Privacy policy

Last Updated: June 22, 2025

Sparkybit GmbH (“we,” “us,” or “our”) is committed to protecting your personal data. This Privacy Policy outlines our practices for collecting, storing, using, and protecting your information when you use our 1inventory mobile application, our server-side services, and their interactions with your Google Drive (collectively, the “Services”).

As the “controller” in the sense of the General Data Protection Regulation (GDPR), we are responsible for protecting your personal data. Our data protection team will be happy to assist you with any questions you may have about data processing, your rights, or this privacy policy statement. It can be reached at: gdpr@1inventory.com.

1. Information We Collect

We collect information to provide and improve our Services. The types of information we collect are:

Information You Provide to Us:

• Account Information: When you register for our Services using your Google Account, we collect your first name, last name, email address, and the URL of your profile picture. Authentication is handled entirely by Google; we do not process your Google password.

Information We Store:

• User Data: We store your name, email, profile picture URL, and settings for any custom fields you create within the app.
• Google API Tokens: To connect to your Google account, we store access and refresh tokens. These tokens are kept in an encrypted format.
• Inventory Data: The actual data for your inventories is stored directly within Google Sheets on your personal Google Drive. This data passes through our server, which acts as a proxy, but it is not stored or cached on our servers.

Information We Collect Automatically:

• Usage Analytics: We use Firebase Analytics to collect statistics on how users interact with our mobile application. This helps us understand usage patterns and improve the service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: We use your Google API tokens to access the specific Google Sheets created by our application, allowing you to manage your inventory.
• To Personalize Your Experience: We use your account information to identify you within the application.
• For Service Improvement: We analyze usage data through Firebase Analytics to understand what features are used most and to guide future development.
• To Communicate with You: We may use your email address to send you important information about the Services.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• With Service Providers: Our application is hosted on Microsoft Azure. We also use Google’s Firebase service for analytics. These providers have access to data only as necessary to perform their functions.
• For Legal Reasons: We may disclose your information if required by law or in response to a valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

4. Data Security

We implement strong security measures to protect your data.

• The access and refresh tokens we store are encrypted in our database using robust encryption standards like AES 256.
• Access to user data requires compromising multiple security layers, including the database, the decryption keys, and our application’s unique client-id and client-secret.
• The permissions granted to our application are non-sensitive and limited to accessing your profile and email, and managing only the files that our application creates in your Google Drive. We utilize the Google People API, Drive API, and Sheets API for these purposes.

5. Data Retention

We do not have a set data retention period and will store your information as long as your account is active. You can delete your account at any time. Upon receiving a deletion request, we will remove all personal data associated with your account from our servers.

Please note that Google may automatically revoke an API refresh token if it has not been used for six months, which would require you to re-authenticate.

6. Your Rights Under GDPR (UK & EEA Residents)

We comply with the GDPR. If you are a resident of the European Economic Area (EEA) or the UK, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the information we hold about you.
• Right to Rectification: You have the right to correct any inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data. You can perform this action yourself at any time using the “Delete my account” function in your profile, which will remove all of your data from our systems.
• Right to Restrict Processing: You have the right to request that we limit the processing of your data under certain conditions.
• Right to Data Portability: You have the right to receive your data in a structured, machine-readable format.
• Right to Object: You have the right to object to our processing of your data.

To exercise any of these rights, please contact our data protection team at gdpr@1inventory.com.

7. Cross-Border Data Transfers

Our servers are located in Europe and the US. Therefore, your data may be transferred to and stored in countries outside of your country of residence, including outside the EEA. We ensure that such transfers comply with applicable laws and that your data is protected to the standard required within the EEA.

8. Children’s Privacy

Our services are not intended for or directed at children, and we do not knowingly collect any personal information from them.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this policy will indicate when the latest revisions were made. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.

Company:
Sparkybit GmbH
Im Dörener Feld 3
33100 Paderborn
Germany

General Support Email: support@1inventory.com
GDPR-related Inquiries: gdpr@1inventory.com