Privacy Policy

Who is responsible

Haulfolio is provided by DIGITALSPROUT LTD, a company registered in England and Wales. We are the controller of personal information we process to provide Haulfolio and customer support. Our contact details appear at the end of this policy.

Inventory, photos and other local records

Your inventory records, quantities, barcodes, item and receipt photos, purchase costs and dates, sources, storage locations, sales, fees, returns, expenses, notes and app preferences are stored locally in the app’s storage on your device. Core record keeping works offline. Records imported through the optional eBay connection also require the online privacy checks described below. We do not operate a cloud inventory database or automatically upload your local inventory and photos to our servers or RevenueCat.

The app uses the system photo or file picker to access only the photos or files you choose. You can decline optional permissions and still use basic record keeping, and change permissions in your device settings.

If you use barcode scanning, Haulfolio asks for camera permission and reads UPC or EAN barcodes on your device. The scanner does not save or upload camera images or record audio. A barcode is stored as an item reference when you choose to save it; you can enter the number manually instead of using the camera.

On Android, barcode scanning uses Google ML Kit. Images and barcode contents are processed on your device and are not sent to Google by the scanner. ML Kit sends technical metrics to Google over HTTPS, including an installation identifier, device and app details, scanner usage events, performance measurements and error diagnostics. Google uses these metrics to analyse usage, maintain and improve the SDK, investigate problems and detect abuse. These metrics do not include your inventory or the barcode values you scan.

Camera access is optional, and manual barcode entry remains available. This permission choice does not promise that all ML Kit technical reporting is disabled. Google describes its handling in the ML Kit privacy information and Android SDK data disclosure, under Google’s Privacy Policy.

Business mileage is a manual log. The trip date, purpose, distance, miles or kilometres, and any start location, end location or notes you enter stay in your local workspace. Haulfolio does not use GPS, track your location or automatically record your journeys.

Haulfolio does not require access to contacts, device location or your microphone. It does not use your photos for AI training or product recognition. Please avoid entering unnecessary personal information about buyers or other people.

Purchases and RevenueCat

Apple’s App Store or Google Play processes subscription payments. We do not receive your full payment-card or bank details. The store handles its own account and payment information under its privacy policy.

We use RevenueCat to check purchases, restore eligible subscriptions, enable Pro’s unlimited inventory, prevent purchase fraud and understand subscription performance. RevenueCat processes a randomly generated app user identifier, purchase history, store receipts or transaction identifiers, product and subscription status, and technical information such as the app platform, SDK version, locale and currency. Requests to online services also expose an IP address to the receiving service.

The subscription service may connect when you open Haulfolio, including when you have not bought Pro. Its generated identifier is not a Haulfolio login. Billing initialization associates a pseudonymous identifier derived from a random key in your device’s secure storage with your RevenueCat record to maintain purchase and restore continuity. This can happen before you choose an eBay feature. It does not connect an eBay account or start a purchase. The eBay service does not contact RevenueCat or use subscription status to authorize eBay features. We do not use your name, email address or eBay username as your subscription identifier, or send your inventory, photos or sales records to RevenueCat as customer attributes.

RevenueCat provides subscription analytics, such as purchase and renewal reporting. Haulfolio has no advertising SDK, separate behavioral analytics SDK or advertising-identifier tracking, and we do not sell personal information or share it for targeted advertising. Learn more in RevenueCat’s Privacy Policy, Apple’s Privacy Policy and Google’s Privacy Policy.

After you have used the app, it may request a rating through Apple’s or Google’s native store prompt. The store handles any rating or review you choose to submit under its own terms. Haulfolio stores only request timestamps and app versions locally to limit repeat prompts; the prompt API does not tell the app whether you submitted a rating. The store may make reviews or tester feedback available to us under its review rules.

App updates, imports, exports and backups

Haulfolio uses Expo Application Services (EAS Update) to check for and deliver software updates. In builds with this service enabled, update checks can run automatically when you open the app. Over an encrypted connection, Expo receives a random identifier for this app installation, the operating system, app/project and runtime/update versions, and information about failed update launches or startup errors. Expo also receives the IP address used for the request. This information supports update delivery, recovery from failures and reporting on update adoption and reliability.

The installation identifier is generated on your device and stored locally. It is not an advertising identifier or a Haulfolio account, and it is not derived from your name, email address or a hardware identifier. We do not use the update service to upload your inventory, photos, mileage log, CSV imports or backups. Expo processes update-service information on our behalf; see Expo’s Privacy Policy.

CSV files you select for import are read and checked on your device. After you review the column mapping and preview, the app can add inventory and historical sales records, including quantities, sources, storage locations, costs, dates, shipping, fees and supported adjustments. Importing a CSV does not upload it to us or connect to a marketplace account.

When you choose to export a CSV or full backup, the app creates a file for the destination you select. A full backup contains your records and managed photos; a CSV export does not include the photos. Exports are not sent to us automatically. eBay-derived records carry source references and an encrypted cleanup receipt so the app can check whether the source account was deleted. These references contain no eBay access or refresh tokens. Backups do not include store receipts, subscription API keys, eBay authorization tokens or the secret device connection key, and do not grant a subscription.

Before exporting or restoring eBay-derived records, the app verifies their source references with our connection service. Exports pause if the check cannot complete. For a backup restore, unverified eBay-derived records and their related history are omitted from the restore preview, while independently entered records can still be restored. The app explains the omissions before you confirm; you may cancel, and it does not change the original backup file. It checks again before replacing the workspace.

A cleanup receipt is tied to the original device’s secure key. Restoring eBay-derived records requires a successful check on that installation, or you can reconnect to eBay and import again. CSV files containing eBay-derived rows cannot be used to bypass these checks; use the supported full-backup workflow or import again from eBay. Manually entered records do not need an eBay account.

Files saved to email, cloud storage or another app are handled by that service. Exported files may contain private business information and are not password-encrypted by Haulfolio. Store them somewhere you trust and remove copies you no longer need.

Depending on your operating system and settings, device backups may include Haulfolio’s local files. You control those backups through Apple, Google or your device provider. Haulfolio does not provide automatic cloud sync. Restoring a subscription does not restore inventory.

Support and purposes of processing

If you email us, we receive your email address, message and any attachments you choose to send. We use this information to answer your request and resolve problems. Send only the information needed; we will not ask for your password or full payment-card details.

Where UK or European data protection law applies, we process information needed to provide requested features, deliver app updates, manage subscriptions and answer contractual support requests to perform our contract with you. We rely on legitimate interests for proportionate security, fraud prevention, content safety, troubleshooting, support administration and update/subscription performance reporting, taking your rights into account. We also process information where necessary to meet legal obligations. Where an optional activity requires consent, we ask for it and you can withdraw it without affecting earlier lawful processing.

eBay research and optional connections

Public browser searches are available without connecting an eBay account. Your item search text or barcode is sent to the eBay site you select when you tap a search button. eBay receives the technical information normally sent by your browser or the app handling the link, such as your IP address, and handles the visit under its User Privacy Notice and your browser or eBay settings.

Supported installed app versions can offer optional searches of public eBay listings and imports of your own listings and sales when the service is available. These tools are included in Free; adding unsold imported inventory is subject to your plan’s inventory allowance. The app shows current availability. Installing Haulfolio, opening it or buying Pro does not itself connect an eBay account. Public listing search does not require you to connect an eBay selling account; imports do.

When you submit an in-app eBay search, your search text or barcode and selected eBay marketplace are sent to our service and eBay to retrieve matching public listings. Our service uses a random device proof to verify the request and bind privacy and content-safety receipts to your installation. It does not send your subscription identifier to RevenueCat for an eBay access check. The returned preview includes listing titles, asking prices and currencies, condition, photo links and links to eBay. We do not keep a search-history database or use these searches to build a profile of you. eBay and infrastructure providers handle technical request information under their applicable privacy terms; the short preview lifetime below does not set their retention periods. Avoid putting personal information in your search.

Public search results are held in working memory for a short display session, expire within two minutes, and are cleared when you leave the search screen or the app goes into the background. The app does not save these results to inventory, drafts or backups. Listing photos load from eBay’s image service, which receives technical request information such as your IP address. Haulfolio requests these photos without persistent image caching and does not copy them into your inventory or backups. Opening a listing takes you to eBay, where eBay’s privacy notice and your browser or eBay settings apply.

To invalidate public search previews after an account-deletion notification or a content report, our service keeps a changing refresh marker in Google Cloud Firestore. This marker contains no seller details or search history. The app periodically checks it while displaying results and clears the preview if it changes or the check fails. A verified deletion notification changes this marker for all search previews. This depends on the service receiving the notification and the app completing a check; it is not a promise of immediate erasure on an offline device. The short display expiry also applies.

Public listing research also has reporting and seller-blocking controls. When you submit a report, the app sends our service an encrypted receipt tied to your device key, your selected report reason and whether you are reporting the listing or seller. The receipt contains hashed listing and seller references, expires within two minutes and is held only in working memory. The report form uses fixed choices, not a free-text message. Our service keeps a minimal hashed listing reference, the reason, report target and time, with its environment and record version, to keep that listing out of Haulfolio results. The saved moderation record contains no seller reference, reporter identifier, listing title, photo, search text, raw username or eBay authorization token. Hashing does not make associated information anonymous. Reporting a seller acts on the selected listing; it does not ban that seller throughout eBay or all of Haulfolio.

Blocking a seller stores an opaque seller reference in your device’s secure app storage so that seller’s results can stay hidden across search sessions on that installation. Your accepted content-guideline version is also stored there. These local preferences are separate from inventory and are not included in Haulfolio exports or backups. In Content & safety, you can unblock individual sellers, unblock all sellers, or reset eBay preferences to clear blocks and guideline acceptance. Clearing a local block does not withdraw an already submitted report or remove the service’s safety record, and it does not change your eBay account settings.

To connect a selling account, you sign in with eBay and grant permission there. We do not receive your eBay password. Our service uses eBay authorization tokens to read your seller identity, listings and sales for the import you request. It also processes your selected date range, workspace currency and reporting time zone. Raw eBay order responses may include buyer details while the service prepares a preview; buyer names, contact details, delivery addresses and payment details are excluded from the returned preview and saved Haulfolio records. We do not keep the raw order responses in a server inventory database.

The authorization tokens and seller connection details are encrypted into a connection credential held in your device’s secure storage. That credential is sent to our service for connection requests and refreshed when needed. A separate random device key lets the service verify requests and bind connection credentials and privacy receipts to your installation. eBay imports do not require a subscription check with RevenueCat. Our service and hosting provider also receive technical request information, including an IP address. Imported inventory and sales are saved locally only after you confirm them. Haulfolio only reads the requested eBay data; it does not publish or edit eBay listings or continuously synchronize your records.

Disconnect eBay in the app to remove the saved connection credential and request revocation of eBay access. If eBay cannot confirm revocation, the app explains that you should also remove Haulfolio in your eBay account permissions. Disconnecting does not cancel your subscription. Imported records remain subject to the privacy checks and deletion process below even after disconnecting or Pro expiring. Uninstalling the app is not a substitute for revoking eBay permission.

We receive and verify eBay account-deletion notifications. To prevent deleted account data being used or imported again, our service stores a minimal deletion marker in Google Cloud Firestore, in the London region. The marker consists of a hashed seller reference, the service environment and deletion date, with a record-format version. It does not contain the seller’s username, raw account identifiers, authorization tokens, listings, orders or notification payload. This reference is pseudonymous, not a claim that the information is anonymous.

The app sends its source references and device proof to our service for deletion checks when loading or returning to your workspace, periodically while it is active, and before relevant imports, exports, backups or restores. These checks do not require Pro or upload your full inventory. While an eBay source cannot be verified, its imported records are hidden and complete export or restore operations may pause; your independently entered records remain usable.

When a check confirms account deletion, the app removes records created by that eBay import, their related sales, refunds and audit history, and associated data in its own recovery copies, managed backups and exports. It removes local photos that are no longer used. If you linked a sale to stock you had entered yourself, it keeps your independently entered stock information but removes the eBay link and imported transactions. Cleanup occurs when the app can run and complete the check; an offline or uninstalled app cannot receive an immediate remote erasure.

Who receives information and where

RevenueCat and its service providers process subscription information for us. Expo and its service providers process app-update information; our eBay search and connection service uses Expo hosting and Cloudflare infrastructure. Google Cloud processes the minimal eBay deletion, refresh and moderation records described above; the selected database region is London, which does not mean every provider’s support or technical processing occurs only in the United Kingdom. Google also receives the ML Kit technical metrics described above and handles them under its privacy policy. eBay receives requests you choose to make and provides public listings, listing photos, authorized seller data and deletion notifications. Our email and hosting providers process communications and the technical information needed to deliver those services. Apple and Google process store transactions under their own terms. We may disclose information when required by law or when reasonably necessary to establish or defend legal rights.

These providers may process information outside the United Kingdom, including in the United States. Where a transfer requires safeguards, we use the applicable contractual protections. RevenueCat’s Data Processing Addendum includes standard contractual clauses and the UK transfer addendum for relevant transfers. Contact us for information about safeguards applicable to your data.

Retention and deletion

Local records remain on your device until you delete them, remove the app’s data or the eBay deletion process above removes affected data. Archiving an item only changes its visibility. A subscription ending does not itself delete your records. Uninstalling the app can remove its local data, while copies in exports or device backups may remain until you delete them separately.

Use the app’s delete-local-data control to erase its local workspace. Back up anything you are entitled to keep first. We cannot retrieve inventory that exists only on your device. The eBay cleanup process covers copies managed inside the app; it cannot remotely remove files you already saved to email, a cloud drive, another device, another app or an operating-system backup. You control those external copies and should remove affected data where required. Deleting data or uninstalling the app does not cancel a subscription.

The minimal eBay deletion markers have no automatic expiry. We retain them to block deleted source accounts and prevent old credentials or backups from reintroducing their data. They are used for deletion enforcement, not advertising or a seller profile. The separate public-search refresh marker is replaced as notifications arrive; it is not a history of searches or sellers. Contact us about a marker or deletion request; we will explain the information retained and the reason.

Minimal moderation records have no automatic expiry and remain separate from temporary listing previews. We retain them to prevent reported listings from reappearing, rather than to retain their content or build a seller or reporter profile. Local blocked-seller references remain until you unblock or reset eBay preferences; ordinary preview expiry and account-deletion refreshes do not clear those safety preferences. Contact us to request removal or correction of a safety record. We will consider the request and explain any continuing need to retain a minimal suppression reference. Resetting local preferences does not delete submitted server reports.

We retain support, subscription and app-update information only for as long as needed for the purposes described here, including resolving requests, verifying entitlements, investigating update failures, dealing with disputes and meeting applicable legal record-keeping requirements. Retention depends on the nature of the record and those requirements. Contact us to request deletion of information held by us or our processors; we will explain any information we must retain and why.

Your choices and privacy rights

You can review and correct local records, export your data, remove photos and delete local data in the app. Depending on the law that applies to you, you may also have rights to access, correct, erase or receive a portable copy of personal information we hold, restrict or object to processing, and withdraw consent. We do not use personal information to make solely automated decisions with legal or similarly significant effects.

Email us to exercise these rights. We may ask for limited information to verify and locate the relevant record, such as a store transaction reference; you do not need to send your full inventory. You can complain to the UK Information Commissioner’s Office or your local data protection authority.

Security and children

We use reasonable safeguards appropriate to the information involved, including encrypted connections for subscription and app-update services. No storage or transmission method is completely secure. Protect access to your device, install updates and keep a usable backup of important records.

Haulfolio is intended for people managing resale activity and is not directed to children under 13. If you believe a child has provided us with personal information, contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy as the app or legal requirements change. We will update the effective date and provide an appropriate notice of material changes. Where required, we will obtain consent before a new use of personal information.