How we look after your data
An inventory of your home says a lot about you. Here is where it lives, who can reach it, and how you take it with you.
Stored in Canada
Your inventory, photos and receipts are stored with Amazon Web Services in Montréal (ca-central-1). Weekly database backups are copied to Calgary (ca-west-1), so they stay in Canada too.
Encrypted in transit and at rest
Every connection uses TLS 1.2 or newer. The database, file storage and backups are encrypted on disk with AES-256.
Each household is kept apart
The database itself refuses to return one household's rows to another, and automated tests try to break that rule on every change we make. Photos have their location data removed when you upload them.
Export and deletion
On every plan you can download spreadsheets, a printable inventory or a full archive with every photo. When an owner deletes a household, everything in it is permanently removed after a 30-day grace period, and we keep only a count of what was deleted as proof.
No tracking cookies
This website counts visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across sites. The app has no advertising or analytics trackers.
Service providers
We use a small number of companies to run Shelfes. Each only receives what it needs.
| Company | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, file storage and sending email | Canada |
| Cloudflare | Website hosting, domain names, protection from attacks, and cookie-free visit counts. App traffic passes through it but is not stored. | Worldwide network |
| Stripe | Payments for Premium. We never see your card number. | Canada and the United States |
| Sentry | Error reports, with names and email addresses removed | United States |
| Open Food Facts | Product names for scanned barcodes. Only the barcode is sent, never your account or household. | France |
| Google, Apple | Sign-in, only if you choose to continue with them | Their own services |