Skip to content

Master of Inventory Privacy Policy

Last updated: 30 October 2026

Master of Inventory is a private record of what you own: what it cost, when you bought it, when the warranty ends and until when you can still return it. It has no account, no third-party analytics, no advertising, and no server of ours that holds your inventory. It keeps an anonymous Midgar ID so that your Pro purchase is recognised on all your devices. This policy explains exactly what the app stores, what leaves your device, and who receives it.

In short

Who we are

Master of Inventory is published by Midgar Oy, a company in Finland. For the small amount of information described under The anonymous Midgar ID, Purchases and More apps below, Midgar Oy is the controller. You can reach us at support@midgarcorp.cc.

What the app stores on your device

Everything you enter or capture: item names, brands, models, serial numbers, stores, prices and currencies, purchase dates, warranty and return deadlines, notes, where an item is kept, categories, photos, receipts and other documents (images and PDFs) together with the text read from them, and your settings such as reminder times and default warranty. It is kept in the app's private storage on your device, protected by iOS data protection, and is not uploaded to us.

iCloud sync

If you are signed in to iCloud, the app syncs your inventory between your own devices using Apple's CloudKit, in the private database of your Apple Account. Only you can read it; we have no access to it and no way to open it. Apple processes it under its own terms and privacy policy and encrypts it in transit and at rest. iCloud also uses Apple's push service to tell your other devices that something changed, which carries no inventory content. The iCloud row in the app's Settings shows the state of sync, and you control it in iOS Settings under your name, then iCloud. If iCloud is off, your inventory stays on the device only.

Receipts and serial numbers

When you scan a receipt, the app reads the price, date and store on your device with Apple's Vision framework, and reads serial numbers from the camera with Apple's Live Text. The images and the recognised text are never sent to us or to anyone else.

Camera, photos and files

The camera is used only to photograph items and to scan receipts, documents and serial numbers. The app reads your photo library only for the photos you choose to attach, and writes to it only when you save a photo. Files you import, such as a backup, are read only when you pick them. Each permission is optional and can be changed in iOS Settings. What you capture is stored inside the app and is not sent to us.

Reminders

Warranty and return reminders are notifications scheduled on your device. No server of ours sends them. You can turn them off in the app or in iOS Settings.

Face ID and passcode lock

You can lock the app with Face ID or your device passcode. iOS performs the check and tells the app only whether it succeeded; the app never receives your face data or your passcode.

Spotlight, Siri and Shortcuts

So that you can find an item from the Home Screen, the app adds each active item's name, brand, model, store, serial number and category to your device's Spotlight index, which stays on your device. Items you archive or delete are removed from it, and while the Face ID lock or "Hide values when switching apps" is on, the app adds nothing to Spotlight. Siri and Shortcuts actions run on your device and use only what the app already holds.

Exports, claim packs and backups

PDF reports, claim packs, CSV files and backups are created on your device when you ask. They leave the app only through the iOS share sheet, to the place you choose, such as Mail, Files or AirDrop. They contain what you select, including prices, serial numbers, photos and receipts, so treat them like the original documents. Once you share one, the recipient's own practices apply.

The anonymous Midgar ID

The first time the app starts, it asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps the ID and the secret in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. There is no name, email address, phone number, location or device name in it. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we receive Apple's attestation and nothing about you. The ID is used to tie your purchases to you and, on the More apps screen, to show which Midgar apps you already use. It is never sent with your items, photos or receipts, and nothing in your inventory is ever sent to the server that issues it.

Purchases

Pro (monthly, yearly or lifetime) is sold through Apple In-App Purchase. Apple handles payment and billing, and we never receive your card details or your Apple Account details. When you buy or restore Pro, the app sends Midgar's purchase ledger at api.midgarcorp.cc the signed transaction record Apple has already issued (which plan, the price, the dates, whether it renewed, lapsed or was refunded, the order identifiers and your App Store country) together with your Midgar ID, and Apple's own server notifications about your subscription reach the same ledger. The ledger keeps these records so that Pro is recognised on all your devices, so that Midgar can count subscribers and keep its financial records, for as long as Apple's financial records require. Whether Pro is unlocked is decided on your device from Apple's StoreKit together with the ledger; when our servers cannot be reached, StoreKit alone decides, so a purchase still completes and Pro still unlocks. If you bought Master of Inventory when it was a paid app, the app checks with Apple, on your device, which version you first downloaded and unlocks Pro for you.

From version 3.1.0, Master of Inventory contains no RevenueCat software, and neither the app nor our servers send anything about your purchases to RevenueCat. Earlier versions of the app send RevenueCat (RevenueCat, Inc., United States) your Apple transaction records, an anonymous identifier and standard technical information such as your IP address, and RevenueCat keeps what it received from them under its own privacy policy at revenuecat.com/privacy.

More apps

Settings has a "More apps" screen that shows our other apps. Only when you open it, the app downloads the list from a catalogue service we run on Cloudflare, and the artwork and current prices from Apple's servers; your App Store country code is sent so that prices are correct for your region. It also reports which app tiles were displayed and which were tapped to api.midgarcorp.cc: the kind of event, which app, the bundle identifier of this app, where in the app the screen was opened, and your App Store country. That report carries no identifier of any kind and not your Midgar ID, and our server stores only a running total per day, event, app and platform. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use and what you own in them, so the screen does not suggest an app you already have. Like any web service, Cloudflare may keep standard request logs, such as your IP address, for a limited time.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Help and diagnostics

The app keeps a short activity log on your device to help find faults. It is never sent automatically. In Settings, under Help and contact, you can copy a diagnostic summary (app and iOS version, device model, iCloud state, the number of items and the latest log lines) or start an email to us with a short header filled in. Read it first: nothing is sent unless you send it. If you have chosen in iOS to share analytics with app developers, Apple may give us anonymous crash and usage reports, which contain nothing we can link to you.

What we don't do

We do not sell your data, show advertising, or use third-party tracking or advertising identifiers. The app does not ask for tracking permission and contains no advertising or third-party analytics software. We do not use your data to train AI models, and nothing in the app sends your content to an AI service.

How long we keep data

Deleting your data

Delete items in the app, or delete the app to remove everything stored on that device. To remove the iCloud copy, open iOS Settings, your name, iCloud, Manage Account Storage, then Master of Inventory, and choose Delete Data. Deleting the app does not cancel a subscription: manage or cancel it in iOS Settings under your Apple Account, then Subscriptions. We hold no account for you. The app does not yet have a button that deletes the Midgar ID: to have your Midgar ID and the purchase records tied to it erased from our server, email support@midgarcorp.cc, tell us the app and the approximate date of your first purchase, and we will help you do it. We delete the server records, but we cannot change Apple's own records, and we cannot refund a purchase: do that through Apple. If you want the purchase records that RevenueCat holds erased, contact us and we will ask RevenueCat to do it.

Your rights

Because we keep almost no information about you, most requests are answered by the controls above. Where privacy law, such as the GDPR, gives you rights to access, correct, erase, restrict or move information about you, or to object to its use, contact us and we will help. We process the Midgar ID and purchase records to provide, account for and support the purchases you make and, for the anonymous counts, in our legitimate interest in measuring our own promotion. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Children

Master of Inventory is not directed at children, and we do not knowingly collect personal information from anyone, including children.

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.