VaseReturn — Privacy Policy

Effective date: November 5, 2026
Publisher / privacy contact: [Publisher legal name pending], [Postal address pending], Brazil, csupportllcl@gmail.com

1. Overview

VaseReturn is an Android inventory app designed primarily to keep professional operational records on your device. Some optional or paid features interact with Google and RevenueCat. The App also stores records of your acceptance of the Terms and Privacy Policy. This Policy distinguishes business records that remain local from data handled in connection with document acceptance, sign-in, subscriptions, support or user-directed sharing. The precise details of third-party SDK processing must agree with the shipped Android build and its Google Play Data safety disclosure.

2. Data you enter and keep on your device

The App can handle the following data when you decide to provide them: inventory item names, categories, quantities, optional photos, replacement values and stock adjustments; optional individual-piece labels and photos; client names and optional email addresses or telephone numbers; event names, dates, optional client associations, reservations, packing, dispatches, returns, repairs, losses and corrections; preferences such as language and inventory currency; and local movement history.

These operational records are stored in a local SQLite database and managed local image files. They are not routinely uploaded to a VaseReturn-operated inventory server; this version does not provide automatic cloud backups or cross-device business-record synchronization. We ordinarily cannot access local business records remotely. We can see materials only if you deliberately submit or share them with us (for example, in a support request).

The local-storage description above applies to your operational inventory and event records. Document-acceptance records are a separate category described below.

3. Records of document acceptance

When you accept the Terms and Privacy Policy in the App, either during initial use or when an updated document is presented for acceptance, VaseReturn stores your internal user ID, your Google account identifier if you are signed in with Google, the versions of the documents accepted, your IP address, and the date and time of that acceptance. Acceptance records are stored remotely using Supabase, separately from the inventory and event records kept on your device. We use them to document which documents were accepted and when, and to administer updated terms and notices. This does not upload your local inventory, client records, or managed photographs.

4. Google sign-in and Premium identity

Free use does not require Google login. For Premium, VaseReturn requires a verified in-app Google identity in addition to a valid paid subscription entitlement. Google processes sign-in and identity verification in accordance with its services and policies. The App retains a minimal indication of previously verified Google identity in device-secure storage, separate from SQLite inventory and backup data. Authentication or renewed identity verification may involve transmission of technical credentials and account attributes through Google services. We do not use the Google login to synchronize or transfer your inventory between devices.

Signing out clears or disconnects the in-app identity state as implemented by the current app; it does not delete your Google account, cancel your store subscription or automatically delete local inventory. We provide information on disconnecting identity, resetting local records and requesting removal of information associated with App use in the Data & Deletion Notice.

5. Subscriptions: Google Play and RevenueCat

Google Play processes purchases and manages payments and subscription records. RevenueCat helps VaseReturn determine whether Premium rights are valid. Purchase-related processing may include an App User ID or SDK identifier, product and transaction identifiers, purchase and expiry status, app and device information, and technical diagnostics needed to administer subscription rights. Google Play and RevenueCat process information under their relevant policies and contractual roles. Purchase and restore checks may require network access. We do not need access to your event or client database to validate a subscription.

Subscription payments occur through the Google Play checkout. We do not ask you to type your payment-card number into the operational inventory database. The Google identity shown in the App and the Google Play account used for purchase need not be the same, but Premium access requires an authenticated in-app identity plus an eligible subscription entitlement.

6. Camera and photos

You can add images by choosing the camera or gallery. VaseReturn uses those sources in response to your action and permission. Managed images are stored locally unless you explicitly export or share them. Photos can incidentally contain personal data. Avoid capturing other people or confidential materials without an appropriate legal basis or permission. The intended item-photo feature does not require microphone access.

7. Backups, PDF exports and user-directed sharing

You choose when to export a backup or share a report. Backups can contain the local database, photographs and information about clients, events and costs. The current backup format is v6 and the App is designed to restore supported prior formats v2–v6. You can select password-protected backup or a clearly warned, unprotected export. An unprotected backup exposes the included data to anyone who obtains it. Sharing uses Android's share mechanisms and recipients or selected storage services have their own policies. There is no automatic VaseReturn cloud backup. If you lose the password to an encrypted backup, recovery may be impossible.

PDF event reports may include client names, event data, inventory movement, damages, losses and values supplied by you. A missing replacement value is not silently substituted as zero.

8. Support communications

If you email us, we process the contact information, correspondence, purchase references and any attachments you voluntarily submit to provide support, respond to requests, investigate issues and meet applicable obligations. Please do not send passwords, payment-card data or complete client databases unless absolutely necessary and requested. We do not currently promise an automatic account portal for managing support inquiries.

9. Purposes and legal grounds

Depending on applicable law, our processing purposes include documenting acceptance of the Terms and Privacy Policy, providing authentication and subscription access, responding to requests, maintaining purchase records as required, preventing abuse, and complying with law. Relevant legal bases can include performance of a contract, compliance with legal obligations, legitimate interests assessed as required, and consent where needed. Your professional use of other people's client information, as recorded locally on your device, is generally your responsibility. We do not automatically act as a cloud processor of this database simply because the App is installed.

10. Sharing and international processing

Third-party processing can involve Google authentication, Google Play billing, RevenueCat entitlements, Supabase storage of document-acceptance records, and services you deliberately select to receive exported files. These providers may process data outside your home country subject to their own contractual arrangements and legal safeguards where applicable. The App does not automatically transmit your entire local inventory to these providers for subscription verification or document-acceptance records. If our production SDKs or features change materially, we will revise this Policy and the Google Play disclosure.

11. Analytics, advertising and automated decisions

The described Android MVP does not enable online product-usage analytics, targeted advertising, AI processing or remote inventory synchronization. That statement does not mean Google or RevenueCat make no technical network requests or retain no service diagnostics. We do not use your on-device inventory to make automated eligibility or pricing decisions about your customers.

12. Security

The App uses app-local storage for operational records and device-secure storage for a limited local Google identity state. Password-protected backups are offered; unprotected files should be treated as confidential business records. No storage, encryption or network system is risk-free. Secure your phone, choose strong backup passwords and handle shared files carefully. The final strength and compatibility of backup encryption and all production SDK behavior must be validated in the release version.

13. Retention, deletion and your choices

Inventory and photographs generally remain on your device until changed, erased, or removed by app/device actions. Uninstalling or resetting your device may delete them. Files exported to email, cloud storage or other recipients remain outside the App's control. Local Google sign-in data can be cleared by disconnecting and related App controls, without automatically deleting inventory. Google Play and RevenueCat may retain separate transaction records subject to law and their policies. Support messages are retained only as long as reasonably needed for support, disputes and legal compliance and are then deleted or anonymized as appropriate.

Document-acceptance records stored using Supabase are kept for 24 months. They include the identifiers, document versions, IP address, and acceptance date and time described in Section 3.

If you ask us to erase data that we actually hold or control, including a document-acceptance record associated with you, we will review and action that request subject to necessary verification and lawful exceptions. For local-only inventory, we may not possess a copy and therefore cannot remotely erase it. Read the Data Export, Backup & Deletion Notice for practical steps.

14. Rights and regional protections

Depending on where you live, you may have rights to request access, correction, deletion, portability, objection, withdrawal of consent or information about processing, and to complain to a regulator. Write to csupportllcl@gmail.com. We may reasonably verify a requester before disclosing personal data. We will respect legally required response periods, local-language rights and available remedies. User-created professional client records may be controlled by the professional who entered them rather than by VaseReturn.

15. Children

VaseReturn is designed for professional users and is not directed to children. It is not designed to solicit children's personal information or enable children to register as business operators. Do not use the App to enter children's personal information unless necessary, authorized and lawful.

16. Changes and contact

We may change this Policy when the product or legal requirements change, giving notice and collecting consent when required. The current effective date appears above. Write to csupportllcl@gmail.com. Publisher: [Publisher legal name pending], [Postal address pending], Brazil.