Privacy should be a product feature, not a footnote.

1. Scope and who we are

This Privacy Policy applies to the Ghost Inventory Android app, Ghost Cloud, the ghost-technologies.net website, and product-support communications. “Ghost,” “Ghost Inventory,” “we,” and “us” refer to the Ghost Inventory service. Ghost Inventory is the product and business identity used for the service; ghost-technologies.net is the service domain.

Privacy Contact: Ghost Inventory Privacy Contact: support@ghost-technologies.net.

2. Information Ghost may handle

Account and authentication information

• Email address, account identifier, authentication status, account timestamps, and information needed for confirmation, password reset, session restoration, and security.
• If you choose Google Sign-In, Google may provide a sign-in credential and basic account information made available through that sign-in flow, such as an email address and account identifier.
• Acceptance versions and timestamps for the Terms and Privacy Policy, plus your separate optional marketing-consent choice.

Inventory, property, insurance, and claim content

• Property and room records; item names, categories, condition, values, descriptions, brands, models, and serial or VIN information.
• Photos, receipts, warranties, appraisals, certificates, ownership records, repair estimates, notes, Claim Walkthrough evidence, and generated reports you choose to save.
• Insurance-preparedness or claim details you choose to enter, such as insurer name, policy or claim number, incident type/date, claim contact details, status, and notes.

Device features and permissions

• Camera access is requested only when you choose a capture feature that needs the camera.
• Biometric or device-credential authentication is performed by Android. Ghost receives the authentication result needed to unlock or protect the local vault; Ghost does not receive or store your biometric template.
• Android file/media pickers give Ghost access to files you deliberately select for inventory, evidence, backup, restore, or AI features.
• The Android launch build does not request microphone, location, contacts, SMS, or call-log permission. Normal Walkthrough AI records video without microphone audio.

Operational, diagnostic, and billing information

• App version, device model, Android version, plan, usage allowances, encrypted-storage usage, record or attachment counts, synchronization timestamps, encryption version, and technical request status needed to operate and secure the service.
• Error details and attachments you deliberately include in a support or bug report. In-app AI-result reports include the report reason, the AI feature, app version, and any optional note you choose to submit; Ghost does not automatically attach the underlying photo, document, inventory record, or raw AI result.
• Google Play product identifiers, purchase tokens, entitlement status, renewal or expiration information, acknowledgement/verification status, and related billing metadata. Ghost does not receive your complete payment-card number from Google Play.

3. How information is used

• Authenticate accounts, including optional Google Sign-In, and restore account sessions.
• Store and organize records you create and provide claim-preparedness tools.
• Generate Summary, Claim Snapshot, and Full Evidence Reports and show documentation-readiness guidance.
• Process item images, selected documents, or selected Walkthrough AI still frames that you intentionally submit for AI analysis.
• Verify subscriptions and one-time AI top-ups, apply plan limits, restore paid access, administer AI balances, and administer the shared Free monthly report allowance.
• Provide encrypted Ghost Cloud backup and restore for eligible plans.
• Fetch public exchange-rate reference data for optional display-currency conversion.
• Record legal acceptance and your separate optional marketing preference.
• Respond to support, security, privacy, and deletion requests; prevent abuse and fraud; and troubleshoot failures.

Ghost Inventory does not sell personal information and does not use private-vault content for targeted advertising.

4. Local vault and encrypted Ghost Cloud

Free-plan inventory is stored locally on the user’s device and does not include Ghost Cloud backup. Eligible paid plans can upload encrypted vault content and attachments to private cloud storage. The Android launch build is designed to encrypt supported sensitive private-vault data on the device before upload.

Ghost may retain limited readable operational metadata needed to run the service, such as account status, plan, usage counters, encrypted-storage totals, app/encryption version, request state, and timestamps. Ghost Inventory does not store a server-side key intended to independently decrypt the private-vault backup.

Users remain responsible for device security, account credentials, recovery material, and independent copies of irreplaceable documents.

5. Recovery passphrase and encrypted access

Your Ghost Account password and recovery passphrase serve different purposes. The account credential authenticates your Ghost Account. The recovery passphrase protects access to the encrypted vault key used for supported Ghost Cloud restore.

The recovery passphrase is created and handled on your device. Ghost Inventory does not store, retrieve, or display the plaintext recovery passphrase.

You can replace a lost or compromised recovery passphrase only from an already unlocked vault or trusted unlocked device after biometric, device-credential, or account-password re-authentication. Replacement re-wraps the same vault key and invalidates the previous recovery passphrase.

If the valid passphrase is lost and no usable unlocked vault or trusted unlocked device remains, or no successful encrypted backup exists, encrypted cloud content may be permanently inaccessible. The Ghost Account password alone cannot decrypt the vault.

6. AI Scan, Batch AI, Document Organizer, and Walkthrough AI processing

AI features are optional and begin only after a signed-in user deliberately starts analysis. Standard AI Scan prepares and sends the selected item image, requested detail level, image dimensions, and currency preference through Ghost’s protected service function to an AI processing provider. Standard item analysis uses the scan allowance shown in the app.

Batch AI Scan accepts up to 5 user-selected existing item photos at a time and analyzes them as separate inventory scans. AI Document Organizer accepts up to 5 selected receipt photos, document images, or PDFs at a time. In the Android launch build, the first page of a selected PDF is rendered locally for AI analysis. Ghost suggests document matches; a document is not attached and a receipt value is not applied until you confirm the match.

Normal Walkthrough AI records a temporary local video without microphone audio, samples useful still views locally across the recording, and sends prepared still views rather than the full temporary video as the normal item-analysis payload. The temporary Walkthrough AI video and transient extraction media are designed to be removed as the flow completes or is abandoned. A usable distinct item can consume one AI scan credit; empty or unclear views do not consume a credit, and automatic retry or bounded value verification does not add another credit for that same request. Repeated views of the same serialized item can be deduplicated within the Walkthrough session.

For secure retry and item-based credit accounting, Ghost may temporarily retain a client-key-encrypted Walkthrough result envelope together with random request/session identifiers, processing status, and an opaque item identity token for up to 7 days. The token is designed to help prevent duplicate charging within a Walkthrough session rather than store the raw serial number.

Claim Walkthrough is different from normal Walkthrough AI. When you deliberately capture post-incident Claim Walkthrough video, it is user-controlled claim evidence and may be included in an encrypted Ghost Cloud backup if you use eligible cloud backup.

AI results can be incomplete, inaccurate, or outdated. Users must review suggested details, matches, confidence, and value guidance before saving or confirming changes. AI guidance is not a professional appraisal, insurance valuation, coverage decision, or guarantee of reimbursement. High-value, rare, collectible, jewellery, artwork, antique, vehicle, or specialized items may require qualified professional appraisal or other independent evidence.

7. Service providers and processing outside Canada

Ghost uses service providers only as needed to operate the service. Depending on the feature you use, these can include:

• Supabase for authentication, database services, Edge Functions, and private cloud storage. Ghost’s production Supabase project is configured in a Canadian region, although provider operations or support may involve other jurisdictions.
• OpenAI for user-initiated AI image/document analysis. Prepared media and request context needed for the selected analysis are transmitted to the API service. OpenAI’s API/business data practices and any configured retention controls apply to that processing.
• Google for optional Google Sign-In, Google Play Billing, purchase verification, Play Integrity, app distribution, and subscription management.
• Bank of Canada for public exchange-rate reference data. Ghost requests the public rate feed from the device and does not intentionally include Ghost Account or private-vault fields in that request.
• Website, email, and network providers used to deliver the site, authentication/service messages, and support communications.

Some service providers may process information outside Canada, including in the United States or other jurisdictions where they or their subprocessors operate. Information in another jurisdiction may be subject to the laws of that jurisdiction. To ask about Ghost’s use of service providers outside Canada or the related policies and practices, contact the Privacy Contact, Ghost Inventory at support@ghost-technologies.net.

8. Demo Mode

Demo Mode uses sample content in a read-only environment that remains separate from your real account and private vault. Demo actions do not create permanent records, upload demo inventory to Ghost Cloud, make purchases, consume real AI credits, or use the Free monthly report allowance.

Demo report previews and AI examples are generated from sample data and are not user records.

9. Google Play subscriptions and AI top-ups

Subscriptions and AI scan top-ups are purchased through Google Play. Google Play processes payment-account details and may provide Ghost with purchase tokens and purchase/subscription status so the purchase can be verified and applied to the signed-in Ghost Account.

Subscriptions renew automatically until cancelled through Google Play. Uninstalling Ghost Inventory or deleting the Ghost Account does not automatically cancel the Google Play subscription.

AI top-ups are separate one-time purchases and do not auto-renew. The launch configuration provides non-expiring bonus AI scans associated with the Ghost Account; monthly plan scans are consumed before available top-up scans. If Google Play later reports a refund, chargeback, reversal, or voided top-up, Ghost may revoke the credits associated with that purchase and may account for already-consumed bonus credits against future bonus-credit availability.

When paid access ends and the account returns to the Free plan, Ghost does not delete the existing local vault solely because of the downgrade. New Ghost Cloud backups pause. If an eligible encrypted backup exists, Ghost may retain the latest encrypted snapshot and associated encrypted cloud attachments for up to 90 days so the user can restore them during the downgrade retention period.

10. Website, support communications, and optional marketing

This website package does not include advertising trackers or analytics scripts and does not intentionally set advertising or analytics cookies. Hosting infrastructure may process basic network information such as IP address, browser type, requested page, and timestamps for security and delivery.

When you contact support, Ghost receives the email address, message, and attachments you deliberately send. The in-app bug-report flow may prepare device and app-version details. The in-app AI-result reporting flow sends the selected report reason, AI feature, app version, and any optional note you enter. These reporting flows are designed not to automatically attach private inventory content, property addresses, photos, receipts, warranties, reports, raw AI results, recovery passphrases, or encryption keys.

Optional product news or preparedness marketing is separate from required service communications. Where consent is required, Ghost will use the optional marketing preference or another lawful basis. You can withdraw optional marketing consent. Commercial electronic messages sent by Ghost are intended to include applicable identification/contact information and a working unsubscribe method.

11. Retention, safeguards, and privacy incidents

Account and cloud data are retained while the account is active and as needed to provide requested services. Billing, security, fraud-prevention, and dispute records may be retained when reasonably necessary for accounting, legal obligations, purchase integrity, or protection of the service. Support correspondence may be retained long enough to resolve the request and maintain appropriate support records.

When an account moves from an eligible paid plan to the Free plan, new Ghost Cloud backups are paused. If an eligible encrypted backup exists, Ghost may retain the latest encrypted snapshot and associated encrypted cloud attachments for up to 90 days. After the retention period expires, restore is blocked and the expired encrypted snapshot and associated encrypted cloud attachments are queued for deletion through scheduled backend processing. Removal may occur shortly after expiry rather than at the exact expiry instant.

This downgrade process does not delete the local vault stored on a user-controlled device. Ghost uses administrative, technical, encryption, and access-control safeguards appropriate to the information under its control. Ghost will assess privacy/security incidents and provide notices or reports where required by applicable law.

12. Account and data deletion

Users can request deletion inside Ghost Inventory or through the public Delete Account page. The server-side deletion process targets the Ghost authentication account, encrypted Ghost Cloud snapshot, stored cloud attachments, and account-linked service records, subject to limited records that may be retained for legal, billing, fraud-prevention, dispute, or security purposes.

The in-app deletion flow is designed to remove the account-scoped private vault and Ghost-owned evidence files from the current device after server-side account deletion succeeds. A deletion request submitted through the website cannot remotely erase data stored on a device you control; you should clear Ghost Inventory app data or uninstall the app on any remaining device if you want those local copies removed.

Deleting a Ghost Account does not automatically cancel a Google Play subscription. Subscription cancellation must be completed separately through Google Play.

13. Access, correction, consent, and privacy requests

You may contact Ghost to ask about personal information under Ghost’s control, request correction of account information, withdraw optional marketing consent, ask about service providers outside Canada, or raise a privacy concern. Ghost may need to verify identity before acting on a request.

Some encrypted private-vault content may be unreadable to Ghost by design and can be accessed only through your unlocked vault and valid recovery material. Privacy requests will be handled in accordance with applicable law.

14. Changes and contact

We may update this policy as Ghost Inventory changes. If a material update requires renewed acceptance, the app may require you to review the updated Terms and Privacy Policy before continuing into the real vault.

Questions, access/correction requests, service-provider privacy questions, or privacy concerns: support@ghost-technologies.net. Attention: Privacy Contact, Ghost Inventory.