Lendkeeper — Privacy Policy

Last updated: August 26, 2026

Lendkeeper is a ledger for things you lend: your items, their photos, and who has them. Because your library follows you across devices (and, for organizations, is shared with your team), your data is stored in the cloud under your account. This page explains what the app and the web dashboard handle, where it goes, and how to delete it. Lendkeeper shows no ads, contains no advertising SDKs, and never sells your data.

Your account

You sign in with a Google account through Firebase Authentication. The app receives your name, email address, and profile picture; we use them to identify you, show who's signed in, and (in organizations) show your teammates who did what. Nothing else is done with them.

Data you create

Everything you put into Lendkeeper is stored under your account in Google's Firebase services (Cloud Firestore and Cloud Storage, hosted on Google Cloud in the EU, europe-west1), encrypted in transit and at rest by Google's infrastructure:

• Items — names, categories, optional value and purchase date, and the photos you take of them (stored as compressed images, with small thumbnail copies for fast grids).
• Loans — what was lent, to whom, when it's due, optional notes and condition photos, and the loan history.
• Borrowers — the names and optional email addresses or phone numbers you enter for the people you lend to. You are responsible for having a basis to share someone's contact details; Lendkeeper only uses them to identify borrowers and (for organizations) to send loan reminders on your behalf.
• Organizations — the shared library, member list (names, emails, roles), kits, reservations, and an audit trail of checkouts and returns.

The app keeps a local copy of your library on your device so it works offline; changes sync when you're back online. Uninstalling the app removes the local copy but not your cloud data — see "Delete your account and data" below.

Reminders and notifications

Due-date reminders reach you as push notifications via Firebase Cloud Messaging. Organizations can enable a reminder ladder that also contacts borrowers about overdue items by email or SMS, sent through our email and SMS providers using the contact details the organization entered; each message links to a page showing only that loan. Reminders respect quiet hours and stop when the item is returned.

Purchases

• Lendkeeper Unlimited (personal, one-time) is processed entirely by Google Play. We receive confirmation of the purchase so the app can unlock it; we never see your payment details.
• Organization subscriptions are processed by Stripe. Payment details go directly to Stripe and never touch our servers; we store only the Stripe customer and subscription references needed to know an organization's plan. Stripe's handling of your data is described in Stripe's privacy policy.

Crash reporting

The app may send crash reports (stack traces, device model, OS version — no library contents) so bugs can be found and fixed. This is not used for advertising or profiling.

QR labels

Printed QR labels contain only an identifier for the item in your organization's library — no personal data. Scanning one requires being signed in as a member of that organization.

Delete your account and data

• In the app: you can archive items at any time, which removes them from your library view but keeps them (and their history) stored under your account so they can be restored. The app currently has no way to permanently delete an item yourself — use the email request below for that. Photos you replace do get permanently removed from cloud storage by a routine cleanup.
• Everything: to request that your account and all associated data are deleted, email bitflip.rocks@gmail.com from the Google account you signed in with. We'll delete your account, your personal library (including photos), and your personal data from any organizations, normally within 30 days. Data an organization holds about its inventory (for example, an audit trail entry that an item was returned) may be retained where the organization needs it, with your identity removed.

Children

Lendkeeper is not directed at children under 13, and we don't knowingly collect personal information from them.

Changes

If this policy changes, the new version will be posted at this address with an updated date above.

Contact

Questions? Email bitflip.rocks@gmail.com.