Privacy Policy

1. Information We Collect

Account information

Name, email address, and password for email registration

Name and email provided by Google or Apple when signing in with those services

Inventory content

Photos of objects you capture or upload

Names, descriptions, notes, dimensions, barcodes, and operational categories of your items

Names and descriptions of your spaces and inventories

Voice recordings you initiate for dictation, processed temporarily to transcribe and extract inventory data

Usage information

Activity logs within the app, such as inventory creation and scans

Technical device and session information such as model, operating system, notification token, and error diagnostics

IP address and connectivity data through our infrastructure and monitoring providers

Location data

Approximate or precise location when you enable it to record a space address or use nearby features inside Agenda

We do not collect background location.

Website forms: If you subscribe, we store your email and consent record to receive news and launch announcements. If you request information, we store your name, company (optional), email, message and acceptance to respond to your request. Sending an inquiry does not subscribe you to news. Forms are processed through Vercel and their data is stored in Supabase, without public access to the records. You can request to unsubscribe or delete this data at [email protected].

Arbitration choices: We store your declared residence (United States or another country), language, choice to accept, decline or opt out, record date and method, and the version and hash of the document and corresponding notice. These records are linked to your account to document your specific choice; signing in does not constitute acceptance of arbitration.

Acceptance record: we retain the version and language of accepted documents and notices, the server timestamp and recorded opt-outs. The new checkbox does not ask for country or age, or use GPS, IP address or language to determine residence or age of majority. Declarations made in earlier versions remain in their historical records.

To access Captory, every account must expressly accept the current terms using an initially unchecked checkbox, including when signing in with Google, Apple, password or magic link. The record includes section 16 subject to its conditions and exceptions. Reading the documents does not check the box. Reading the privacy policy is not blanket consent for advertising or optional processing.

2. How We Use Your Information

Provide and maintain the inventory service

Process images with AI to identify and describe objects

Transcribe and process voice notes to add items to the inventory

Authenticate your identity and keep your session secure

Send notifications you authorize, such as reminders and alerts

Process subscription payments via RevenueCat, Apple, or Google

Monitor technical errors and improve application stability

Resolve addresses, maps, and nearby place searches when you request them

Comply with applicable legal obligations

3. Permissions We Request

Camera: to photograph inventory items and scan barcodes

Microphone: to record your voice when using inventory dictation

Photos / Gallery: to select existing images from your device

Location: to record a space address or use nearby features when you request it

Notifications: to send alerts and reminders you configure

Vibration: for haptic confirmation when scanning

4. Third-Party Services

Supabase — database and authentication. Privacy Policy

OpenAI — AI image, text, and audio processing. Content sent to the API is not used for training by default unless the provider account explicitly opts in. Data Policy

Google Sign-In — authentication with Google accounts. Google Privacy Policy

Apple Sign-In — authentication on iOS devices. Apple Privacy Policy

RevenueCat — subscription and payment management. Privacy Policy

Google Maps Platform — maps, routes, and nearby place search in specific Agenda features. Google Privacy Policy

Expo Notifications — push notification registration and delivery. Privacy Policy

Sentry — error and stability monitoring. Privacy Policy

International data transfers

To operate Captory, your data is stored and processed on servers of technology infrastructure providers located outside your country of residence, mainly in the United States. We require these providers to maintain contractual, technical, and organizational protection measures equivalent to those described in this Policy and to those required by the data protection law applicable to you.

5. Data Sharing

We do not sell or rent your personal information for marketing purposes.

Service providers strictly to operate the app

When required by law, court order, or competent authority

To protect the safety of users or others in case of threat

To report illegal content to the competent authorities where required by law; in particular, any child sexual abuse or exploitation material (CSAM) is reported to NCMEC and/or authorities, preserving records as required by law

In the event of a merger or acquisition, with prior notice to users

6. Data Retention

We retain your account and inventory information while your account is active or as long as it is needed to provide the service. If you delete content inside the app or request deletion of your account, we will remove or anonymize the relevant information unless legal, tax, contractual, fraud-prevention, or security obligations require longer retention of certain records.

Technical evidence, error logs, operational metadata, and backups may remain for a limited additional period before secure deletion or overwrite. Billing and transaction records may be retained for the period required by applicable law.

At this time, you can request account deletion by emailing [email protected]. You can also do it from Settings > Delete account inside the app. We typically acknowledge requests within 10 business days and aim to complete verified deletion requests within 30 days, subject to identity verification and applicable legal exceptions.

7. Your Rights

You may request to access your personal data, rectify it (correct or complete it), delete it, object to certain processing, and request a portable copy of your data by contacting us at [email protected]. To protect your account, we may request reasonable identity verification before carrying out sensitive requests, and we will respond within the time frames required by applicable law.

If you are in Chile (Law 19.628 / Law 21.719)

Your data is processed under Law No. 19.628 and, from December 1, 2026, under Law No. 21.719. You have the rights of access, rectification, deletion (cancellation), objection, blocking, and portability. If you believe your rights have not been respected, you may file a claim with the Personal Data Protection Agency (Agencia de Protección de Datos Personales).

If you are in Mexico (LFPDPPP)

You have the right of Access, Rectification, Cancellation, and Opposition (ARCO rights) over your personal data. We will respond within 20 business days.

If you are in California, United States (CCPA)

You have the right to know what personal data we collect, to request its deletion, and not to be discriminated against for exercising these rights. We do not sell personal data.

If you are in Brazil (LGPD)

Processing is governed by the General Data Protection Law. You may exercise confirmation of processing, access, correction, portability, and deletion and, where applicable, file a claim with the National Data Protection Authority (ANPD).

8. Security

We use technical and organizational measures to protect your information, including TLS in transit, secure session handling, and per-user data access controls. No system is 100% secure, so we recommend using a strong password and not sharing your credentials.

9. Children

Captory is not directed to children under 13 years of age. If you believe a child provided us with data, contact us so we can remove it.

10. Changes to This Policy

We may update this policy periodically. Significant changes may be communicated within the app or by email. Continued use of the app after changes implies acceptance of the updated policy.

11. Contact

Service operator / data controller: Juan Pablo Meza (Captory)

Email: [email protected]

Website: captoryapp.com