Privacy policy

Who we are

Relo is made by TinyApps. For anything in this policy, including requests about your data, write to info@tinyapps.me, or use the contact form. For the purposes of the UK and EU General Data Protection Regulation, TinyApps is the data controller for the small amount of account data described below.

What stays on your device

Relo is an offline-first app. Everything you record is written to an SQLite database in the app's private storage, which other apps cannot read:

• Products, categories, brands, stores and tags
• Purchase dates, warranty lengths, expiry dates and prices
• Notes, serial numbers and custom fields
• Photos, receipts and documents you attach
• Your reminder settings and the reminders scheduled from them
• App preferences such as theme, currency and sort order

None of this is sent to us. It is not uploaded, backed up to our servers, or synchronised anywhere. The only copies that exist are on your device and in any backup file you export yourself.

Reminders are scheduled by Android on the device itself. We do not operate a push server, and no reminder passes through us.

If the app crashes, it writes a short diagnostic record, the last few actions and the error, to its own private storage. That record stays on the device and is shown to you in the app so that you can copy it to us if you want to. It is never transmitted automatically.

What we collect

Nothing at all, unless you create an account. Relo works fully in guest mode, with no account, no sign-in and no network requests.

If you do create an account, our server stores:

• Your name, as you typed it, so the app can greet you and so our replies are not addressed to a stranger.
• Your email address, to identify the account, let you reset a forgotten password, and reach you about something important to the account.
• A hash of your password. We do not store the password itself and cannot read it or recover it for you.
• Authentication tokens for the devices you are signed in on, so you do not have to sign in every time.
• Account timestamps: when the account was created, last updated, and last used to sign in.

Creating an account does not upload your products. In this release an account exists only so that cloud sync and cloud backup can be added later. If we ever ship those features, they will be opt-in, this page will describe them before they are switched on, and the change will be announced in the app.

Our web server also keeps ordinary request logs for a short period, which include the IP address, the time, the page or endpoint requested and the browser or app version. These are used to keep the service running and to investigate abuse.

If you write to us, through the contact form or by email, we hold your message and your address for as long as it takes to answer you and to keep a record of the exchange.

What we never collect

• No advertising identifiers, and no advertising of any kind.
• No analytics or usage-tracking SDK. We do not know which screens you open, how many items you track, or how often you use the app.
• No third-party crash or performance reporting service.
• No contacts, call logs, messages, calendar or precise location.
• No automatic collection of your photos or files. The app only ever reads the specific file you pick.
• We do not sell, rent or share personal data with data brokers, and we never will. There is no mechanism in the app that would allow it.

Why, and on what legal basis

Where the GDPR applies, our bases are:

• Performance of a contract for account data: we cannot give you an account without storing it.
• Legitimate interests for server logs and abuse prevention, and for answering your support messages.
• Consent for anything optional, such as notifications or access to your camera. You can withdraw it in Android's settings at any time, and the rest of the app keeps working.

We do no profiling and no automated decision-making.

Permissions, and what each is for

• Notifications so warranty and expiry reminders can reach you. Scheduled locally; declining means the app simply shows nothing.
• Alarms and reminders so a reminder fires at the time you set rather than whenever Android next wakes the app.
• Camera only while you are taking a photo of a product or receipt from inside the app.
• Photos and media only for the single image you pick.
• Files only for a document you attach, or to write and read a backup file you asked for.
• Internet used only for sign-in, sign-up and password reset. With no account, the app makes no network requests.

Each permission is requested at the moment it is first needed, never at startup, and declining any one of them does not lock you out of anything else.

Who else is involved

We keep this list as short as we can. Each of these sees only what it needs to do its job, and none of them receives your product records, because we do not have them.

• Our hosting provider, which runs the server holding the account database and the request logs.
• Our email provider, which delivers verification, password reset and support messages. It necessarily sees your email address.
• Google Play, which distributes the app and reports install counts, country-level statistics and anonymised crash data to us. That is Google's own collection, governed by Google's privacy policy, and it tells us nothing about what you track.

Where data moves outside your region, it is covered by the standard contractual clauses our providers offer.

How long we keep it

• Account data: until you delete the account.
• Authentication tokens: until you sign out, or they expire.
• Server request logs: up to 30 days, then discarded.
• Support messages: up to 24 months, so we can look back at an earlier conversation with you.

Deleting your data

On your device. Deleting an item removes it. Uninstalling Relo, or clearing its storage in Android's app settings, removes the whole database and every attachment with it. Nothing survives on our side, because nothing was there.

Your account. Open Settings, then Account, then Delete account. That erases your name, email address, password hash and tokens from our server. It does not touch the items on your device, which are yours and stay where they are. If you cannot reach the app, email info@tinyapps.me from the address on the account and we will do it for you within 30 days.

Before you delete anything, consider exporting a backup from Settings. It is the only copy that can move your records to a new phone.

Your rights

Depending on where you live you may have the right to access the data we hold about you, correct it, have it deleted, obtain a portable copy, object to our processing, or withdraw consent. Write to info@tinyapps.me and we will answer within 30 days. We will not charge you, and we will not treat you differently for asking.

In practice, the answer to an access request is usually short, because the only record we hold is your account row. You can see most of it in the app already.

If you are in the EU or UK and you are unhappy with how we have handled a request, you may complain to your national data protection authority.

Security

Traffic between the app and our server uses HTTPS. Passwords are stored as bcrypt hashes. Authentication tokens are kept in the Android Keystore rather than in ordinary app storage. On the server, access to the account database is limited to the people who operate it.

The honest limitation, worth stating because it follows from the offline-first design: your records are only as safe as your device. Relo does not encrypt the local database with a separate password, so someone who can unlock your phone can open the app. Use a screen lock. A device-level app lock is on our list.

Children

Relo is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, tell us and we will remove it.

Changes to this policy

If this policy changes, the effective date at the top changes with it. If a change affects what we collect or why, we will say so in the app before it takes effect rather than quietly editing this page.

Contact

TinyApps, for Relo — info@tinyapps.me. The contact form reaches the same place. See also our data safety summary and terms of use.