery and device details. Notifications are delivered through your browser's push service. You can revoke permission in your browser or disable notifications in the app. The legal basis is Article 6(1)(a) GDPR.

8. External resources and recipients

The website loads fonts from Google Fonts and program files from Tailwind and jsDelivr. For technical reasons, these providers receive your IP address and browser information. We also use technical service providers for hosting and operating the application. External services may transfer data outside the European Economic Area. Where required, we rely on the legal mechanisms in Chapter V GDPR.

9. Advertising in the Free version

In the Free version, we display advertising through Google AdSense. Google and participating advertising partners may process data to provide, select and measure advertisements, for example IP addresses, browser and device information, usage information and viewed pages. Cookies and similar technologies may be used.

Personalised advertising and cookies or device access requiring consent depend on your consent. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw consent at any time with effect for the future.

Google and advertising partners may process data outside the European Economic Area. The legal requirements of Chapter V GDPR apply. Further information about data processing and retention is available in Google's privacy policy and Google's advertising information.

Google Analytics on the homepage

We use Google Analytics 4 exclusively on the public homepages meininventar.de and myinventory-manager.com (including redirects from www) to analyse their use and improve our offering. This analytics code is not loaded in the inventory app at app.meininventar.de or on other pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC in the USA may also process data.

We load the Google tag with measurement ID G-VNX0STJ4BH only after your voluntary consent. Without consent, no connection to Google Analytics is established, including for measurements without cookies. Declining has no effect on the usability of the website or app. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG.

Processing includes, in particular, the homepage visited, usage events, timestamps, browser and device information, a pseudonymous identifier generated through cookies and an approximate location derived from the IP address. The IP address is technically transmitted to Google; according to Google, it is not logged or stored for accesses from the EU. We do not include homepage URL parameters or fragments in the page address sent. We do not send account data or inventory contents to Analytics. Google Signals and advertising personalisation signals are disabled in the integrated code.

Analytics uses the cookies _ga and _ga_VNX0STJ4BH for recognition and session attribution. We limit their lifetime to a maximum of 90 days and set them only for the respective homepage host. Consent is managed separately for each domain. Your consent choice, timestamp and text version are stored for 180 days in local browser storage under mi_homepage_analytics_consent; we then ask again. This storage is necessary to manage your choice (section 25(2), no. 2 TDDDG). If your browser blocks storage, the choice applies only to the current page view.

Retention of user and event data stored by Google also depends on the Analytics property settings; the standard version provides two or 14 months. Cookie lifetime is independent of this. Aggregated statistical reports may be retained longer. Further information is available in Google Analytics data retention information.

Data may be transferred to the USA. For transfers to certified Google LLC, the EU-US Data Privacy Framework provides the basis under Article 45 GDPR; standard contractual clauses are used additionally where required. Further information: Google's data transfer frameworks, Data use on sites using Google services and Google's privacy policy.

You can withdraw consent at any time using “Cookie settings” in the respective homepage footer; the German homepage uses “Cookie-Einstellungen”. Choose “Decline” or “Ablehnen” respectively. We then stop further measurement and delete the Analytics cookies set by this integration. Withdrawal does not affect the lawfulness of processing before withdrawal.

10. Retention

We generally store account data and inventory contents while your account exists or while required for the corresponding feature. Deleted contents in the trash remain stored until permanently removed. Technical logs and security data are retained only as long as necessary for operation and security. Contract and billing data may be subject to statutory retention periods. After these periods, data is deleted unless another legal basis for storage applies.

11. Your rights

Under the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You can object to processing based on legitimate interests (Article 21). You can withdraw consent at any time with effect for the future (Article 7(3)). Please use the contact details above.

You also have the right to complain to a data protection supervisory authority (Article 77 GDPR). For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information NRW.

12. Changes

We update this policy when processing in myInventory or legal requirements change. The current version is available on this page.