Legal

Privacy Policy

Last updated: September 30, 2026

CasaMap is a home inventory app. This policy explains what data the app and this website handle, who processes it, and how you can have it deleted. CasaMap is operated by Marc Fernández, an individual ("I", "me"). You can reach me at [email protected].

1. Free use: your data stays on your device

Without an account, everything you enter — rooms, storage places, items, quantities, notes and photos — is stored only in a database on your phone. It is not sent to me or to anyone else unless you use “Fill in from photo” (below), and CasaMap does not require an account to use the free features. Uninstalling the app deletes this data.

Filling in an item from a photo — if you tap “Fill in from photo”, that photo is sent to my server and on to OpenAI, which suggests a name, quantity and notes for the item. This works with or without an account. For each scan I store the time, a device identifier, your account ID if you are signed in, and your app version, to enforce the scan limits and keep track of costs. OpenAI does not use the photo to train its models and may keep it for up to 30 days to detect abuse. While I improve this feature I may keep some scan photos and their results; they are used for nothing else, and scans made while signed in are deleted if you delete your account.

2. If you create an account and use cloud sync

Cloud sync and household sharing are optional paid features. If you use them, the following is collected and stored:

• Account data — your email address and, if you provide it, your name. Sign-in is handled by our authentication provider, Clerk.
• Inventory data — the rooms, storage places, items, quantities and notes you sync, stored on my server so they can be restored on a new phone or shared with the members of your household.
• Photos — photos you attach to items or storage places are resized, compressed and stored in Cloudflare R2 object storage. They are served from unlisted, hard-to-guess web addresses so your other devices and household members can load them; anyone who already has an exact photo address could open it.
• Household membership — which accounts belong to a household, and the invite codes used to add members. Other members of your household can see the inventory data and photos in that household, and the email or name attached to your membership.
• Purchase status — your subscription is processed by Google Play and managed through RevenueCat. I receive your subscription status (which plan, whether it is active, when it renews or expires), not your payment card details.

3. Diagnostics and feedback

• Purchase error reports — if a purchase or restore fails, the app sends a short error message with your app version, platform (Android) and account ID to my server so I can fix it.
• Server logs — my servers keep standard operational logs (such as request times, errors and IP addresses) for security and troubleshooting.
• Feedback — if you send feedback from inside the app, I store your message together with your app version, platform, a device identifier (used only to limit spam), and your email and account ID if you are signed in.
• Waitlist — if you enter your email on this website to be notified about CasaMap, I store that email and the topic you picked, and use it only to contact you about that topic.

CasaMap does not include advertising or third-party analytics SDKs, and I do not sell your data or use it for advertising or profiling.

4. Device permissions

• Camera — to take a photo of an item or storage place, and to scan a household-invite QR code. Scanning happens on your device.
• Photos — only the pictures you choose to attach are read; the app does not browse your library.

5. Who else handles your data

I use these service providers to run CasaMap. Each processes data only to provide its service:

• Clerk — sign-in and account management.
• RevenueCat — subscription and entitlement management.
• Google Play — payment processing and app distribution.
• Cloudflare — photo storage (R2) and network delivery.
• OpenAI — suggests item details from a photo, only when you use “Fill in from photo”.
• My hosting provider — the virtual server in Germany that runs the CasaMap backend and database.

My own server and database are hosted in Germany, and photos are stored in an EU-located Cloudflare R2 bucket. Clerk, RevenueCat and OpenAI are US-based companies, so account, purchase and photo-scan data they process may be transferred outside the European Economic Area. These transfers are protected by appropriate safeguards under GDPR, such as the EU–US Data Privacy Framework (where applicable) and the European Commission’s Standard Contractual Clauses included in their data processing agreements. I only share your data with trusted service providers necessary to operate the service (such as authentication and payment infrastructure), or when required by law.

6. Retention and deletion

Data that lives only on your device is under your control and is removed when you uninstall the app. Cloud data is kept while your account is active.

To delete your account in the app: open the Account tab, tap "Delete account" and confirm. This immediately and permanently deletes your account, your synced inventory, your photos, your household membership and any feedback you sent, and signs you out. Inventory stored only on your device is not touched, but photos that had been uploaded to the cloud are removed from it. Deleting your account does not cancel a subscription — manage that in Google Play.

If you can't use the app: email [email protected] from the address you signed up with, with the subject "CasaMap account deletion". I will complete the deletion within 30 days and confirm by email. Purchase records held by Google Play and RevenueCat, and information I am legally required to keep, are retained under their own policies.

If you are the owner of a shared household, deleting the account deletes the household and its data for all its members.

7. Your rights

Depending on where you live (including under the EU/UK GDPR), you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to your local data-protection authority. Email me at the address above to exercise any of these rights. The legal bases I rely on are performing the service you asked for (your account and sync), legitimate interest (security, diagnostics, spam prevention) and, for the waitlist, your consent, which you can withdraw at any time.

8. Children

CasaMap is not directed at children under 16, and I do not knowingly collect their personal data. If you believe someone under 16 has created an account, contact me and I will delete it.

9. Security

Data is sent over encrypted connections (HTTPS). No system is perfectly secure, but I limit access to the servers and databases that hold your data.

10. Changes to this policy

If I change this policy in a meaningful way I will update the date above and, for material changes, notify signed-in users in the app or by email.

11. Contact

Questions or requests: [email protected].