1inventory
Get the app

Privacy policy

Last Updated: September 21, 2026

Sparkybit GmbH (“we,” “us,” or “our”) is committed to protecting your personal data. This Privacy Policy outlines our practices for collecting, storing, using, and protecting your information when you use our 1inventory mobile application, our server-side services, and their interactions with your Google Drive (collectively, the “Services”).

As the “controller” in the sense of the General Data Protection Regulation (GDPR), we are responsible for protecting your personal data. Our data protection team will be happy to assist you with any questions you may have about data processing, your rights, or this privacy policy statement. It can be reached at: gdpr@1inventory.io.

1. Information We Collect

We collect information to provide and improve our Services. The types of information we collect are:

Information You Provide to Us:

  • Account Information: When you register for our Services using your Google Account, we collect your first name, last name, email address, and the URL of your profile picture. Authentication is handled entirely by Google; we do not process your Google password.

Information We Store:

  • User Data: We store your name, email, profile picture URL, and settings for any custom fields you create within the app.
  • Google API Tokens: To connect to your Google account, we store access and refresh tokens. These tokens are kept in an encrypted format.
  • Inventory Data: The actual data for your inventories is stored directly within Google Sheets on your personal Google Drive. This data passes through our server, which acts as a proxy, but it is not stored or cached on our servers.

Information We Collect Automatically:

  • Usage Analytics: We use Firebase Analytics to collect statistics on how users interact with our mobile application. This helps us understand usage patterns and improve the service.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Service: We use your Google API tokens to access the specific Google Sheets created by our application, allowing you to manage your inventory.
  • To Personalize Your Experience: We use your account information to identify you within the application.
  • For Service Improvement: We analyze usage data through Firebase Analytics to understand what features are used most and to guide future development.
  • To Communicate with You: We may use your email address to send you important information about the Services.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • With Service Providers: Our application is hosted on Microsoft Azure. We also use Google’s Firebase service for analytics. These providers have access to data only as necessary to perform their functions.
  • For Legal Reasons: We may disclose your information if required by law or in response to a valid legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

4. Data Security

We implement strong security measures to protect your data.

  • The access and refresh tokens we store are encrypted in our database using robust encryption standards like AES 256.
  • Access to user data requires compromising multiple security layers, including the database, the decryption keys, and our application’s unique client-id and client-secret.
  • The permissions granted to our application are non-sensitive and limited to accessing your profile and email, and managing only the files that our application creates in your Google Drive. We utilize the Google People API, Drive API, and Sheets API for these purposes.

5. Data Retention

We do not have a set data retention period and will store your information as long as your account is active. You can delete your account at any time. Upon receiving a deletion request, we will remove all personal data associated with your account from our servers.

Please note that Google may automatically revoke an API refresh token if it has not been used for six months, which would require you to re-authenticate.

6. Your Rights Under GDPR (UK & EEA Residents)

We comply with the GDPR. If you are a resident of the European Economic Area (EEA) or the UK, you have the following rights regarding your personal data:

  • Right to Access: You have the right to request a copy of the information we hold about you.
  • Right to Rectification: You have the right to correct any inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data. You can perform this action yourself at any time using the “Delete my account” function in your profile, which will remove all of your data from our systems.
  • Right to Restrict Processing: You have the right to request that we limit the processing of your data under certain conditions.
  • Right to Data Portability: You have the right to receive your data in a structured, machine-readable format.
  • Right to Object: You have the right to object to our processing of your data.

To exercise any of these rights, please contact our data protection team at gdpr@1inventory.io.

7. Cross-Border Data Transfers

Our servers are located in Europe and the US. Therefore, your data may be transferred to and stored in countries outside of your country of residence, including outside the EEA. We ensure that such transfers comply with applicable laws and that your data is protected to the standard required within the EEA.

8. Children’s Privacy

Our services are not intended for or directed at children, and we do not knowingly collect any personal information from them.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this policy will indicate when the latest revisions were made. We encourage you to review this policy periodically.

10. This Website (1inventory.io)

The sections above describe the 1inventory mobile application. This section covers the website itself, which is operated separately and collects considerably less.

Analytics without cookies:

  • We use Google Analytics 4 to understand how the site is used — which pages are read, which links are followed, and how far down a page visitors get. It runs in a cookieless mode: Google’s consent settings are set to deny all storage before the analytics code loads, so no analytics cookies are written and nothing is stored on your device. That is why this site does not ask you to accept cookies.
  • Because nothing identifying is stored on your device, we cannot recognise you from one visit to the next. Visitor and session figures are therefore estimates rather than counts of people.
  • What is sent: the page address and its language, your device and browser type, an approximate location derived from your IP address, and the interactions described above — following a link to the App Store or Google Play, switching language, jumping to a section, and how far you scrolled. The IP address is used to derive the approximate location and is not stored by Google Analytics.
  • What is not sent: your name, your email address, or any inventory data. The website has no accounts, no forms and no sign-in.

Storage that is strictly necessary:

  • If you pick a language from the switcher, that choice is saved in your browser’s local storage so later pages open in the language you chose, and a separate temporary entry stops the site guessing your language twice in one visit. Neither is used for tracking, neither leaves your browser, and clearing your browsing data removes both.

Legal basis and processor. Because nothing is stored on or read from your device for analytics purposes, this processing does not require your consent under §25 TTDSG. It rests instead on our legitimate interest in understanding and improving the site, under Art. 6(1)(f) GDPR. Google acts as our processor, and analytics data is retained for 14 months.

Legal pages shown inside the app. When the 1inventory app displays this policy, the terms or the FAQ within the application itself, analytics are not loaded at all.

You may object to this processing at any time using the contact details below, and most browsers offer settings or extensions that block analytics outright.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.

Company:
Sparkybit GmbH
Im Dörener Feld 3
33100 Paderborn
Germany

General Support Email: support@1inventory.io
GDPR-related Inquiries: gdpr@1inventory.io