INDEX / RESOURCES
Privacy policy
How Index handles your inventory, photos, conversations, and sharing.
Your information in Index
Index helps you organize and find your belongings. Your personal inventory is stored on your device. Automatic backups and sharing use Apple's iCloud and CloudKit services. This policy describes information handled by the Index iOS app, its website, diagnostics, and support service.
Index is operated by Juan Albelo, based in Florida, United States. Contact support@mralbelo.com for support or privacy requests. This policy applies from the effective date shown above. Index is initially distributed through the United States App Store.
Information stored on your device
Index stores the information you add or generate for your inventory, including item and box names, descriptions, quantities, tags, barcodes, brands, categories, photos, thumbnails, product details, organization, QR-label identifiers, and creation, modification, and deletion dates. Locations such as Home or Garage are inventory labels; the reviewed app does not request GPS location.
Your optional profile name and photo, preferences, and identifiers used for backups and cloud synchronization are also stored locally. Ask Index saves conversations and remembered conversation context on your device so you can continue previous questions. Ask conversations are not included in Index's own inventory backup format. Device or operating-system backups are separate and depend on your Apple settings.
Photos and Apple Intelligence
Index uses Apple's Vision and Foundation Models frameworks to analyze selected photos, suggest editable item information, and answer questions about inventory. The reviewed implementation uses Apple's on-device system language model; it does not configure OpenAI, another remote AI provider, or Private Cloud Compute for these requests.
Prompts may include your question, relevant inventory information, selected photos, recent conversation, and remembered context. Generated suggestions can be inaccurate; review them before saving. The availability of these features depends on device and Apple Intelligence support. Saving generated details makes them part of your inventory, which is included in automatic backups when iCloud is available and in the relevant shared inventory if you choose to share it.
Automatic iCloud backups
Automatic inventory backup is always on while Index is open and iCloud is available. There is no in-app switch to disable it. You can also request a manual backup. Index stores backups in the private CloudKit database associated with your Apple Account. Backups include inventory and photos, your local profile, locations, and recovery information. Backup metadata includes a generated device identifier, the device name supplied by iOS, dates, checksums, sizes, and entry counts.
You can choose how many recent backups appear in the backup history per device. That setting limits the catalog of recent backups; it does not guarantee deletion of all older stored backup fragments. Use Delete all iCloud backups to request removal of Index's backup zone, including stored fragments. This device and other devices may create new backups of data they still hold.
Permissions and your choices
Camera access lets you capture inventory photos. The system photo picker lets you select photos to import. Motion data supports the welcome-screen depth effect. Notification permission is optional and supports sharing alerts. You can manage available permissions in iOS Settings.
Cloud features use the Apple Account signed in on your device. Index does not ask you to enter your Apple Account password into the app. Local inventory features remain available when iCloud is unavailable; automatic backup resumes when iCloud is available.
Retention and deletion
Deleting an inventory entry first marks it as deleted so it can be recovered; Index does not currently apply a timed automatic purge to these recoverable entries. Permanent deletion removes the local entry, but does not itself erase existing backup copies, separate cloud data, or copies other people have retained.
Settings → Backup → Clear inventory on this device removes local inventory and Ask Index conversations. It preserves your profile, iCloud backups, and inventory shares. Delete all iCloud backups is a separate control and does not delete local inventory or shared inventory.
Manage sharing separately to remove participants or stop a share. After the last inventory-sharing relationship ends, the app attempts to remove the corresponding partner profile share during a successful refresh. The canonical private profile record and profile-directory records are not guaranteed to be erased by that action. There is no verified single control that deletes every category of local and cloud information at once.
Apple operates the cloud infrastructure. These controls do not guarantee immediate erasure from provider backups or copies held by other people. Support requests and technical reports are separate from inventory: clearing inventory or deleting iCloud backups does not delete records in Supabase, Sentry, or PostHog.
Support requests currently remain in our private database until manually deleted; there is no automatic ticket-expiry schedule. We retain them to respond to requests, investigate problems, and maintain relevant support history. We review whether continued retention is needed when handling a deletion request or reviewing resolved requests, and remove information no longer needed for those purposes, subject to legal or security requirements.
Sentry and PostHog retain reports under the retention settings and lifecycle of the respective service. Hosting logs, service backups, email correspondence, and any support-tool copies have separate lifecycles. We do not promise one fixed retention period or immediate deletion from every provider backup. You can request deletion of records we control using the process below; we will explain any information we must retain or cannot locate or remove.
Service providers and diagnostics
Apple supplies the device frameworks, CloudKit storage and sharing, and push-notification infrastructure used by Index. Apple's handling of its services is described in Apple's privacy policy: https://www.apple.com/legal/privacy/.
Configured Index builds automatically send technical error reports to Sentry to investigate failures and feature-usage events to PostHog to understand and improve the app. There is no in-app reporting opt-out. Reports include app version and build, device model and operating-system version, installation and session identifiers, and an app-specific pseudonymous ID derived from your iCloud account identity. This ID links reports from devices using the same iCloud account within the same app environment. It is not anonymous. Until that identity is available, reports use an installation identifier.
Index filters these reports to exclude inventory contents, photos, notes, Ask Index questions, email addresses, and raw Apple Account identifiers. It does not include your device's personal name in these reports, record screen video, or use an advertising identifier. The device name included in private iCloud backup metadata is separate from diagnostics. Service providers still receive the network information needed to receive requests; app payload filtering does not remove that transport information.
Support requests
The Index support page provides a form hosted on our website. When the support service is enabled, requests are processed by a Supabase Edge Function and stored in a private Supabase database. We use them to investigate problems, answer questions, consider suggestions, and handle privacy requests. The form collects a subject, description, category, and any reply email, app version, device and iOS version, or support ID you choose to provide. Subject, description, and request category are required; email and technical details are optional. Do not include passwords, private invitation links, or sensitive inventory information.
We use connected AI assistants to review and summarize support requests, so information you submit may also be processed by the AI service used for support. This is separate from the on-device AI used for your inventory. Our scheduled support review reads tickets without automatically sending replies or changing their status; the operator handles follow-up. Providing a reply email is optional; without one, we may be unable to contact you for clarification. Supabase processes information needed to operate the support service. The support page also loads Cloudflare Turnstile to detect automated abuse. Cloudflare processes network and browser information for that verification; our server verifies the resulting token before accepting a request. Verification tokens are not stored in the support database. The service uses a daily rotating hash of network information for abuse limits. Rate-limit records older than an hour are eligible for cleanup during subsequent submissions, rather than being deleted on a fixed timer; raw IP addresses are not stored in the support tables. Infrastructure providers may retain their own request logs. Support information is handled under the retention and privacy-request sections of this policy.
The Index website
The website is configured for hosting on GitHub Pages. Visiting it sends ordinary web-request information, such as your IP address and browser information, to the hosting service. The current website code does not install an advertising tracker or website analytics SDK, or store visitor identifiers in cookies or local storage. This does not prevent hosting providers from processing request logs.
The support page loads Cloudflare Turnstile for abuse prevention and sends submitted form information to the Supabase support service described above. Links to Apple, the App Store, and other external services take you to services with their own privacy practices. The website's app demonstration uses sample inventory rather than your personal inventory.
Privacy questions and requests
You can use the Support page and select Privacy or data request to ask about information handled by Index. Include a reply email if you want a response and keep the request reference. Describe the information and action involved without sending passwords, private sharing links, or unnecessary inventory details. If you already have a support ID, it can help locate related technical reports.
Depending on where you live and the laws that apply, you may have rights to access, correct, or delete personal information, or to object to or restrict certain uses. Send your request to support@mralbelo.com or use the support form. Juan Albelo handles these requests and will respond within the period required by applicable law. We may ask for limited information to verify your connection to the records; a support ID alone is not proof of identity. We will explain the outcome, any verification we cannot complete, and any applicable exception. You can contact the same address to ask us to reconsider an outcome.
We can act on support and technical records we can identify and control. We cannot retrieve your personal inventory merely from your email address or access your Apple Account for you. Use the in-app controls for device and private iCloud information, and contact us if those controls do not address your request. Deleting past technical reports does not disable future reporting: configured builds continue to send reports while you use the app.
Access, security, and processing locations
Information sent to support and diagnostics is processed by the operator and the services described above for support, reliability, product improvement, and abuse prevention. We may disclose information when required by law or necessary to protect rights, safety, or the service. Index does not use inventory or technical reports to serve targeted advertising.
We restrict access to the support database and use encrypted network connections for the support service. No storage or transmission method guarantees complete security. Service providers may process information in the United States or other countries where they operate; the protections there may differ from those where you live.
Children's privacy
Index is a general-audience inventory tool and is not directed to children under 13. If you believe a child under 13 has provided personal information to our support or diagnostics services, contact support@mralbelo.com. We will investigate and take the steps required by applicable law, including deleting information where required.
Changes to this policy
Updates will be posted on this page with a revised effective date. We will provide additional notice where required by applicable law.