Trust
How we look after your data
An inventory of your home says a lot about you. Here is where it lives, who can reach it, and how you take it with you.
Stored in Canada
Your inventory, photos and receipts are stored with Amazon Web Services in Montréal (ca-central-1). Weekly database backups are copied to Calgary (ca-west-1), so they stay in Canada too.
The servers that answer the app's requests are run by Shelfes in Ontario. They handle your data in passing, but your inventory and photos are not kept on them.
Encrypted in transit and at rest
Every connection uses TLS 1.2 or newer. The database, file storage and backups are encrypted on disk with AES-256.
Each household is kept apart
The database itself refuses to return one household's rows to another, and automated tests try to break that rule on every change we make. Photos have their location data removed when you upload them.
What our staff can do
Staff can read a household's data only to give support or to investigate a problem. They sign in with multi-factor authentication, they can never sign in as you, and every change they make is recorded with the reason for it.
Export and deletion
On every plan you can download spreadsheets, a printable inventory or a full archive with every photo. When an owner deletes a household, everything in it is permanently removed after a 30-day grace period, and we keep only a count of what was deleted as proof. You can delete your own account in the app at any time, or by writing to privacy@shelfes.com if you cannot sign in.
Photo suggestions stay with us
When photo suggestions are on, a household's photos are analysed by an open-source model on servers Shelfes runs. They are not sent to another company or used to train a model. An owner or admin can turn them off in the household settings.
No tracking cookies
This website counts visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across sites. The app has no advertising or analytics trackers; its one cookie keeps you signed in.
Service providers
We use a small number of companies to run Shelfes. Each only receives what it needs.
| Company | What for | Where |
|---|---|---|
| Amazon Web Services | Database, file storage, backups and sending email | Canada |
| Cloudflare | Website hosting, domain names, attack protection and cookie-free visit counts. Delivers photos, receipts and exports, with cached copies for up to 30 days. Access requires a valid signed link. | Worldwide network |
| Stripe | Payments for Premium. We never see your card number. | Canada and the United States |
| Sentry | Error reports, with names and email addresses removed | United States |
| Open Food Facts | Product names for scanned barcodes. Only the barcode is sent, never your account or household. Its image host receives your device's IP address when a product photo preview loads. | France |
| Google, Apple | Optional sign-in and app store payments. Purchase identifiers and subscription status link a purchase to your household. Their own privacy policies apply. | Their own services |
| Microsoft 365 | Support email, including messages and attachments you send us | Microsoft cloud services |
Read the privacy policy · Read the terms · Ask us a question