Shelfbell ("the app") is made by KF Production. This policy explains what the app does with your information. In short: there is no account, your items stay on your device or in your own Google Drive, and we run no servers that receive them. We do not collect analytics or crash reports of our own.
What stays on your device
Items, dates, notes, categories, reminder settings and photos you add are stored in the app's own storage on your device. We cannot see them. Photos are re-saved without their metadata, so location and camera details in a photo are removed. The camera is used to take photos and to read barcodes and dates on labels; this reading happens on the device.
Barcode and label reading
On Android the app reads barcodes and printed dates with Google ML Kit, on the device. The camera images, the text read from them and the barcode numbers stay on the device. ML Kit sends Google usage and diagnostic information so Google can maintain it: the device model and operating system version, the app's name and version, identifiers for this installation that do not identify you or your device, performance (such as how long reading took) and error codes. Google says it does not pass this information to third parties. On iPhone and iPad the app uses Apple's Vision framework on the device, and nothing is sent.
Advertising
The app shows ads from Google AdMob. The AdMob SDK collects your device's IP address (which may be used to estimate your general location), your interactions with the app and its ads (such as app launches, taps and video views), diagnostic information (such as launch time and responsiveness), and your device's advertising ID and app set ID. Google uses this to serve and measure ads, for analytics and to prevent fraud. See how Google uses this information: https://policies.google.com/technologies/partner-sites
On iPhone and iPad the app does not ask to track you, so ads are not personalised. On Android you can reset or delete your advertising ID in the system settings. In the European Economic Area, the UK and Switzerland, Google's consent form asks for your choices before any ad is loaded, and you can change them at any time under Settings > Ad privacy choices.
Optional product lookup
If you turn on online product lookup, the barcode you scan is sent to Open Food Facts (https://world.openfoodfacts.org), a free public product database, to find the product's name and brand. The request contains only the barcode number and the app's name and version; like any web request it also reaches Open Food Facts from your IP address. Lookup is off until you allow it, and you can turn it off in Settings. See the Open Food Facts privacy policy: https://world.openfoodfacts.org/privacy
Backup files
When you export a backup, the app creates a file with your items and photos and hands it to the place you choose (for example Files, Google Drive or email). Where it goes is your choice; the app does not upload it anywhere by itself. You can protect the file with a password.
Google Drive (optional)
If you connect Google Drive in Settings, the app keeps its data in a hidden app folder in your own Google Drive account: your items, notes and photos when you use sync (you can keep photos off Drive with Sync photos: Never), backup files when you back up by hand, and the app's settings (language, theme, reminder defaults) when you turn on Sync settings. The name you enter under Your name is saved with the items you add or change, so others using the same Google account can see who did it. The app also stores random identifiers there so your devices can tell each other apart. If you move your items to another Google account, the new account's email address is left in a note in the old account's folder, so your other devices can offer to switch.
The app asks Google only for access to that folder (the drive.appdata permission); it cannot see your other Drive files. Sign-in is handled by Google. The data goes straight from your device to your Google account over an encrypted connection. We run no server and cannot read it. Google's privacy policy applies to your Drive: https://policies.google.com/privacy
You can disconnect at any time in Settings > Google Drive, and "Delete cloud data" there removes everything the app stored in your Drive. Google Drive > Settings > Manage apps also shows the folder's size and can delete it.
The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy
Android's own device backup may copy the app's item list (not the photos) to your Google account, if you have device backup turned on. This is handled by Android, not by us.
Children
The app is not directed at children under 13.
Deleting your data
Delete items in the app, or clear the app's storage or uninstall it to remove everything on the device. If you connected Google Drive, use "Delete cloud data" in Settings > Google Drive to remove the copy in your Drive. We hold no copy to delete.
Changes
If this policy changes, the new version will be posted at this address with a new date.