TrackInvent

1. Data collected

TrackInvent does not collect any personal data. The app contains no analytics, advertising, or tracking SDK, and does not measure your usage.

Data stored locally

• Your items: quantities, expiry dates, prices, descriptions, locations and categories — stored on your device in a Core Data database. Added to these: a product's Nutri-Score and Eco-Score when Open Food Facts provides them (section 3), and the history of your actions — used, thrown away, added, with the quantity, the date and the value at the time — kept for thirteen months to tell you what ends up in the bin.
• An item's picture, if you attach one: chosen from Photos or Files, or taken on the spot with the camera. The app only accesses the picture you designate — never your photo library as a whole —, a photo taken inside the app is not added to the photo library, and only a cropped copy reduced to 512 pixels a side is kept, with the item.
• Your preferences: display and reminder settings — stored locally.

This data is never transmitted to HTKapp, in any form. All of it follows the same path: the device, your private iCloud if you enable it, and your backups.

2. iCloud sync

If your device is signed in to an iCloud account, your data is replicated to the private database of the CloudKit container iCloud.HUBTEK.TrackInvent, hosted by Apple. That database belongs to your account: HTKapp can neither read it, nor modify it, nor know who uses it.

This processing is then governed by Apple's privacy policy. You can delete this data at any time from iOS Settings (iCloud → Manage Account Storage).

The assistant's phrases (section 9) — the texts you write in Options › AI Assistant — follow the same path, through your account's iCloud key-value store, so they turn up on your other devices. Same rule: your account, your iCloud, HTKapp has no access to it.

Sharing a session

You can share a session — a whole stock: its locations, categories, products, their batches and photos — with other people, through Apple's iCloud sharing (TrackInvent Pro to invite; taking part is free). Nothing is shared without an action on your part: you choose the session, you send the invitation link, and you can remove a participant or stop sharing at any time from the system's sharing options.

What you share is copied into the shared database of the same CloudKit container, which participants read and edit with their own iCloud account: every participant sees everything the session contains, and what they add or change is seen by all. Your other sessions, settings and backups are never shared. Participants are identified by Apple; the app shows the name or address their iCloud account passes on, and HTKapp receives none of it.

A session shared with you remains the property of the person who created it: you can leave it at any time (Options › Sessions › Sharing › Leave the Share), and it then disappears from your device; its owner can also remove you, with the same effect. The app's backups (section 10) only contain your own sessions.

3. Camera, barcodes and printed dates

Scanning a barcode uses the camera. No image is stored or transmitted: the analysis happens on the device, and only the code's digits are extracted from it. The same goes for reading the expiry date printed on a package: the text is recognised on the device, by iOS's text-recognition features, only the date you confirm is kept, and the image — taken on the spot or chosen from your photo library — is neither stored nor transmitted. The camera also serves, if you ask for it, to take an item's picture (section 1): only the photo you confirm is kept, cropped and reduced, and it never leaves the device other than through your private iCloud and your backups.

The number read is then sent to Open Food Facts, an open collaborative database, to retrieve the product's name, category, Nutri-Score and Eco-Score when the record provides them, and, when it has one, the packaging photo. The request contains nothing but the barcode, and downloading the photo, from images.openfoodfacts.org, adds nothing to it: no device identifier, no user identifier, no location. The photo, reduced to a square, becomes the item's image, in your stock and nowhere else (section 1); you can remove or replace it at any time. These photos are published by Open Food Facts under the CC BY-SA licence. Open Food Facts is an independent third party, governed by its own privacy policy.

The code read is stored with the item: it is what lets a later scan find the item again and adjust its quantities. It follows the same path as the rest of your data and appears in backups and CSV exports. A scan from the Stock tab makes no network request as long as the product is already known.

The shelf photo (Pro option) follows the same rule: the photo of a shelf — taken on the spot or chosen from your photo library — is read on the device, by iOS's text recognition; the text that was read is grouped by packaging and, when Apple Intelligence is available, tidied up by the language model running on the device (section 9) — names, quantities, sizes, and one of your categories. Only the products you confirm are created in your stock. The photo is neither kept nor transmitted. If you have chosen Private Cloud Compute (section 9), it is the text read on the packaging, and that alone, that is sent to Apple's servers — never the image.

You can enter every item by hand without ever using this feature.

4. Device location

Optional, and only if you place at least one location on the map.

When you add an item, the app compares your position with that of your locations to suggest the nearest one. That comparison happens on the device, and the position is neither stored, transmitted, nor retained: it exists for the duration of the calculation and vanishes with the screen. The reading is one-off: nothing is tracked continuously, and the app never asks for background access.

Declining changes nothing: the suggested location is then the first in your list. You can change your mind at any time in the system settings.

Placing a location on the map relies on Apple's mapping services, which are governed by its privacy policy. The coordinates you confirm are stored with the location, in your database — so on the device and, if you use it, in your own iCloud account.

5. Notifications

Expiry reminders are local notifications, scheduled by the device itself. No notification server is used and no token is sent to us.

6. Reminders app

At your request — and only then —, the app can add to your reminders list the products that have fallen below their restock threshold: one reminder per product, with its name, the missing quantity and the stock's name, in the default list of Apple's Reminders app. iOS asks for your permission at that moment; it is full access to Reminders, the only level iOS offers for that app, but TrackInvent reads nothing in your reminders and changes none of the others. What it writes there then follows the rules of the Reminders app and of your iCloud. You can withdraw the permission at any time in Settings › Privacy › Reminders.

7. Widget

The Home Screen and Lock Screen widget shows the next batches to expire and the number of products to buy again. It reads a summary the app leaves on the device, in a space shared between the two (app group); it does not open the database and does not access iCloud. That summary — names, quantities, locations and dates of a few batches — stays on the device and goes away with the app.

8. Siri, Shortcuts and Spotlight

The app exposes three actions to the system — "What expires soon?", "Use a product", "Add to stock" — and indexes your products' names (with their quantity, location, category and session) in Spotlight, the iPhone's search, so that a product can be found from the Home Screen. This index is kept by iOS on the device, and goes away with the app.

When you talk to Siri, your request is processed by Apple under its own privacy policy, as for any app; TrackInvent only receives the interpreted request (the action, the product, the quantity) and sends nothing back. Your products' names may be passed to Siri so it can recognise them by voice. HTKapp has access to none of this.

9. Assistant (Apple Intelligence)

From the Alerts tab, you can send a sentence of your choice, followed by the list of selected items — name, quantity, location, expiry date — to the assistant; the shelf photo (section 3) hands it the text read on the packaging. That assistant is the Apple Intelligence language model, running on the device: neither the request nor the answer leaves it, and no server — neither HTKapp's nor Apple's — receives a copy. HTKapp sees nothing of these exchanges.

Private Cloud Compute, only if you choose it. In Options › AI Assistant, you can prefer Apple's server-side model, Private Cloud Compute (iOS 27 or later, when the installed version of the app provides it). The request — the sentence and the list of selected items — is then sent to Apple's servers, end-to-end encrypted, processed without being retained and without Apple or HTKapp being able to access it (see Apple's documentation on Private Cloud Compute). Nothing else leaves: neither your stock as a whole, nor your identity. By default, the model stays on the device; if the server does not respond, the device takes over, never the other way round.

If Apple Intelligence is not available, the app offers to share or copy the request; the destination is then the one you pick, and what it does with it is governed by its own policy.

10. Backups and export

Backups and CSV exports are files written to the app's Documents folder, on your device. They are not sent anywhere. If you choose to share them, the destination is the one you pick. Backups contain the items' pictures; the CSV export does not.

11. Purchases

The Pro option is a monthly subscription, renewed automatically until cancelled in your Apple account settings. The transaction is handled by Apple: HTKapp receives neither your payment method, nor your name, nor your address — only aggregated, anonymous sales reports. The app itself reads only one thing from Apple: whether the subscription is active or not, to unlock or lock the Pro features; that information stays on the device and is sent nowhere. When the subscription ends, the free version's limits come back — on creation only: nothing you have entered is deleted or locked. The terms of sale are set out in our terms and conditions.

12. Data sharing

We do not collect, sell, or share any data resulting from your use of TrackInvent. The only exchanges with an outside service are those described above: the barcode lookup and the photo that comes with it, which carry nothing but a product number, and the Apple services you enable yourself — iCloud, and session sharing through each person's iCloud account, the map to place a location, Siri and Spotlight, Private Cloud Compute for the assistant, the Reminders app for the shopping list.

13. Your rights (GDPR)

The application sends us no data: on that side, there is nothing to access, rectify or delete. You stay in control from within the app — Options → Backups to freeze your data, Options → CSV Import / Export to take it out, Options → Reset database to erase everything.

When you write to us through the support form or by email, however, we keep your message and contact details for as long as it takes to handle your request. That processing is described in our legal notice: purpose, legal basis and retention period. You have the right to access, rectify, erase, restrict and object to the processing of that data, as well as the right to lodge a complaint with the CNIL. To exercise those rights, write to contact@htkapp.com.

14. Contact

• Email: contact@htkapp.com
• Form: htkapp.com/support/nouveau