1. Scope and who we are
This Privacy Policy applies to the Rattib mobile application, the Rattib Cloud service, rattib.com, and related support communications (together, the “Service”).
Rattib is responsible for the personal information it processes for its own purposes. In data-protection terms, Rattib acts as the controller of account and service data. A Cloud space Owner also decides which people receive access to the inventory they share.
Plain-language summary: Rattib requires Sign in with Apple or Google and stores inventory in Cloud so synchronization and sharing can work. A protected device snapshot can keep previously synchronized metadata visible while Rattib reconnects, but Cloud remains authoritative.
2. Cloud inventory and the saved device copy
Cloud inventory
Inventory is transmitted to and stored by Rattib so the Service can synchronize records automatically, recover content, and enable account-based sharing. Cloud records are associated with your account and may be visible to Owners and Guests who receive access.
Encrypted saved metadata
After a successful synchronization, Rattib may save an encrypted read-only snapshot of inventory metadata on the device so records can appear faster after restart and remain visible during a temporary outage. The snapshot does not include inventory photo bytes, is not a separate inventory, and cannot accept offline changes.
The snapshot is bound to the refresh session, account environment, API endpoint, contract, and server generation. It is rejected and removed when those checks fail and is cleared when you sign out or delete the account. Device operating-system backups are handled under your agreement with the platform and your settings.
Pending uploads
Work you start while connected may be kept separately on your device, including encrypted pending changes and selected photo files, so Rattib can retry an interrupted upload. This is not an offline inventory or permission to start new changes without a connection. Pending work is removed when sent or discarded, or when you sign out or delete the account. Check upload notifications before signing out or uninstalling.
3. Information we collect
| Category | Examples | When collected |
|---|---|---|
| Account and profile | Provider-verified email address, display name, username, optional phone, base location, account status, and Apple or Google sign-in identifiers | When you create, link, or update a Cloud account |
| Account allowances | Account type, feature entitlements, inventory usage counts, and daily AI request usage | When Rattib checks and shows the features and limits available to your account |
| Inventory content | Storage-space names, unique space identifiers, display labels, statuses, locations, notes, categories, item names, descriptions, quantities, tags, estimated values, conditions, retrieval state, and movement history | When you create or synchronize Cloud inventory |
| Photos and files | Storage-space and item photos, filenames, file type, dimensions, size, and integrity checksum | When you choose to upload a photo to Cloud inventory |
| Sharing and collaboration | Invited username, membership, Owner or Guest permission, invitation status, QR share request, Owner decisions, and shared activity | When Cloud sharing is used |
| AI requests and suggestions | Your question or instructions, relevant inventory details, selected Items' primary photos for Suggest Details, and temporary progress, answers, and proposed changes | When you choose to use a live AI feature; labelled examples do not analyze your inventory |
| Optional AI descriptions | Selected Items' names, ordinary descriptions, all uploaded photos and readable document text, temporary analysis progress and suggestions, and the separate description you choose to save or edit | When you request generation, save a description, or use a supported inventory AI feature that includes current saved descriptions as additional context; see the September 28 supplement below |
| Checklists | Plan names, selected Items, quantities, destinations, reasons, notes, and applied movement and return/reuse history | When you create or use a Checklist |
| Device and synchronization | Device identifier and name, platform, app version, last-seen and sync times, change status, saved-snapshot binding metadata, and notification registration information when enabled | When a device connects to Cloud services or saves a last-synced view |
| Authentication and consent | Session and security records, linked Apple or Google identity, policy versions accepted, minimum-age confirmation, app build, and acceptance time | When you sign in, maintain a session, or accept legal terms |
| Service and security records | Timestamps, service status, network address, temporary operation records, and error information | When the Service receives or protects a request |
| Communications | Email address, message content, and information you choose to provide | When you contact Support or receive a service email |
| Optional plan interest and feedback | Your account identifier, selected plan and displayed planned price, survey version, feedback category and message, app build, and submission/update times | Only when you submit interest or feedback in the app; inventory, photos, and diagnostic logs are not automatically attached |
Apple or Google may provide a verified email address for account purposes. Rattib stores that address with the Cloud account where provided, but sharing invitations use the Rattib username—not the email address.
Camera, photos, and QR scanning
Rattib asks for camera or photo-library access only through device permissions and only when a related feature is used. We do not receive your full photo library. Photos you select for Cloud inventory are uploaded to the Cloud service.
QR scanning uses the camera to read a space’s unique identity. The identity may be sent to the Cloud service to locate the exact record, check authorization, or create a share request for an Owner. Display labels such as SPACE_001 are not unique sharing identities. A QR label never replaces account permission.
Information we do not use for advertising
Rattib does not sell personal information, run third-party advertising, or use personal inventory content for cross-context behavioral advertising. We do not collect payment-card details, precise GPS location, contacts, health data, or the contents of your full photo library through the current Service.
4. How we use information
We use information to:
- create and operate Cloud accounts, sessions, profiles, and account allowances;
- store, automatically synchronize, search, display, move, retrieve, and restore Cloud inventory;
- process photos, create thumbnails, maintain QR identities, and deliver requested files;
- answer your live AI requests and prepare suggestions for your review;
- save private Checklists and carry out only the movements you choose to apply;
- send, accept, decline, and administer username invitations, QR share requests, and Owner or Guest permissions;
- show activity and synchronization state;
- authenticate users through Apple or Google and manage access to Rattib;
- respond to support, privacy, deletion, security, and legal communications;
- understand optional plan interest and feedback to improve Rattib and plan future features;
- protect accounts and data, limit abuse, diagnose failures, maintain integrity, and recover the Service;
- comply with law, enforce our Terms, and establish or defend legal claims; and
- improve reliability and usability using operational information that does not require us to inspect personal inventory for advertising.
We do not use inventory names, search terms, photos, notes, values, or support-message content for advertising profiles.
Optional AI
Live AI processes the information needed for your request on Rattib's service. Ask can use inventory you are authorized to view; Suggest Details uses the selected Items' primary photos. The separate AI descriptions feature can analyze all uploaded photos, as explained in the supplement below. Suggestions can be wrong. Review them before saving; a suggested Checklist does not move anything until you apply it. Do not include secrets or highly sensitive information in prompts or photos just to test AI.
Optional interest and feedback
These submissions are linked to your Rattib account, not anonymous. They are optional and do not start a subscription, charge you, change your account type, or sign you up for marketing. Displayed future prices are planned and may change. You can change or withdraw your interest and delete your submitted feedback in the app. Do not include passwords, sign-in codes, or sensitive information in feedback.
4a. Optional AI descriptions supplement — September 28, 2026
This supplement applies only where the AI descriptions feature is available. Pro Plus users can choose up to 200 Items and confirm generation. Rattib processes each selected Item's name, ordinary description and all of its uploaded photos together to prepare a separate identification description. This includes reading visible writing on papers or other photographed documents. It does not access your full photo library.
Processing takes place on Rattib's service. It starts only when you request it, and can continue after you leave the page. You can end remaining analysis. Proposed text is not saved to the Item until you review and save it; you can edit or discard individual suggestions. Generation does not rename or move Items or change their ordinary descriptions. AI may misread text, misidentify an Item or make an incorrect inference. Do not submit secrets or highly sensitive documents merely to test it.
The saved AI description is a separate Item field, not a private note or chat message. It is visible to people currently authorized to view that Item through sharing; editable access is required to change or clear it. You can view, correct or clear it through Inventory settings, regardless of whether your account can generate new descriptions.
Additional context for inventory AI
In app versions supporting this use, an Inventory Ask, Suggest Details or AI Checklist request can also use relevant, up-to-date saved AI descriptions for Items you are authorized to access. This can include text previously read from photographed documents. Saved descriptions supplement the existing Item details; they are not proof of an Item's identity, location, quantity or condition. Missing or outdated descriptions are excluded. Conflicting information may require you to check the Item or clarify your request.
Suggest Details still analyzes the selected Item's current primary photo. Ordinary Inventory Ask and AI Checklist planning do not start a new photo analysis just because a saved description exists. About the app does not receive your inventory or saved AI descriptions. This additional context is used only for your requested inventory AI operation, not to rename or move Items automatically. You can avoid this processing by not using the inventory AI feature, or clear a saved description where you have editing permission before making a new request. Clearing it does not erase a response already generated; temporary jobs and results follow the retention periods below. Older app versions may not use this additional context. The retention and export distinctions below apply to this feature.
4b. Optional Jev supplement — September 29, 2026
In versions offering the experimental Jev option, you can choose it instead of Normal AI for inventory recommendations or category-only suggestions. Normal AI remains available with its existing processing. Selecting Jev alone does not send inventory: each new request requires a separate confirmation describing the external processing.
After you confirm, Rattib sends your request and relevant text for the accessible Items in your chosen scope to TypeSafe AI, which provides Jev. This can include Item names, ordinary descriptions, categories, quantities, status, Space names and saved location labels, and current saved AI descriptions. A saved description may contain writing previously read from a photographed document. Jev does not receive the photos themselves or access your photo library. A full-inventory recommendation can assess every accessible Item in the selected scope, including shared inventory you are permitted to view; choose a narrower scope if you do not want all that text processed.
TypeSafe processes the text to return relevance or category assessments and, if requested, a suggested priority order. Assessments are not guaranteed to be correct, and category proposals are not saved until you review and accept them. Do not send secrets, highly sensitive documents or information you are not authorized to share.
TypeSafe's published Privacy Policy describes U.S. processing and retention for its service, security and legal purposes. Rattib does not promise zero retention or a three-day deletion period at TypeSafe. Its customer agreement does not permit model training on customer data without the customer's consent; this feature does not provide such consent. Review those notices if provider processing affects your choice.
Rattib's temporary Jev requests, progress and results expire three days after creation. Category changes you explicitly save become ordinary inventory. Cancel stops remaining work but cannot recall text already sent to TypeSafe. Account or inventory deletion removes your temporary Jev work from Rattib; it is not a representation that provider records or backups are immediately erased. Minimal content-free retry and allowance records may remain until account deletion to prevent repeated charges or submissions. Basic export does not include temporary Jev requests, assessments or unsaved reviews. Contact support@rattib.com for help with a provider-related privacy request.
5. Legal bases for processing
Where applicable law requires a legal basis, we rely on:
- Contract: processing necessary to provide the Cloud account, synchronization, sharing, support, and other requested features.
- Legitimate interests: securing the Service, preventing abuse, maintaining reliability, improving performance, and protecting users, provided those interests are not overridden by your rights.
- Consent: device permissions, optional information, and processing where consent is required. You can withdraw consent through device settings or the relevant in-app control, without affecting earlier lawful processing.
- Legal obligation: records and actions required to comply with applicable law or valid legal process.
- Protection of rights: processing necessary to establish, exercise, or defend legal claims and protect people or the Service.
7. Retention and deletion
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, protecting it, meeting legal obligations, and resolving disputes.
| Information | Typical retention |
|---|---|
| Active Cloud account and inventory | While the account remains active, until you delete the relevant data, or as otherwise required for the Service |
| Session and device records | While needed to maintain or secure the session; revoked or removed when no longer needed or when the account is deleted |
| Encrypted saved device snapshot | Until replaced by a newer valid snapshot, invalidated by a safety check, or cleared at sign-out or account deletion |
| Encrypted pending changes and photo files on the device | Until sent or discarded, or cleared at sign-out or account deletion |
| Temporary AI sessions and results | Three days; details you accept into inventory and Checklists you save are kept as those records, not as temporary suggestions |
| Saved AI descriptions | Kept separately from temporary analysis until changed or cleared, or until the Item is deleted; ending or discarding an analysis does not erase a previously saved description |
| AI description retry records | Minimal records without photos or description text are retained until account deletion to prevent delayed retries from recreating expired work or repeating a save |
| Checklists and cycle history | Kept as saved plans until you delete the Checklist; deleting a plan does not undo applied inventory movements |
| Optional plan interest | Your current choice until you change or withdraw it, or delete your account |
| Optional feedback | Until you delete the submitted feedback or delete your account |
| Interest and feedback retry records | Minimal records without your message or selected plan are kept until account deletion to prevent a delayed retry from restoring a withdrawn or deleted submission |
| Temporary upload records | Approximately 24 hours |
| Temporary deletion-status records | Up to approximately 48 hours so the app can confirm completion |
| Synchronization reliability records | Up to approximately 180 days for reliable retry and conflict handling; removed for an account-deletion request |
| Changed or deleted username reservation | Up to approximately 90 days to reduce confusion or impersonation |
| Encrypted backups | Rotating 7 daily, 4 weekly, and 3 monthly snapshots; residual deleted data may remain for up to approximately three months |
| Security and legal records | As reasonably necessary for security, compliance, dispute resolution, or legal claims |
Backups are isolated from ordinary access and used for disaster recovery. When recovery requires restoring an older snapshot, subsequent deletion state is reapplied where technically feasible before normal service resumes.
The app provides Delete all Cloud data (shown as Delete all inventory data in newer versions) and Delete account and all data. Clearing inventory is not the same as withdrawing interest or deleting feedback; use their own controls or delete the account. Sign-out is not server-side deletion. It clears this device's saved copy and pending work. See Account & Data Deletion for the account and shared-inventory steps.
For AI descriptions, the three-day temporary period starts when the analysis is created. Ending analysis stops remaining work but completed unsaved suggestions can remain until that expiry. Deleting an Item removes its saved AI description and related analysis content. Account or inventory deletion removes your description-analysis work and the descriptions on Items actually deleted. A shared Item that remains with another Owner keeps its saved description under the normal sharing rules. Backup retention remains separate.
App versions with interest and feedback include your current interest and undeleted feedback in the data export. Versions with AI descriptions also include saved AI descriptions you are authorized to view. The export does not include temporary AI sessions, conversations or unsaved reviews, or Checklist plans. For access or deletion questions about separate records, contact support@rattib.com. Do not assume an inventory-only export or deletion covers every record held by the Service.
8. Security
Rattib uses administrative, technical, and physical safeguards designed for the nature of the Service. These include HTTPS connections, scoped authorization checks, time-limited sessions, protected provider credentials, controlled file access, encrypted device snapshots, abuse prevention, encrypted backups, integrity checks, and deletion and recovery procedures.
No method of storage or transmission is completely secure. You are responsible for protecting your device, Apple or Google sign-in method, printed QR labels, and the people and permissions you choose for sharing. Learn more on our Security page.
9. Your privacy rights and choices
Depending on where you live, you may have the right to:
- know whether and how we process personal information;
- access or receive a portable copy of eligible information;
- correct inaccurate information;
- delete information or your account;
- restrict or object to certain processing;
- withdraw consent where processing relies on consent;
- appeal or complain to a competent data-protection authority; and
- receive equal service without unlawful discrimination for exercising privacy rights.
Many choices are available directly in Profile, including profile editing, Sign out, plan-interest and feedback controls, Delete all Cloud data, and Delete account and all data. Cloud synchronization is automatic. Device Settings controls camera, photo-library, and notification permissions.
To submit another request, email support@rattib.com. Describe the request and use the provider-verified email connected to your account when possible. We may verify your identity and authority before disclosing or deleting information. An authorized agent may submit a request where permitted by law, subject to proof of authorization.
California and similar U.S. state rights
Rattib does not sell personal information and does not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about you. If these practices change, this Policy and required choice mechanisms will be updated before the new use begins.
EEA, United Kingdom, and Switzerland
You may contact the competent supervisory authority in your country. You may also object to processing based on legitimate interests and request restriction or portability where the applicable conditions are met.
United Arab Emirates
Applicable rights may include access, correction, restriction or cessation of processing, and controls relating to cross-border transfer under the UAE Personal Data Protection Law.
10. International data transfers
Rattib and its providers may process information in countries other than where you live. Those countries may have different data-protection laws. Where required, we use an approved transfer mechanism or another lawful safeguard and limit providers to information needed for their service.
11. Children
Rattib is a general-audience organization service and is not directed to children under 13. A person must be at least 13, and at least the minimum digital-consent age required in their country, to create a Cloud account without a parent or legal guardian where parental consent is legally permitted.
We do not knowingly collect Cloud account information from a child under 13. If you believe a child has provided personal information contrary to this section, contact support@rattib.com so we can investigate and take appropriate action.
12. Website privacy
The public Rattib website does not currently use advertising trackers, analytics cookies, account cookies, or contact forms. Standard web requests necessarily transmit technical information such as an IP address, requested page, browser details, and time to the hosting system for delivery and security.
If analytics, forms, or non-essential cookies are introduced, this Policy and any required consent controls will be updated before use.
13. Changes to this Policy
We may update this Policy as the Service, providers, or law changes. The version and effective date appear at the top. If a change materially affects how existing personal information is used, we will provide notice appropriate to the change and obtain renewed consent where required.
14. Contact
For privacy questions, rights requests, deletion assistance, or complaints, contact:
Rattib Support
support@rattib.com
https://rattib.com/privacy/
Use a clear subject such as “Privacy or data request” and include the provider-verified email connected to your Cloud account when possible. For general product help, visit Rattib Support.