Privacy Policy
Effective date: October 1, 2026
StowTap is a home-inventory app made by an independent developer. This page explains, in plain language, what StowTap collects, what it doesn't, and why. If anything here is unclear, contact us at support@stowtap.app.
At a glance: the data types Apple asks about
These are the kinds of data StowTap collects, in the words of Apple's App Privacy label. "Linked to you" means it is tied to your StowTap account. None of it is used to track you across other apps or websites, and none of it is sold. Each is explained in the sections below.
| Data type | Linked to you | Used for | What it is |
|---|---|---|---|
| Email Address | Yes | App functionality | Your sign-in address, and the optional reply address on a feedback message. |
| Customer Support | Yes | App functionality | Feedback you send from the app, with the details the form lists. |
| Photos or Videos | Yes | App functionality | Backed-up copies of your photos, and photos you send for AI. |
| Other User Content | Yes | App functionality | Your inventory: names, notes, tags, values, places, boxes. |
| Purchase History | Yes | App functionality, Analytics | Your StowTap Pro plan and subscription events. |
| User ID | Yes | App functionality, Analytics | A random identifier for your StowTap account. |
| Device ID | Yes | App functionality, Analytics | Your device's vendor identifier, sent to RevenueCat with your user ID. |
| Product Interaction | Yes | Analytics | Which screen opened the StowTap Pro screen, when first, and how many times. |
| Crash Data | No | App functionality | Crash and error reports, not tied to you. |
| Other Diagnostic Data | Yes | App functionality | Device model, iOS and app version in crash reports and feedback. |
We do not collect your location, contacts, name, payment card details, browsing history or advertising identifier.
What stays only on your phone
Your inventory — properties, places, boxes, items, notes, tags, and photos — is stored in a local database on your device. StowTap is local-first: you can add, search, move, and print labels for everything you own without ever creating an account or connecting to the internet. A few small things about how the app behaves, such as when a reminder or the check-in card last showed and counts like that, are kept on your phone only and are never sent to us. Settings → Remove everything from this phone empties the app's database and photo files on your phone.
What goes to our server, and when
If you don't sign in (an anonymous session), your inventory never leaves your phone except for the one-off AI actions described below. If you sign in with Apple or an email code, StowTap backs up your inventory (properties, places, boxes, items, photos, labels, loans, and history) to our server so it can sync across devices and survive a lost phone. That server is a Supabase project hosted in the United States (us-east-1 region). Every row is tagged with your account and protected by database rules (row-level security) so only you can read or write it. Photos are stored in a private file bucket, never a public one.
Photos are backed up as smaller copies: about 1280 pixels on the long side, saved as JPEG, with location (GPS) metadata removed. The full-size originals stay on your phone. Item, box, and room photos all back up, and they come down to your other phones signed in to the same account. Free accounts back up at most 250 photos; Pro backs up all of them. Backups can pause for a while if our server's storage is nearly full. Nothing on your phone is affected, and the photos back up later.
We also store account-level records tied to your user ID: your sign-in identity (Apple or your email address), your subscription status and Apple transaction ID (see Purchases below), how many AI actions and free AI searches you've used this month, and a log of the account and subscription emails we've sent you (see Email below).
AI processing
StowTap only sends anything to AI when you take an explicit action — snapping a photo to identify items, searching by photo or by text, asking StowTap to update an item's details, or asking it to estimate values — and only after you've seen and agreed to the in-app AI disclosure the first time you do this.
Before a photo is sent anywhere, it's resized to 1024 pixels on its long side and any location (GPS) metadata is stripped from it on your device. The resized photo is sent through our server to Google's Gemini API, on Google's paid API tier, to identify what's in it and suggest a category and tags, and, if you're on StowTap Pro, an estimated value. When you snap a photo, the request can also carry your category list, the name of the place you're adding to, and the names of a few things already there, so the AI can match how you name things.
An AI search (by text or by photo) sends your search words or photo together with a list of your things: their names, categories, tags, and where they are (up to about 600 entries; no photos of your things, notes, or values) to Gemini so it can find the closest matches. Updating an item's details sends its name and your category list. Estimating values (Pro) sends, for each thing it estimates, its name, category and tags, as text only, to get a rough price range. None of that request content is logged or kept by us after the request completes; only counts, the model used, and response time are recorded, for reliability.
Google's paid-tier terms mean the photos and text you send are not used to train Google's models.
Free accounts get a monthly allowance of AI photo analyses and 3 AI searches a month; AI value estimates and more AI use are part of StowTap Pro. We count these uses on your account so the limits work. The counts don't contain your photos or search words.
You can turn AI off entirely in Settings. StowTap still works fully without it — you can always type item details in by hand.
Sign-in
You can sign in with Sign in with Apple or a one-time email code. We receive the email address that provider gives us (for Apple, your real address or Apple's private relay address) to create and recognize your account. Apple may also give the app your name the first time; StowTap keeps it on your phone to show on the Account screen and does not send it to our server. We never see or store your password for these providers — sign-in is handled by Apple or Supabase's own email-code system.
If you used StowTap without signing in and then sign in, StowTap moves that anonymous session's Pro status, this month's AI snap count, any unused welcome bonus and any feedback you sent to your signed-in account, and the anonymous account is deleted. Anonymous sessions don't back up any inventory, so there is nothing else on the server to move. What's on your phone isn't touched.
Purchases
StowTap Pro is an auto-renewable subscription sold and billed entirely by Apple through the App Store. We never see or store your payment card details. When you subscribe, our server verifies Apple's own signed purchase record to unlock Pro features. We store your plan, its expiration date, whether it's weekly, monthly, or yearly, the price it renews at, whether it's set to renew, whether it's a free trial, and an Apple transaction identifier — never any payment information.
Each purchase is tagged with your StowTap account ID (Apple calls this the
appAccountToken), so the right account gets Pro. Apple also sends our server
notifications about your subscription: renewals, cancellations, refunds, and billing problems. We use
them to keep your plan correct, for example to end Pro after a refund, and to send the subscription
emails described below.
We use RevenueCat, a subscription analytics service, to understand how subscriptions are doing (for example, how many people start a free trial and how many keep Pro). RevenueCat's software in the app reports your purchase and subscription events, such as what you bought, when, whether it is a trial, and renewals and cancellations, to RevenueCat. Those events are tied to your StowTap user ID, a random identifier, and not to your name or email address. RevenueCat also receives basic device details such as your device's vendor identifier (not the advertising identifier), device model, iOS version, app version, country and IP address. Apple's subscription notifications go to RevenueCat first, which passes them on to our server. RevenueCat never receives payment card details, because we never have them.
When you open the StowTap Pro screen, the app also tells RevenueCat which screen or card you came from (for example the Account screen, or a locked feature you tapped), the date you first opened it, and how many times you've opened it, tied to your user ID. We use this to see which moments help people decide and for nothing else. No other record of how you use the app is kept.
Feedback you send us
Account → Send feedback lets you write to us. When you send a message we receive
the message itself (up to 4,000 characters), whether you marked it a problem, an idea or other, a
short code for what you were doing if you came from a "Tell us what happened" link (for example
sync), the reply address if you choose to give one, and the facts the form lists before
you send: the app version, your iOS version, your device model, and whether you're on Free or Pro.
We save it on our server and email it to support@stowtap.app.
You can send up to 5 a day. You can send one without signing in; if you sign in later, it is tied to
your account.
We keep feedback messages until we delete them by hand; nothing deletes them automatically. When you delete your account, the reply address is erased from the copy we store and the link between those messages and your account is cleared. Each message was also emailed to our support inbox, with your reply address in it. That email, and the delivery record our email service keeps of it, are not removed when you delete your account. To have a message removed, including the emailed copy, email us and quote it.
Crash and error reports
If StowTap crashes or hits an unexpected error, the app sends a report to Sentry, a crash-reporting service in the United States, so we can find and fix the problem. A report contains the error and where in the app's code it happened, your device model, iOS version and app version, some basic device conditions such as available memory, and the last few things you tapped (by the name of the button or element, not by anything you typed) and network calls the app made, with the search details and any account or file identifiers removed from each address.
A report does not contain your photos, your inventory (names, notes, tags, values, places), your email address, or your StowTap account, and it is not linked to your account. Sentry may give the app a random ID for that install so it can count how many phones a problem affects. It isn't your StowTap user ID, it is created inside the app, and it is removed from your phone when you delete the app. Reports are sent only from the App Store and TestFlight versions of StowTap, and only to fix bugs, never for advertising.
If you sign in with an email address (Sign in with Apple or an email code), we may send you account and subscription emails: a welcome when you start Pro or a free trial, a heads-up before a free trial ends (with the price it renews at, when Apple has told us it), a note if a renewal payment fails, a note after you turn off auto-renew, and a reminder a few days before a cancelled Pro plan ends. All of these are about a plan or account you already have; we send no marketing email. We can't email anyone who hasn't signed in, because we have no address for them. If you use Sign in with Apple's Hide My Email, the address we hold is Apple's private relay address.
We send these emails through Resend, an email delivery service in the United States, which receives your email address and the message so it can deliver it. The emails are signed by the developer, and replies go to support@stowtap.app. The reminder-style email (your Pro plan ending soon) has an unsubscribe link; if you unsubscribe, we stop sending reminders, but emails that are receipts about your subscription still arrive.
Launch list (this website)
The StowTap website has a form to be told when StowTap is on the App Store. If you use it, we collect your email address and the page you signed up from. We use them to send you one email when StowTap is available, and for nothing else: no newsletter, no marketing series, and we do not share or sell the list. The address is stored in our Supabase database (the same United States project described above), and the form itself sets no cookies and uses no analytics or tracking scripts.
To be removed from the list at any time, email support@stowtap.app from the address you signed up with and we will delete it. We delete the whole list 12 months after the launch email goes out.
Services we use
- Supabase (United States): hosts our server, sign-in accounts, and photo backups.
- Google Gemini: AI photo, search, update and estimate requests, sent through our server.
- Apple: purchases and subscriptions, Sign in with Apple, and notifications to our server about your subscription.
- Resend (United States): delivers the emails described above.
- Sentry (United States): receives crash and error reports, which are not linked to your account.
- RevenueCat: receives your subscription and purchase events and the paywall details described above, tied to your StowTap user ID, so we can understand subscriptions.
No selling, no ads, no tracking across apps
We do not sell your data. StowTap has no advertising or tracking SDKs — there's nothing in the app that follows you across other apps or websites, and we don't use any of the services above for advertising. The app does include two SDKs that help us run it, each described above: Sentry, which sends crash and error reports that are not linked to your account, and RevenueCat, which sends subscription and purchase events tied to your StowTap user ID. Apart from those two, and Apple's own sign-in and purchase services, the app talks only to our Supabase server (for your inventory, account and feedback). Our server calls Google's Gemini API only when you take an AI action, and Resend only when it sends you an email.
Retention
Your local data stays on your phone until you delete it there, remove it (Settings → Remove everything from this phone, or sign out and choose Remove from this phone), or delete the app. Cloud-synced data stays on our server until you delete the item, box, or place, or until you delete your account (below). When you delete something, it sits in "Recently deleted" on your phone for 30 days. Its photo files are removed from your cloud backup once the deletion has backed up, and the rest of what we hold about it (name, notes, serial number, value) is erased from our server within about 35 days. AI request photos and text are not retained by us after a request finishes. The log of which emails we sent you and any unsubscribe record are kept until you delete your account, so we never send the same email twice or email you after you unsubscribe. Feedback is kept as described above. Sentry keeps crash reports for a limited time. RevenueCat keeps subscription records until they are deleted, as described under Deletion and export.
Deletion and export
Settings → Export your stuff builds a complete copy of your inventory — a CSV or JSON file, plus your photos if you choose — that you can save or share anywhere, any time.
Settings → Delete account deletes your account and cloud backup right away, including your photos — it isn't a request queued for later. Deleting your account does not cancel a StowTap Pro subscription: Apple keeps billing until you cancel it in your Apple ID subscriptions. Deleting your account also does not touch what's still saved on your phone; to remove that, use Settings → Remove everything from this phone (or delete the app).
Crash reports aren't tied to your account, so deleting your account doesn't change them. The subscription records RevenueCat holds under your StowTap user ID aren't removed automatically when you delete your account; email support@stowtap.app and we'll ask RevenueCat to delete them.
Children
StowTap is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Security
Network traffic between the app and our server is encrypted (HTTPS/TLS). Server data is protected by row-level database rules scoped to your account, and photos live in a private storage bucket that only your account can read. Our API keys and any service credentials are kept out of the app entirely — the app only ever ships a public, restricted client key.
International transfer
Our server infrastructure runs in the United States. If you use StowTap from outside the US, your account data (for anyone who signs in) is transferred to and processed in the United States.
Changes to this policy
If we make a material change to this policy, we'll update the effective date above and, where appropriate, let you know inside the app.
Contact
Questions about this policy or your data: support@stowtap.app