Neatkept
Neatkept Privacy Policy
Neatkept is a home inventory: you photograph boxes and shelves, and the app remembers what is where. This policy explains what we keep, why, who helps us run the service, and how you can take your data with you or delete it. We don't show ads, we don't sell data, and the app has no third-party analytics or tracking.
Who we are
Neatkept is run by Global Tech Distribution s.r.o., Voskovcova 1130/30, Hlubočepy, 152 00 Praha 5, Czech Republic ("we"). We are the controller of your personal data. Contact: info@gt-d.cz.
What we keep
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Your email address, or your Sign in with Apple ID; your name if you give one; your language | To sign you in, send sign-in links and show the app in your language | Contract (Art. 6(1)(b)) |
| Your inventory: properties, rooms, boxes, things, their tags, quantities, optional values, and the log of moves | This is the service | Contract |
| Where a property is (its map coordinates), only if you set it. The phone uses its own location to tell which property you are at, and never sends it to us | To show the places of the property you are at first | Contract |
| Photos you take in the app, and the text the phone reads from packaging and labels | To recognise things in them and show them to you | Contract |
| What the AI models answered for each photo | So an old photo can be read again by a better model, and to measure and improve recognition | Legitimate interest (Art. 6(1)(f)) |
| Whether you allowed the AI, and when you last changed your answer | To send your photos, packaging text, search queries and names of things to the AI models only with your permission | Consent (Art. 6(1)(a)), which you can withdraw in the app |
| Barcodes you scan | To look up the product | Contract |
| Your IP address when you ask for a sign-in link | To stop abuse of sign-in emails | Legitimate interest |
| Sign-in sessions (refresh tokens) | To keep you signed in | Contract |
| If a household is paid for: the App Store subscription (Apple's transaction ID, the product, its status and dates, and Apple's signed record of it). Apple handles the payment; we never see your card or Apple ID | To give the household its plan | Contract |
Everyone you invite to a household sees everything in it, and sees your name, email and role there.
Who helps us
- DigitalOcean hosts the service: servers, database and photo storage are in its Frankfurt, Germany data centre (EU).
- DigitalOcean Inference runs the AI models that read your photos and packaging text, turn names into search vectors and interpret search queries. DigitalOcean does not store what is sent to the models or what they answer, and does not use it to train models. Photos, packaging text, search queries and duplicate checks go to OpenAI models through DigitalOcean, under OpenAI's zero data retention terms. We keep the answers ourselves, as described above. Nothing goes to the AI models until you allow it in the app: Neatkept asks the first time you scan or search. You can change your answer at any time in Settings → AI. Without it the app works without AI: no photo scans, search by words, duplicates by barcode only. When you turn it off, nothing new is sent; the search vectors already made stay in our database, with no third party.
- Hetzner hosts our own search-vector server in Falkenstein, Germany (EU). Names, descriptions and search queries are turned into search vectors there by a model we run ourselves; nothing is kept on that server. When it is unavailable, DigitalOcean Inference does the same work.
- Postmark (ActiveCampaign, USA) sends sign-in emails. It receives your email address.
- Apple, if you use Sign in with Apple, and for subscriptions bought in the app. We keep only the ID Apple gives us for our app, and the subscription records Apple signs.
- Product databases (Open Food Facts, Open Beauty Facts, Open Products Facts, EAN-DB, EAN-Search.org) receive a barcode you scan, and nothing about you. Answers are cached for everyone.
Where a provider is outside the EU, the transfer relies on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
- Your account and inventory: until you delete them.
- Photos: originals for 5 years, after which only a small thumbnail stays.
- Sign-in links and the IP address with them: 24 hours.
- Exports: the zip is deleted 7 days after it is made.
- After you delete your account: see below. Server logs, which hold no IP addresses and none of your content, are kept by our host for up to 90 days.
Your rights
You can get a copy of your data at any time: in the app, Settings → Your data → Export my data gives you a zip with everything in your households (as JSON) and your photos.
You can delete your account at any time: Settings → Your data → Delete account. You leave every household. A household you share stays with the others (if you were its only owner, the member who joined first becomes owner). A household nobody else is in is erased with its photos within an hour. Your email, Apple ID and name are removed at once; what remains of your account is an anonymous ID so shared households keep working.
You also have the right to correct your data, to object to processing based on legitimate interest, and to restrict processing. Write to info@gt-d.cz. You can complain to a data protection authority: ours is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), or the one where you live.
Children
Neatkept is not meant for children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we update the date above, and tell you in the app when the change matters.