🇪🇺 GDPR Compliance

    Your Data Rights Under EU Regulations

    Last Updated: December 14, 2025

    For European Union Users

    This page explains how AItemizeIT processes personal data and your data protection rights under the General Data Protection Regulation (GDPR).

    1. GDPR Overview

    The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives EU residents control over their personal data. AItemizeIT is committed to full GDPR compliance.

    1.1 Our Commitment

    • We process your data lawfully, fairly, and transparently
    • We collect only data necessary for our service
    • We keep your data accurate and up-to-date
    • We store data only as long as necessary
    • We protect your data with appropriate security measures
    • We respect all your GDPR rights

    1.2 Location data (GPS) (where enabled)

    If you enable location permissions on your device, AItemizeIT may process approximate or precise location (GPS) data to validate inventory item locations and help provide evidence to insurers that items were recorded where stated.

    You can control location access through your device settings. Disabling location permissions may limit or disable location-based validation features.

    2. What personal data we process

    AItemizeIT is an inventory app. The personal data processed depends on what you choose to store and the device permissions you enable.

    2.1 Information you provide

    • Account information: email address; name (optional)
    • Inventory content: properties (and where you provide them, addresses), rooms/locations, items and vehicles (names, descriptions, values, purchase information)
    • Photos: photos you take or select (items, rooms, properties, vehicles)
    • Household sharing (if you use it): household members invited; sharing permissions/access settings

    2.2 Information processed automatically

    • Device and app information: device type/model, operating system version, app version
    • Usage and diagnostic information: error logs and crash information (to help us fix bugs and improve reliability)
    • Location (GPS) (where enabled): approximate or precise location data (depending on device settings/permissions) to validate inventory item locations

    3. Why we process personal data (purposes and lawful bases)

    We process personal data for the purposes below. Depending on the context, the lawful basis may include performance of a contract (providing the service), legitimate interests (security and improvement), compliance with legal obligations, or consent (for example, where you grant optional permissions).

    • To create and manage your account and authenticate you.
    • To provide core app functionality (properties, rooms, items, vehicles, photos).
    • To validate inventory item locations using GPS data (where you enable it) and help provide evidence to insurers that items were recorded where stated.
    • To sync your inventory between devices (where syncing is enabled).
    • To support household sharing features (where you invite members).
    • To provide customer support and respond to requests.
    • To maintain app security, prevent abuse, and troubleshoot issues.

    4. How we store your information

    AItemizeIT uses a combination of on-device storage and cloud services (where enabled) to store your inventory data.

    4.1 On-device storage

    Local database (SQLite): the App stores structured inventory data on your device in a local database.

    Local file/shared storage for large records: certain data (especially photos) can exceed safe database row limits on mobile devices.

    To keep the app stable and ensure you can still access your inventory, the App can use a fallback storage mode where affected data is stored/loaded using app-managed shared storage instead of repeatedly attempting a failing database operation.

    4.2 Cloud storage (where enabled)

    Depending on your configuration, AItemizeIT may store and sync data using:

    • Supabase (database and authentication services)
    • Supabase Storage (photos/files)

    Data transmitted between your device and cloud services is protected using HTTPS (TLS).

    5. When and with whom we share data

    We do not sell personal data.

    We may share data:

    • With household members (only if you invite them and enable sharing).
    • With processors/service providers that help us run the App (for example hosting, authentication, storage, error reporting), under appropriate contractual controls.
    • For legal and compliance reasons if required by applicable law, regulation, or valid legal process.

    6. Cross-border transfers

    If cloud services store or process data outside the European Economic Area (EEA), your personal data may be transferred cross-border.

    Where applicable, we use safeguards recognized under GDPR for international transfers (such as contractual protections) and reputable service providers.

    7. Security safeguards

    We use reasonable technical and organisational measures designed to protect personal data against loss, unauthorised access, or unlawful processing, including (where applicable):

    • Encrypted transport (TLS/HTTPS) for data in transit.
    • Secure authentication and access controls.
    • Limiting access to systems and data on a need-to-know basis.
    • Ongoing maintenance and updates to address security vulnerabilities.

    No method of storage or transmission is perfectly secure; however, we aim to apply safeguards appropriate to the nature of the data.

    8. Retention

    • On your device: data remains on your device until you delete it in the App, uninstall the App, or clear app data.
    • In the cloud (if enabled): we retain your cloud data while your account is active. If you delete your account, we aim to delete your cloud data within [INSERT PERIOD, e.g. 30 days], subject to backup retention and legal requirements. Backups may retain deleted data for a limited period (e.g. up to [INSERT PERIOD, e.g. 90 days]).

    9. Your GDPR rights

    As an EU resident, you have the following rights regarding your personal data:

    1️⃣ Right to Access

    You have the right to access all personal data we hold about you.

    How to Exercise:

    • View all data within the app (Properties, Items, Photos)
    • Request a complete data export by emailing [email protected]
    • We will provide your data within 30 days

    3️⃣ Right to Erasure ("Right to be Forgotten")

    You have the right to request deletion of your personal data.

    How to Exercise:

    • Use the in-app account deletion option (where available)
    • All your data will be permanently deleted within 30 days
    • Or email us at [email protected] with subject "GDPR Deletion Request"

    4️⃣ Right to Data Portability

    You have the right to receive your data in a structured, machine-readable format.

    How to Exercise:

    • Export your data as Excel/CSV from the app
    • Export as PDF for documentation
    • Request JSON format by emailing us
    • We will provide data within 30 days

    5️⃣ Additional rights

    Depending on the circumstances, you may also have the right to rectification, restriction of processing, objection to processing (including objection to processing based on legitimate interests), and withdrawal of consent where processing is based on consent.

    How to Exercise:

    • Correct many details directly in the app by editing your inventory.
    • For assisted requests, email [email protected] with subject "GDPR Request".

    10. How to exercise your rights

    Quick Actions:

    • Access Your Data: View in app or request export
    • Correct Data: Edit directly in the app
    • Delete Data: Use the in-app account deletion option or email us
    • Export Data: Use export feature in app
    • Other Requests: Email [email protected]

    11. Contact information

    Data Controller

    LieBieS Group

    Email: [email protected]

    Address: 4 Seder Street, Randpark Ridge, South Africa

    Website: www.aitemizeit.com

    For GDPR Requests

    Email: [email protected]

    Subject Line: "GDPR Request - [Your Request Type]"

    Response Time: Within 30 days

    Supervisory Authority

    If you're not satisfied with our response, you can contact your local Data Protection Authority:

    Find Your DPA →

    Your Privacy Matters

    We are committed to protecting your data and respecting your rights under GDPR. If you have any questions or concerns, please don't hesitate to contact us.

    Exercise Your Rights

    Related Legal Information