Privacy Policy
1. The Short Version
Montrésor does not collect your personal data. There are no accounts, no sign-up, and no Montrésor servers holding your information. Everything you put into the App (your items, photos, valuations, and trips) is stored only on your device. We cannot see it, access it, sell it, or recover it. The rest of this Policy explains that in detail, along with the few narrow situations (app-store payments, and a planned optional estimate feature) where anything involves a party other than you.
2. Who We Are
Montrésor is operated by Aleksandra Zabkiewicz, an individual residing in Colorado, United States ("we," "us," "our"). We are the point of contact for anything in this Policy.
Contact email: hello@montresor.app.
3. Information We Do Not Collect
We designed Montrésor so that we do not receive your data at all. Specifically, the App has:
(a) No accounts or registration. We never ask for your name, email address, or password.
(b) No Montrésor servers storing user data. Your catalog is never uploaded to us.
(c) No analytics or tracking. We do not use analytics SDKs, advertising identifiers, or usage tracking.
(d) No crash reporting to us. The App does not send us diagnostic or crash data. (Your device's operating system may offer to share anonymized diagnostics with Apple or Google; that is controlled by your device settings and their policies, not by us.)
(e) No advertising. There are no ads and no ad networks in the App.
(f) No sale or sharing of personal data. We have nothing to sell or share.
4. Data You Store in the App (Stays on Your Device)
When you use Montrésor, you create records about your collection: item descriptions, brands, serial numbers, purchase prices and valuations, provenance notes, photos, wish-list targets, trips, and app settings. All of this is stored in a local database and local files inside the App's private storage area on your device. The database is encrypted with AES-256 (SQLCipher). The encryption key is protected by the PIN you set when you first open the App (Section 7) and by your device's secure key storage (iOS Keychain / Android Keystore), on top of your device's own security (passcode, biometrics, and operating-system encryption).
Because this data never reaches us:
(a) We cannot view, search, or analyze your collection.
(b) We cannot recover your data if your device is lost, damaged, or erased, or if you delete the App. Backups are in your hands (Section 6).
(c) A lawful request served on us cannot produce your catalog; we do not have it.
5. Device Permissions
The App asks for permission to use your camera and photo library so you can add photos of your items. Photos you capture or select are stored locally with your catalog and are used for nothing else. If you turn on biometric unlock (Section 7), the App also asks for Face ID / biometric permission; recognition happens entirely on your device, and the App never sees, stores, or transmits your biometric data. The App does not request your location, contacts, or microphone. You can change permissions at any time in your device settings.
6. Backups and Exports You Control
Montrésor includes an export feature that packages your catalog (database records and photos) into a single archive file, and an import feature that restores from one. Both are entirely user-initiated and user-controlled:
(a) When you export, your device's share sheet lets you choose where the file goes: the Files app, AirDrop, your own cloud storage, email, or anywhere else. The archive is encrypted by Montrésor: your records and photos are packaged into a single container protected with AES-256-GCM, and restoring it requires your recovery key — or, on the device that created it, that device's PIN. Keep the archive and your recovery key in separate places, and store both with the same care you would give a paper inventory of your valuables. Whatever service you send the file to handles it under that service's privacy policy, not this one.
(b) We never receive a copy of your export. Export and import happen entirely on your device.
(c) Separately, your device's system backup (iCloud or Google backup, if you have it enabled) may include the App's data as part of backing up your phone. That is governed by Apple's or Google's terms and your device settings.
Under the Terms & Conditions, keeping backups of your data is your responsibility; this section is the mechanism for doing that.
7. App Lock, PIN, and Recovery Key
The App requires you to set a PIN the first time you open it. Your PIN protects the key that encrypts your database (Section 4): without it, the App cannot be opened and your data cannot be read. The PIN never leaves your device. You can optionally add Face ID / Touch ID / fingerprint unlock on top. Biometric recognition is performed entirely by your device's operating system; the App only receives a yes/no result and never sees, stores, or transmits your biometric data.
When you set your PIN, the App generates a recovery key and shows it to you once. Save it somewhere safe: it is the only way to regain access if you forget your PIN. The recovery key is stored only on your device, in encrypted form; we never see it and cannot regenerate it. Because we hold nothing, we cannot reset a forgotten PIN, restore a lost recovery key, or unlock the App for you. If you lose both your PIN and your recovery key, the only remaining option is to reset the App, which permanently erases its data.
8. Payments
If the App offers paid subscriptions or purchases, payment is processed entirely by the Apple App Store or Google Play as merchant of record. We never receive your card number, billing address, or payment credentials. Apple and Google handle that information under their own privacy policies. At most, the App knows locally whether a subscription is active so it can unlock features.
9. Planned Feature: Market Estimates
The App does not currently transmit any of your data anywhere. If and when the App offers an optional market-estimate feature (as described in Section 6 of the Terms & Conditions), it will work as follows:
(a) An estimate request will transmit only non-identifying item details (such as brand, model, category, and condition) needed to produce the estimate.
(b) Requests will not include your name, contact information, photos, location, device identifiers, or anything else identifying you, and we will not retain the transmitted details after the estimate is returned.
We will update this Policy (and the in-app disclosure) before any feature launches, and the app-store privacy labels will be updated to match.
10. Data Deletion
There is no account to delete, and we hold no copy of your data to erase. To delete everything, delete the App from your device (and any backup archives you exported, and the App's data within any device backups you keep). Deletion is immediate and permanent; see Section 4 on why we cannot recover it.
11. Your Privacy Rights
Privacy laws such as the EU/UK GDPR, the California Consumer Privacy Act, and the Colorado Privacy Act give you rights over personal data an organization holds about you: access, correction, deletion, portability, and objection, among others. Because we do not collect or hold your personal data, these rights are satisfied by design: there is nothing for us to disclose, correct, or delete, and your data is already fully in your possession and portable (Section 6). If you believe we do hold personal data about you, or you have any privacy question, contact us at hello@montresor.app and we will respond. If you are in the EEA or UK, you also have the right to lodge a complaint with your supervisory authority.
12. Children
The App is not directed to children, and the Terms & Conditions require users to be at least 18. We do not knowingly collect personal data from anyone, including children.
13. Changes to This Policy
If we change this Policy, for example when the market-estimate feature launches, we will publish the updated version with a new version number and effective date, and the App will present material changes to you in the App before they apply to you. The version you accepted is recorded on your device.
14. Contact
Questions about this Policy: hello@montresor.app.