1. Who we are
[PLACEHOLDER: Company name] ("we", "us", "our") operates Ginkgo, a home inventory application. We are the data controller for the personal data we collect from you.
You can contact us about data matters at hello@ginkgo.app [PLACEHOLDER: or by post at our registered address if applicable].
2. What we collect
Information you provide
- Account information: name and email address when you register
- Inventory data: item names, descriptions, notes, photos, and location information you add to the app
- Communications: any messages you send us
Information collected automatically
- Usage data: how you interact with the app (features used, screens visited), device type, operating system version, app version
- Crash reports: technical information sent automatically when the app crashes
Information from third parties
If you sign in using a third-party service (such as Apple Sign-in), we receive the information that service makes available — typically your name and email address.
3. How we use your data
| Purpose | Data used |
|---|---|
| Providing the Service — storing and retrieving your inventory | Inventory data, account information |
| AI recognition — identifying items from photos | Photos you add (processed, not retained for training by default) |
| Natural language search — matching queries to your inventory | Your search queries and inventory content |
| Account management — authentication, password reset | Email address |
| Customer support — responding to your messages | Communication content, account details |
| App improvement — fixing bugs, understanding usage patterns | Anonymised usage data, crash reports |
| Marketing — sending product updates (with your consent) | Email address |
4. Legal basis for processing (UK GDPR)
We process your data on the following legal bases:
- Contract: Processing necessary to provide the Service you've signed up for (e.g. storing your inventory, authentication)
- Legitimate interests: Processing for app improvement, security, and fraud prevention, where these interests are not overridden by your rights
- Consent: Marketing communications and optional AI improvement programme — you can withdraw consent at any time
- Legal obligation: Where we are required to process data by law
5. Sharing your data
We do not sell your personal data. We share data only in the following circumstances:
- Service providers: We use third-party companies to help us provide the Service, including [PLACEHOLDER: hosting provider], [PLACEHOLDER: database provider], and [PLACEHOLDER: AI/image processing provider]. These providers process data only under our instructions and in accordance with our data processing agreements.
- Household members: Your inventory data (items, locations, notes, photos) is shared with other members of your Ginkgo household.
- Legal requirements: We may disclose data where required to do so by law, court order, or at the request of a law enforcement or regulatory authority.
- Business transfer: If we are acquired or merge with another company, your data may be transferred. We will notify you before this happens and give you the opportunity to delete your account.
6. International data transfers
Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or adequacy decisions.
7. How long we keep your data
We keep your account and inventory data for as long as your account is active. If you close your account, we delete your personal data within [PLACEHOLDER: deletion timeframe, e.g. 30 days], except where:
- We are required to retain data for legal or regulatory reasons
- Data has been anonymised (in which case it is no longer personal data)
Backup copies are deleted within [PLACEHOLDER: backup retention period] of your primary data being deleted.
8. Your rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate or incomplete data
- Erasure: Ask us to delete your data (see Data deletion guide)
- Restriction: Ask us to limit how we use your data in certain circumstances
- Portability: Receive your data in a machine-readable format (use the export function in Settings)
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where we rely on consent, withdraw it at any time (this doesn't affect processing before withdrawal)
To exercise any of these rights, contact us at hello@ginkgo.app. We will respond within one month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We use industry-standard technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
No method of transmission over the internet is completely secure. While we work hard to protect your data, we cannot guarantee absolute security.
If you believe your account has been compromised, contact us immediately at hello@ginkgo.app.
10. Children
Ginkgo is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, please contact us and we will take steps to delete it.
11. Cookies
Our website uses cookies. For full details, see our Cookie Policy.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice in the application. The "last updated" date at the top of this page shows when the policy was last changed.
13. Contact us
For any questions about this Privacy Policy or how we handle your data:
- Email: hello@ginkgo.app
- Post: [PLACEHOLDER: Company name and registered address if applicable]