Privacy Policy
Effective Date: July 30, 2026
At Quartermaster ("we," "our," or "us"), we value your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, and handle your data when you use the Quartermaster mobile application, the physical Scanner Station hardware, and our cloud services (collectively, the "Services").
1. Information We Collect
Account Information
When you register for a Quartermaster account, we collect:
- Email Address: Used for passwordless authentication (Magic Link or 6-digit OTP code) and account management.
- Profile Settings: Dietary preferences, name, and household configuration options.
Household & Provision Data
To coordinate inventory tracking across family members, we store:
- Inventory item names, quantities, categories, and expiration dates.
- Custom storage locations (e.g., Freezer, Pantry, Kitchen Fridge) and shopping list entries.
- Barcode and QR code scan history logs.
Voice & Audio Data
When you use voice features, microphone audio is processed to transcribe your commands (e.g., "Add 2 ribeye steaks to the freezer"). Audio is processed ephemerally solely to fulfill your requests and is not retained for AI training.
Hardware Station Node Data
If you deploy a physical Quartermaster Scanner Station, we collect:
- Node serial number / device ID.
- Connectivity status and device operation logs.
2. How We Process & Share Data
We do not sell, rent, or monetize your personal data. We utilize trusted cloud infrastructure to operate the service:
- Supabase Cloud: Encrypted database hosting and row-level security (RLS) isolation between households.
- OpenAI (GPT-4o & Whisper): Transient voice-to-text transcription and natural language command parsing.
- Resend SMTP: Transactional email delivery for authentication passcodes from
noreply@send.quartermaster-app.com. - Firebase (Google): PWA web hosting and build distribution.
- Open Food Facts: Open-source product barcode catalog lookup.
3. Data Security & Encryption
All data transmitted between Quartermaster apps and backend servers is encrypted in transit using TLS/HTTPS and WSS. Database access is protected by PostgreSQL Row-Level Security (RLS) policies, ensuring that only authenticated members of your household can access your data.
4. Account Deletion & Data Retention
You have complete control over your data:
- In-App Deletion: You can delete your account and all associated household records instantly under Settings $\rightarrow$ Account & Security $\rightarrow$ Delete Account & Data.
- Web Deletion Request: You can also request deletion anytime at /docs/account-deletion or by emailing support@send.quartermaster-app.com.
Upon deletion, your authentication record is immediately destroyed, and all linked household inventory data, locations, and settings are permanently and irreversibly purged.
5. Contact Us
If you have any questions or concerns about your privacy or data rights:
- Email: support@send.quartermaster-app.com
- Website: quartermaster-app.com