Privacy policy

This policy explains what happens to your data when you use Spullio: the app for iPhone and iPad, and, until it closes on 31 December 2026, the web service at spullio.com with the old iPhone and Android apps.

Spullio is made by a solo founder in the Netherlands and is a product of vanYperen.com. For the personal data described in this policy that we process ourselves, vanYperen.com is the controller under the General Data Protection Regulation (GDPR).

• Stored in your own iCloud. Everything you record in Spullio (items, photos, documents, locations, tags, loans and households) is stored on your device and in your own iCloud account through Apple's CloudKit. Apple processes this data under its own terms and privacy policy. We, the developer of Spullio, have no access to it and cannot view, change or restore it.
• No account. There is no Spullio account, no password and no sign-in in the app. Apple uses your Apple Account to sync your data; we never receive it.
• Sharing a household. When you share a household, iCloud makes it available to the people you invite, with the permission you choose (edit or view only). Photos and documents in a shared household count towards the iCloud storage of the owner. You can stop sharing or leave a household at any time.
• Deleting. You delete your data in the app itself, or by removing Spullio's data from iCloud in your device settings. Because we have no copy, we cannot restore it for you. Use the export in the app if you want your own backup.

The Spullio app collects no data about you. Its privacy label in the App Store is “Data Not Collected”. The app contains no analytics or advertising software from third parties and does not track you across apps or websites.

• App Analytics and crash reports from Apple. We learn how Spullio is used and find problems only through Apple's own App Analytics and crash and hang reports. Apple only receives these from people who turned on “Share with App Developers” on their device, and gives them to us aggregated and without your identity. You can switch this off at any time in Settings › Privacy & Security › Analytics & Improvements.
• Email to support. If you email support@spullio.com, we receive your email address and what you write. We use it only to answer you, and do not keep the conversation longer than needed for that.
• Subscription. Spullio Plus is sold and handled by Apple. We never receive your payment details. Apple only tells the app whether a subscription is active.

• Apple iCloud and CloudKit. Storage and sync of your data between your own devices and with people you share a household with.
• Apple Intelligence. On supported devices, suggestions such as a name, brand and tags from a photo are made with Apple's on-device models. When a request needs more than the device can do, Apple may handle it with Private Cloud Compute, under Apple's privacy terms. We never receive these requests or their results.
• Barcode lookup. When you scan a barcode, only the barcode number is sent to Open Food Facts to look up the product. Nothing else is sent along.
• Apple features you choose to use. Siri, Shortcuts, Spotlight, widgets and the Reminders app work within Apple's services on your device and in your iCloud. Cards you send to a borrower go through the app you pick, such as Messages or WhatsApp. We do not receive any of this.

Until 31 December 2026 the web service at spullio.com, the old iPhone app and the Android app keep working, read-only from 1 December 2026. For them we still process your account and inventory data as before: in Supabase (database and file storage in the EU) and Clerk (sign-in), with Vercel for hosting, Resend for service emails, Stripe for web payments, RevenueCat for subscriptions in the old iPhone app, and Google Gemini for photo recognition in the web app when you use it.

Moving to the app copies your data from spullio.com into your own iCloud. Your account on spullio.com stays unchanged until the closing.

After 31 December 2026 we keep the web data until 31 January 2027 as a safety net, so people who move late can still be helped. Then we make a final encrypted backup and switch the services off. We keep that backup for 90 days, until 1 May 2027, only to supply exports that people request late. After that we delete everything, including your account at Clerk and your contact details at Resend.

Deletion on request: until 31 December 2026 you can delete your account yourself on spullio.com. After that, email support@spullio.com and we delete your data, also from the backup.

In the app, the security of your data depends on your device and your Apple Account. Protect them with a passcode and two-factor authentication. For the web service we use encrypted connections, access control, and keep access to production data limited to the founder.

This website only uses cookies that are needed to sign in to the web service (for existing users) and to remember your language. We do not use advertising or tracking cookies. To count page visits, the site uses Vercel Web Analytics, which works without cookies and does not identify you.

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, and to receive your data in a portable format. For data in the app you exercise most of these yourself, because it lives in your own iCloud. For data on spullio.com or in an email to support, contact us at support@spullio.com.

You may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Where Apple stores iCloud data is governed by Apple's terms. The web service's database and files are stored in the EU. Some providers of the web service (such as Clerk, Vercel, Resend, Stripe and Google) are based in the United States; for them we rely on appropriate safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

The Spullio app is suitable for everyone and collects no data about its users. The web service was not intended for children under 16. If you believe a child under 16 has an account on spullio.com, contact us and we will delete it.

We update this policy when something changes and show the date at the top. We will update it again when the web service has closed.

Questions or requests about your data: email support@spullio.com. Spullio is a product of vanYperen.com, the Netherlands. We answer personally.