Open Inventory · de.polyxo.openinventory
App and demo privacy
Updated November 3, 2026
Scope and contact
This notice covers the Open Inventory iOS and Android apps (de.polyxo.openinventory), the product website and the public demo at demo.openinventory.polyxo.de. Contact for the website, demo and privacy requests: Polyxo Studios GmbH, Reudnitzer Straße 1, 04103 Leipzig, Germany, support@polyxo.de. The apps are distributed through the developer account of wirewire GmbH, Reudnitzer Straße 1, 04103 Leipzig; contact robert@wirewire.de. If you connect to your own or another inventory server, its operator is responsible for the accounts and inventory data processed there.
Your server and inventory data
The apps connect to the server address you enter. Your email address and password are sent to that server to sign in; you can use an API token instead. Inventory records, stock, locations, loans, names and assignments are read or transmitted according to your actions and permissions. The app does not additionally forward these records to a central Open Inventory server. External connections use HTTPS; supported local development addresses may use HTTP.
Photos, videos, documents and rooms
When you use these features, the app processes captured or selected photos, videos including audio, documents, scanned codes, room geometry and 3D models. Content you attach to inventory or submit for processing is sent to your selected server. Camera, microphone, photo selection and location access serve the relevant feature. Optional location can be saved with an inventory record. You can revoke permissions in device settings; manual input and file selection remain available as alternatives.
Storage on your device
Access tokens are protected by iOS Keychain or keys in Android Keystore. Settings, preview data and pending uploads may remain on your device. Signing out removes the active local credential but does not automatically delete all pending uploads or server content. Remove pending tasks in the app where the relevant screen offers this option. Android app data can be removed in system settings. iOS Keychain entries may survive uninstalling, so sign out before transferring your device.
Maps, scanners and optional AI
Android maps load styles and map data from OpenFreeMap (tiles.openfreemap.org), transmitting technical connection data such as IP addresses and requested map areas. iOS uses Apple MapKit. Android uses Google ML Kit for barcode and text recognition and Google Play Services for document scanning. Barcode and text recognition run on-device; Google components may process technical device, diagnostic and usage data and download required components. Google's and Apple's privacy information also applies. Optional AI features send selected content through your server to providers configured by its operator. Ask your server operator about providers and retention. The public demo has no paid AI services or external server integrations enabled.
Website and public demo
Serving and protecting the website and demo requires technical connection data such as IP address, time, requested URL, browser/device information and errors. The website stores a language preference cookie and a local browser theme preference. The web demo uses a necessary session cookie; native demo access does not require a personal account. The demo shows approved sample data in a read-only workspace. Visitors cannot upload their own inventory or media or change stock. Please do not submit private data to the public demo.
Purposes, legal bases and recipients
Processing supports requested features, support requests and secure operation. Where necessary, the legal basis is Article 6(1)(b) GDPR (a contract or pre-contractual request) or Article 6(1)(f) GDPR (legitimate interests in operating and protecting the service). Where consent is required, Article 6(1)(a) applies and consent can be withdrawn for the future. Necessary storage on your device supports the explicitly requested service. Hosting and technical providers process data to deliver their services. Your own server operator determines additional recipients, including storage, email and AI providers. Processing may take place outside the EEA; the operator must explain applicable safeguards. We do not operate an advertising or cross-app advertising tracking system in the apps and do not sell inventory data.
Retention and deletion
Local data remains for as long as required for app functionality and pending tasks or until you remove it. Your inventory server's operator sets server retention and deletion rules. Technical website and demo data is retained only as needed for operation, security, troubleshooting or legal obligations. Support correspondence is retained to handle the request and meet any applicable legal retention duties. For deletion of data we hold, contact support@polyxo.de. For an account on another server, contact its operator; we do not have automatic access. The apps do not offer personal account registration.
Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation, withdraw consent for the future and complain to a data protection supervisory authority. Contact support@polyxo.de for the website and demo, or your server operator for data on your own inventory server.