Privacy Statement

Local-first inventory

BinThere requires Sign in with Apple to open the app. Graywheel operates a separate BinThere account service for sign-in. Inventory remains local-first and is not uploaded to that account service.

Inventory details, location names, item photos, image fingerprints, sale status, posted locations, prices, and app settings are stored on the user's device unless the user chooses to export a backup, enables automatic backup files, or opts into iCloud Sync. Optional iCloud Sync stores inventory details, locations, managed lists, retained item photos, posting details and sale history in the user’s private Apple CloudKit database for devices using the same Apple Account. Image fingerprints, Photos identifiers and app settings remain device-local. Backups may be stored in the user's private iCloud Drive or on the device, according to the user's selection.

Apple sign-in and account information

Signing in creates or reuses your BinThere account. Apple provides an app-specific user identifier, your email address or Hide My Email relay address, and your name if supplied. Graywheel stores these details, an internal account identifier, account status, and account creation and sign-in times. BinThere does not receive your Apple Account password.

The account service stores encrypted Apple authorization tokens and session records to verify sign-in, recognize returning users, and revoke access when an account is deleted. A session credential is stored in the device Keychain. Network requests also expose connection information, such as an IP address, to the hosting provider; it is used to deliver and protect the service, including limiting repeated requests.

Service providers

Apple handles Sign in with Apple and optional iCloud services. Cloudflare hosts the BinThere account service and its account database and processes account information on Graywheel’s behalf. Authorized Graywheel administrators may access account information to operate and support the service. Inventory details and photos are not sent to Cloudflare by the account service. Content you choose to send to support is handled separately from automatic account sign-in.

Account retention and deletion

Account information is retained while your BinThere account exists. Choose Settings → Account → Delete Account and confirm with Apple to request deletion. This signs out all devices and removes your account profile. If Apple is temporarily unavailable, minimal account identifiers and encrypted authorization information are retained until token revocation and deletion can finish. A short-lived security record prevents in-flight requests from recreating the deleted account.

Session credentials expire after 30 days; expired records are removed by scheduled cleanup. Operational events containing an event type, time, and random event identifier, without your name, email, Apple user identifier, or credentials, are retained for up to 90 days before scheduled cleanup.

Signing out is not account deletion. Deleting your login account does not erase inventory on your device, Photos, private iCloud storage, or exported backups. Remove or export inventory using the app’s existing controls before deleting your login if desired. Apple and other storage services control copies held under their own settings and policies. Contact Graywheel to ask about access, correction, or deletion of account information.

Camera and Photos

BinThere asks for camera access so users can take item photos and scan location barcodes. It asks for Photos access only when users choose existing images, choose or create an inventory album, or save full-quality camera photos to Photos.

When a user takes or imports a photo, BinThere keeps an app-sized local copy for inventory use. If Save originals to Photos is enabled, a camera photo is saved to the user's Photos library or selected inventory album at full available resolution using the aspect ratio selected in BinThere's camera.

Local troubleshooting history

BinThere automatically keeps a small technical history on this device to help explain recent problems. It covers the preceding 24 hours and is limited to 500 events; a report can include up to 200 recent events. It contains fixed operation and error codes, timing and duration information, coarse counts, app and iOS versions, hardware model codes, layout information, and random diagnostic identifiers. It excludes inventory fields, item and location identifiers, search text, photos, recognition content, credentials, and raw logs.

This history stays on your device unless you submit a support report with Include Diagnostics enabled or explicitly export and share a reviewed report. No background diagnostic uploads occur in this version, including for users who previously enabled automatic sharing. Diagnostic files are stored separately from inventory, protected by device security, and excluded from backups. Expired entries are removed when the app next accesses diagnostic storage. Settings → Support → Clear Local Diagnostics clears the local history; new technical events continue to be recorded.

Crash and performance diagnostics

Apple MetricKit may provide delayed crash, hang and performance observations. BinThere keeps only selected technical categories and numeric measurements in its bounded local history, not raw diagnostic dumps or full crash stacks. Observations must belong to the current build and a reporting interval beginning after local collection started or was cleared. No screenshots, inventory contents, photo recognition results, screen recordings or recordings of your taps are collected automatically.

Diagnostics received through optional automatic sharing in earlier app versions remain account-linked and expire after 30 days. Delete Shared Diagnostics requests deletion of those earlier uploads and revokes their server sharing permissions; submitted support reports are separate. Server deletion requires a connection. Signing out clears this device’s associated diagnostic history, queued reports and receipts.

Reports you choose to send

Report a Problem lets you review a description, basic app and device information, optional recent technical events, and an optional screenshot before submitting them with your BinThere account. Include Diagnostics is enabled by default for each new report; you can turn it off to exclude recent technical events or remove the screenshot before sending. Basic app and device information is sent with every report. No background diagnostic uploads occur.

Text and visible screenshot contents may reveal private information. Share only what you want support staff to see. BinThere resizes and re-encodes the selected screenshot to remove source metadata such as GPS information; visible information is not automatically blurred. No screenshot is captured or attached automatically.

Reports, copied technical context and screenshots expire after 90 days, whether open or resolved. Pending reports and screenshot uploads remain locally for up to seven days, within storage limits. Completed report receipts may remain locally for up to 90 days so you can identify or delete a report. Use the report’s Delete Report control while its receipt is available, or contact Graywheel if it is no longer shown. Server deletion requires a connection.

When signed out, you can prepare a reviewed report file and choose whether and where to share it. Preparing or saving that file does not submit it to Graywheel. Copies you export or share are controlled by you and the receiving service.

Support access and deletion

Cloudflare hosts Graywheel’s support database and private screenshot storage. Authorized Graywheel administrators can read submitted reports and account-linked diagnostics to operate and troubleshoot BinThere. Access to report contents and account diagnostic views is audited. Minimal support administration records, including the administrator, action, report or diagnostic reference, and time, are retained for up to 90 days; they do not contain report text or screenshot pixels.

Deleting your BinThere account removes its support and diagnostic records as part of account deletion. Private screenshot deletion is retried if temporarily unavailable. Expired records stop being available to users and administrators while scheduled cleanup removes stored rows and files. None of these actions erases your inventory, photos, iCloud data or backups.

Hosting providers process connection information to deliver and protect the service and may retain recovery copies under their own retention policies. Deletion from active storage does not promise immediate removal from every provider recovery copy.

No advertising or tracking

Graywheel uses account information, submitted support content and optional diagnostics to provide and secure BinThere, respond to reports, and improve reliability and performance. Graywheel does not sell or rent this information or use it for advertising or cross-app tracking. The app does not include advertising or third-party analytics or tracking SDKs.

The account and support services cannot browse, recover, or delete your inventory database. Authorized support administrators can see content you explicitly include in a report, including any inventory details visible in your text or screenshot.

User sharing

Users may choose to share photos, generated location barcodes, item details, backup files, or other content through iOS sharing features or other apps. A BinThere backup can contain inventory details and locally retained item photos. When a user stores or shares content outside BinThere, including through iCloud Drive, the destination service handles that content under its own policies.

Retention, deletion, and backups

Inventory data and local photo copies remain on the device until the user edits or deletes items, uses cleanup settings, removes the app, or changes the underlying device storage or Photos library. User-created BinThere backup files remain in their selected Files or iCloud Drive location until the user or configured automatic-retention policy removes them.

App data may also be included in device backups, iCloud backups, or device transfers depending on Apple settings.

Children

BinThere is not directed to children and Graywheel does not knowingly collect personal data from children through the app.

Security

BinThere uses Apple’s device security, app sandboxing, Photos permissions and backup settings to protect local data. Account and support requests use encrypted connections. Support storage is private and administrator access is restricted, but reports are readable by authorized Graywheel support staff; they are not end-to-end encrypted against Graywheel. Keep your device, passcode, Apple Account and backups protected, and do not include passwords or access tokens in a report.

Changes

This statement may be updated as BinThere changes. The latest version will be available in the app and at the canonical URL below.

Contact

For privacy questions, contact Graywheel through graywheelhq.com/contact.html.