Rowlo – Privacy Policy

Last updated: October 3, 2026

Who we are
Rowlo is an iOS application published by Occirama, Toulouse, France. Occirama is the data controller for the limited technical data described below. You can reach us at any time at sm4rtapp@gmail.com.

In short
Rowlo scans barcodes and writes them as rows into a Google Sheets spreadsheet stored in your own Google Drive. Your scans never pass through our servers. We do not ask for your name or your email address, we keep no account of our own, and we hold no mailing list. The only information that reaches us is technical: crash reports and a few anonymous usage events, plus whatever you choose to write to us yourself.

Camera
Rowlo uses your device camera for one purpose only: reading barcodes. The video stream is processed live on your device and is never recorded, stored or transmitted. Rowlo takes no photographs and asks for no access to your photo library. You can refuse or revoke camera access in iOS Settings; the app then simply cannot scan.

Your Google account and your Google Drive
Signing in with Google is required, because Rowlo's whole purpose is to write into a spreadsheet that belongs to you. Three things are worth being precise about:

• Rowlo requests a single Google Drive permission, drive.file. By design, this permission is restricted to the files the app itself created. Rowlo cannot see, read or list the rest of your Google Drive — not your documents, not your photos, not spreadsheets created by anything else.
• The spreadsheets Rowlo creates are stored in your Google Drive, under your own Google account. They are yours. We never receive a copy, and we have no way of reading them.
• Your name and email address, as provided by your Google profile, are shown inside the app so you can see which account is in use. They are held on your device only and are never sent to us.

Your use of Google Drive is governed by Google's own terms and privacy policy. You can review or revoke Rowlo's access at any moment from myaccount.google.com/permissions. Revoking it does not delete your spreadsheets; it only stops Rowlo from reaching them.

Scan data
Each scan records the barcode, the date and time, a quantity, and the operator name you have typed into the app. These rows are held on your device and written to your own spreadsheet when you synchronise. They are never sent to us.

When you contact support
If you write to us from inside the app, your message reaches us as an ordinary email, so we hold your email address and whatever you tell us for as long as needed to answer you. The app also attaches technical context, so that we can understand the situation without a long exchange of emails: device model and type, app version and build number, iOS version, interface language and region, whether a premium subscription is active, the date the app was installed, and the number of times the app has been opened. It contains no advertising identifier and no location data. If you would rather not send it, you can delete it from the email before sending, or write to us directly at the address below.

Crash reports
Rowlo uses Firebase Crashlytics (Google) to be told when the app crashes. A crash report contains the technical circumstances of the crash, the device model, the iOS version and a Firebase installation identifier. It is used solely to fix defects, on the basis of our legitimate interest in providing a working application.

Usage statistics
Rowlo includes Firebase Analytics (Google) and records a small number of non-identifying events, such as the app being launched or a button being pressed, in order to understand which features are actually used. These events are not linked to your identity and are never used for advertising.

Subscriptions
Premium subscriptions are sold through the Apple App Store. Payment is handled entirely by Apple: we never see your card details. To know whether your subscription is active, Rowlo uses RevenueCat, which processes a pseudonymous application identifier together with your App Store receipt. Apple's and RevenueCat's own privacy policies apply to that processing.

Data kept on your device
The operator name, your scan counters, usage duration and similar preferences are stored locally on your device. They never leave it, and deleting the app deletes them.

Processors and international transfers
The processors we rely on are Google (Firebase and Google Drive), Apple and RevenueCat. Some of them may process data outside the European Union; where that is the case, the transfer is covered by the European Commission's standard contractual clauses.

Retention
Crash reports and usage events are kept for the limited period applied by Firebase, after which they are deleted automatically. Emails you send to support are kept only as long as needed to deal with your request.

Your rights
You have the right to access, rectify, delete and export any personal data we hold about you, and to restrict or object to its processing. You may also lodge a complaint with your local data protection authority (in France, the CNIL). To exercise these rights, simply contact us at the address below.

Children
Rowlo is not intended for children under 16, and we do not knowingly collect their personal data.

What we never collect
Rowlo does not collect your precise location, your contacts, your photos, or any advertising identifier, and we do not sell personal data to anyone.

Changes to this policy
We may update this privacy policy from time to time. The date at the top of the page indicates the last revision.

Contacting us

Occirama — Toulouse, France
sm4rtapp@gmail.com