1. Controller

Plus AI Software GmbH
Merkurstr. 21
D-90763 Fürth, Germany
Email: marco.albert@plusai.de

2. Overview

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within the mobile application "Store & Find" (the "App"). The party named above is responsible for this data processing.

3. What data we process

3.1 Account and login data

Using the App requires an account. When you register, we process your email address and your (encrypted) password. Authentication is handled by our backend provider Supabase (Supabase Inc.).

3.2 Content you create in the App

The App's core function is managing storage locations and boxes. We process the data you enter, such as box titles, rooms/storage locations, tags/categories, and the IDs of NFC chips you assign to a box. NFC chips are read/written locally on your device; the chip ID read is then linked to the respective box in our database so that scanning it opens the box in the App.

3.3 Photos

If you take photos of a box's contents or select them from your photo library, these images are resized/compressed and uploaded to a private storage area (Supabase Storage). Stored photos are only ever accessed via time-limited, signed links generated exclusively for your account.

3.4 AI-assisted image recognition

On request, you can have a photo analyzed automatically so the App can suggest matching tags. To do this, the photo is sent server-side (via a Supabase Edge Function) to the Google Cloud Vision API for object detection, and the recognized terms are then sent to the Google Cloud Translation API for translation. This analysis only happens when you actively trigger it. Google Cloud may process this data outside the EU (including in the USA); Google is bound by the EU's Standard Contractual Clauses.

3.5 Device permissions

These permissions are only requested with your consent via your operating system's system dialogs and are used exclusively for the purposes stated, within the App.

4. Purposes and legal bases of processing

Processing takes place to provide the App's functions (account management, storage management, photo storage, AI tag suggestions) and thus to fulfill our contract of use with you (Art. 6(1)(b) GDPR). Where individual processing serves the technical provision and security of the App, we rely alternatively on our legitimate interest (Art. 6(1)(f) GDPR).

5. Recipients and processors

We have or will enter into data processing agreements with all processors pursuant to Art. 28 GDPR. Data is not transferred to any other third parties, in particular not for advertising purposes.

6. Storage period

Your data is stored for as long as your account exists. You can delete your account yourself at any time, permanently, directly in the App under "Profile". This irrevocably removes all boxes, photos, settings, and your user account. Without access to the app, you can request deletion as described under Delete account.

7. Your rights

Under the GDPR, you have the following rights:

To exercise these rights, an informal message to marco.albert@plusai.de is sufficient.

8. Changes to this privacy policy

We will update this privacy policy whenever changes to the App or to legal requirements make this necessary. The version published on this page is always the applicable one.