Privacy policy

Last updated 25 October 2026. This explains what FindMyItem keeps about you, why, who helps us run it, and your choices.

In short. We keep your account and the inventory you put in the app so it works on your phones. We do not run ads, we do not use analytics or tracking tools in the app or on this website, and we never sell your data. You can export it, and delete your account and everything with it, from inside the app.

1. Who we are

The controller of your personal data is Railstons GmbH, Baumgarten 39, 6374 Buochs, Switzerland. Contact: support@findmyitem.app. “FindMyItem”, “we” and “us” mean Railstons GmbH.

2. What we collect

Your account

Email address, used to create your account, to send you sign-in and password-reset codes, and to contact you about your account.
Password, stored only as a one-way hash by our sign-in provider. We cannot read it.
Sign in with Apple, if you use it: Apple gives us a stable identifier and the email address you choose to share, which can be Apple’s private relay address.
Sign-in details for security: when and from which kind of device you signed in (for the signed-in devices list), and the IP address used to sign in, which our sign-in provider records for abuse prevention.

Your inventory

Locations, areas, containers and items and everything you type about them: names, addresses or place names, notes, tags, categories, brand, colour, condition, barcode numbers, quantities and statuses.
Photos you take or choose of your items and containers.
Map positions of your locations, only if you add them (by typing an address, dropping a pin, or using your current position).
History: when items were created, moved or changed.
QR codes: each code contains only a random token. We store a one-way hash of it so the app can recognise your labels; the token contains no name, address or personal information.

What stays on your phone

Your app-lock choice, recent searches, which Home sections you folded away, your language and appearance, and your label-printing preferences are stored on your phone only.

What we do not collect

No advertising identifier, no analytics or crash-tracking tools, no contacts, no browsing or app-usage profile, no precise location in the background, and no biometric data: Face ID and Touch ID are handled by iOS and the app only learns whether you passed.

3. Permissions the app asks for

Camera: to photograph items and to scan QR labels. Scanning does not record or upload anything.
Photos: only if you choose existing pictures for an item or container.
Location (while using the app): only when you ask. When you tap “Use my location” it fills in an address and map position, and we keep a position only if you save the location. When you tap Directions and choose Apple Maps or Google Maps, the app reads where you are at that moment and passes it to that Maps app as the start of your trip, so the route begins where you really are. We do not keep that position.
Face ID or Touch ID: only for the optional app lock and for confirming sensitive actions such as exporting your data.

4. Why we use it, and our legal basis

To provide the app you asked for: keep your inventory, sync it between your devices, and let you sign in (performance of a contract).
To keep it secure and prevent abuse: sign-in checks, two-factor authentication, session management (legitimate interests).
To send you the sign-in and reset codes and essential account notices. We do not send marketing email.
To answer you when you write to us (legitimate interests).
For location and camera features, with your permission, which you can withdraw in iOS Settings at any time.

5. Who helps us run it

We do not sell your data and we do not share it for advertising. These providers process data on our behalf:

Provider	What for	Where
Supabase	Account sign-in, the database holding your inventory, and private storage for your photos. Access is limited to your own account by database rules.	European Union (Frankfurt, Germany)
Resend	Sending the sign-in and password-reset emails (your email address and the code).	EU region (Ireland)
Apple	Sign in with Apple, Apple Maps, and address look-up: when you type an address to find it on the map, the text is sent to Apple’s geocoding service. If you choose Apple Maps for Directions, it receives the destination and, if you have allowed location, your current position as the start. Also App Store and TestFlight distribution.	As described in Apple’s privacy policy
Google Maps (only if you choose it)	If you tap Directions and choose Google Maps, the app opens Google Maps with the destination and, if you have allowed location, your current position as the start. Nothing is sent unless you choose this.	As described in Google’s privacy policy

We may disclose data where the law requires it.

6. Transfers outside Switzerland and the EU

Your inventory and photos are stored in the European Union. Some providers above (for example Apple and Google) may process limited data elsewhere, including the United States. Where that happens we rely on recognised safeguards such as adequacy decisions or standard contractual clauses. Switzerland and the EU recognise each other’s data protection as adequate.

7. How we protect it

All traffic between the app and our servers is encrypted in transit.
Your photos are in a private store; the database and storage enforce that only your signed-in account can read your rows and files.
Optional two-factor authentication with recovery codes, enforced on the server, and an optional app lock.
A list of your signed-in devices, with the ability to sign others out.

No system is perfectly secure, but we take care to keep what you store here private.

8. How long we keep it

We keep your account and inventory until you delete them. Delete account in the app permanently removes your account, your inventory and your photos from our servers and clears the copy on that phone. Routine backups kept by our hosting provider are overwritten on its normal schedule. Emails you send us are kept as long as needed to deal with them and for our legal obligations.

9. Your rights

Under the Swiss Federal Act on Data Protection and, where it applies to you, the EU and UK GDPR, you can ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. Most of this you can do yourself in the app: Export inventory (spreadsheet, PDF, photos), Backup and restore, editing anything you entered, and Delete account. For anything else write to support@findmyitem.app. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or to the data protection authority where you live.

10. Children

FindMyItem is not directed at children under 16 and we do not knowingly collect their data. If you think a child has created an account, write to us and we will delete it.

11. This website

This website sets no cookies, runs no analytics and loads nothing from other companies. Our hosting provider keeps standard server logs of requests (including IP addresses) for security and reliability.

12. Changes

If we change this policy in a way that matters we will update the date at the top and, for significant changes, tell you in the app. The latest version is always at findmyitem.app/privacy.

13. Contact

Railstons GmbH
Baumgarten 39
6374 Buochs, Switzerland
support@findmyitem.app