AbodeLedger is a private, local-first home inventory application provided by BlueHollow Software. This Privacy Policy explains how the current Android app handles information. AbodeLedger is intended for adults in the United States.
1. Information Stored By The App
The inventory information you enter, including property and location details, item names, categories, quantities, estimated values, barcodes, and app-created identifiers, is stored locally in the app's private storage on your device. Imported and captured inventory photos and their thumbnails are also stored in app-private storage. AbodeLedger does not require or provide an account.
AbodeLedger does not upload inventory information, photos, OCR output, barcodes, identifiers, or other user-entered values to BlueHollow Software, Supabase, an advertising provider, or an analytics provider. AbodeLedger does not include analytics, enabled crash reporting, cloud sync, or remote product lookup. Eligible Free builds may include the consent-gated advertising described below. Lifetime Pro billing uses the limited verification service in Section 4.
2. Camera, Photos, Barcodes, And Text Recognition
AbodeLedger accesses a camera or photo only after you start the related action. Barcode scanning uses the camera permission and a bundled on-device scanner. Inventory photo capture delegates to the device's camera app. Gallery import and text recognition use the operating system's photo picker and do not request broad access to your photo library.
Barcode recognition and Latin-text optical character recognition (OCR) run on the device with bundled models. Scanner frames, selected OCR source images, and recognized text are not sent to a server. OCR suggestions remain temporary unless you review and save information as an inventory item.
When a photo is added to an item, AbodeLedger creates an orientation-corrected private JPEG copy and thumbnail and removes embedded metadata, including location and device metadata. A capture date may be retained separately when it is available. Picker and processing cache files are removed after processing or recovery. AbodeLedger does not delete or modify the original photo outside the app.
3. Printing And Policy Access
Where QR-label output is available, AbodeLedger generates the PDF locally. It contains only an opaque item or location identifier and is handed to the operating system's print or save interface after you request it. The operating system, print service, printer, or destination you choose controls any copy after that handoff and may apply its own privacy terms.
The app includes this policy and opens it locally from Settings, so it remains available without an Internet connection or browser. Reading the in-app copy does not send a policy request or inventory value to BlueHollow Software, Supabase, or another provider. A public HTML copy is also maintained for Google Play and people who want to review the policy before installing the app. A web host receives ordinary request information, such as an IP address, request time, requested URL, user-agent, and technical security data, when that public page is visited. BlueHollow Software does not combine those web-request logs with local inventory.
4. Lifetime Pro Billing
AbodeLedger does not create an AbodeLedger or Supabase user account. Google Play processes a Lifetime Pro purchase using the Google account active in Play. To verify a purchase or restore, the app sends a configured product identifier, an opaque Google Play purchase token, a random request identifier, and a Google Play Integrity token over HTTPS to BlueHollow Software's Supabase-hosted verification function. Google receives the purchase and Integrity verification requests. These values are used only to verify the genuine app request, confirm purchase status, acknowledge the purchase, restore access, prevent abuse, and process later purchase-status notifications.
The app stores the raw purchase token in app-private storage encrypted with a key protected by Android Keystore. Android automatic backup is disabled, and portable inventory backups do not include the token or entitlement. The backend does not retain the raw token or place it in ordinary logs. It stores a keyed one-way token digest, product and purchase/acknowledgement state, verification and revocation timestamps, short rate-limit windows, and processed notification identifiers. It does not receive inventory, media, documents, OCR output, barcodes, app-created inventory identifiers, advertising identifiers, or user-entered inventory values.
A previously verified Pro grant remains usable during an ordinary offline or service failure. When the app can reconnect, it may recheck the protected token on foreground use when the last successful check is more than 24 hours old. Google Play can notify the backend of refunds, voids, cancellations, and completed pending purchases. Only an authoritative inactive result removes current Pro creation privileges; existing inventory remains readable, editable, exportable, and recoverable.
5. Advertising And Consent
Eligible Free builds may show one Google-served banner on the visible Home or Reports overview. Each placement requires its own release configuration; Reports ads remain disabled in current release configuration. Banners are removed when the overview is covered, the app is backgrounded or app lock is active. Lifetime Pro does not request or show these ads. Before AbodeLedger asks Google for an ad, Google's User Messaging Platform (UMP) checks whether a privacy message is required and whether ads may be requested. If UMP does not permit an ad request, AbodeLedger does not request the banner. Google's Android library may initialize core SDK components when an advertising-capable app process starts, before AbodeLedger requests UMP status; no inventory information is available to that provider or the later consent and banner paths. When required, Settings provides an Ad privacy choices entry so you can review the choices presented by Google.
Personalized advertising requires the consent choices presented through UMP. Otherwise Google may serve non-personalized or limited ads when its policies and the applicable consent state permit them. Non-personalized ads are not based on past behavior, but advertising delivery can still process information such as IP address, device and app information, coarse location inferred from an IP address, consent state, ad requests, and ad views or interactions for delivery, fraud prevention, frequency controls, and aggregate reporting. AbodeLedger explicitly removes Android's legacy advertising-ID permission and Privacy Sandbox advertising-ID, attribution, and Topics permissions. Google and participating advertising providers process the remaining advertising data under their own terms and configured retention practices.
AbodeLedger never places inventory records, media, documents, OCR output, barcodes, app-created inventory identifiers, or user-entered inventory values in an ad request. The checked-in development configuration uses Google's test advertising identifiers. Live ads require separate owner-controlled AdMob app and banner identifiers before release.
6. Retention, Archiving, And Deletion
Local inventory and app-private media remain on your device until you delete them through the app, clear the app's storage, or uninstall the app. Archiving an item is not deletion. Permanently deleting an item removes its app-managed record and associated private media. Removing one photo removes the app's private copies of that photo. Copies exported through an operating-system destination, and original photos outside the app, must be managed separately.
Android automatic cloud backup is disabled for AbodeLedger. User-requested portable backup encrypts inventory, photos, and documents before system-managed export; it never includes billing entitlement or purchase tokens. Minimal pseudonymous billing records are retained as needed to honor and secure the lifetime purchase, process later Play status changes, and support the product. They are not linked to an AbodeLedger account or local inventory.
7. Security And Limits
AbodeLedger uses Android app-private storage, permits only encrypted network traffic, removes embedded photo metadata from app-managed copies, and limits sensitive actions to explicit user requests. Advertising-capable builds require Internet and network-state access for UMP and ad delivery; those network paths do not receive inventory data. Billing-capable builds also use encrypted network access for the limited purchase verification described in Section 4. No security measure is perfect. Anyone who can unlock your device or access it with elevated or forensic tools may be able to reach local data. The optional app lock deters casual access but does not provide full database encryption. Keep your device, operating system, screen lock, app-lock setting, and any exported copies secure.
9. Children's Privacy
AbodeLedger is intended for adults and is not directed to children under 13. BlueHollow Software does not knowingly collect personal information from children through the app. If you believe a child has sent personal information to BlueHollow Software, contact us so the request can be reviewed and the information deleted when appropriate.
10. Questions And Privacy Requests
Because app data stays on your device, BlueHollow Software generally cannot access, retrieve, correct, or delete it for you. You can manage that data using the app and Android's app-storage controls.
For privacy questions or requests, email bluehollowsoftware@gmail.com. We use the information you voluntarily include in an email to review and respond to your request. The email service provider will process that message under its own terms. Request correspondence may be retained as reasonably necessary to respond, maintain appropriate records, protect security, and meet legal obligations. You may ask us to delete it, subject to those needs.
11. Changes To This Policy
BlueHollow Software may update this policy when AbodeLedger's behavior or legal requirements change. An updated policy will be included in an app update and posted at the public policy URL with a revised effective date. Material changes will be communicated in the app or through another appropriate channel when required.
Contact: bluehollowsoftware@gmail.com
© 2026 BlueHollow Software