hangar.

Privacy policy

Last updated: 20 October 2026

Hangar is an inventory app for people who sell on Vinted, Depop and eBay. This policy explains what we collect when you use the Hangar iOS app and this website, why, who we share it with, and what you can do about it. Datalogic Consultants Limited, a company registered in Cyprus (“Hangar”, “we”, “us”) is the data controller. Contact: hello@tryhangar.app.

The short version. We store the inventory you create so it syncs between your devices and anyone you share a workspace with. We don’t show ads inside the app, we don’t sell your data, and you can delete your account from inside the app at any time. The app sends usage analytics, including screen recordings with your text and photos hidden, to PostHog so we can see where Hangar gets in people’s way; you can switch that off in the app (see “Usage analytics” below). It also sends an anonymous install and app-open signal to Meta, so we can tell whether our own adverts bring people to Hangar; see “Advertising measurement” below.

What we collect

Account. You sign in with Apple. We receive a stable Apple account identifier, your email address (which may be Apple’s private relay address) and, on first sign-in, the name you choose to share. We never see your Apple password. We also keep an Apple-issued token, encrypted, solely so we can revoke Hangar’s access to your Apple ID when you delete your account.

Your inventory. Everything you add in the app: item titles, brands, sizes, conditions, descriptions, measurements, private notes, prices, what you paid, what it sold for and any fees, photos, the shelves and boxes you name, QR label codes, and links to your listings on marketplaces. If you save a shipping QR code from a marketplace, that screenshot is stored as a photo too.

Voice descriptions. When you use “Describe it”, your phone transcribes your speech using Apple’s speech recognition (on-device where your iPhone supports it, otherwise Apple’s servers under Apple’s terms). Only the resulting text is sent to us; the audio never leaves your phone to reach Hangar.

Marketplace imports. If you import a listing from a link, we fetch that public listing page to read the title, description and photos. Vinted pages are fetched by our servers; Depop pages are fetched by your phone and the page content is sent to us to be parsed. We never ask for, store or use your Vinted or Depop login.

eBay connection. If you connect eBay, you authorise Hangar on eBay’s own site. We store an encrypted eBay access token, your eBay user ID, the postcode you enter as the item location, and the IDs of the business policies you pick. With that token we read your active eBay listings when you import them, publish listings, and end them when you ask. Your eBay password never touches Hangar.

Subscription. Purchases go through Apple. We receive signed transaction details from Apple (product, status, renewal and expiry dates, an anonymous transaction identifier) so we know which plan your workspace is on. We never see your payment card.

Usage analytics. The app tells PostHog, our product-analytics provider, how it is used: which screens you open and the main things you do (for example signing in, viewing the plans, starting a trial, saving, tagging, moving, listing or selling an item, and whether an import or AI fill worked), with basic details such as the marketplace chosen or how many photos an item has. It also records the screen while you use the app. Hangar’s own layout, icons, buttons and headings show as they are, but everything you type, all other text on screen (such as your items’ titles and notes, and names) and your photos are hidden, and the camera view, shipping labels and invite codes are always hidden. Hangar’s sign-in, tour, onboarding and plan screens hold only our own copy and are recorded as they appear. Our servers add your subscription events (trial started, auto-renew turned off or on, renewed, expired, refunded) with the plan and its status, so we can see which trials carry on and which don’t. This is all linked to your Hangar account ID and workspace ID, never your name or email, and carries your device model, iOS and app version, and an approximate location (country and city) worked out from your IP address. The app may now and then show a short survey, for example after you turn off a trial; your answers go to PostHog too. Switching off “Share usage data” in More → Preferences stops all of it, in the app and on our servers, straight away.

Technical. Sign-in sessions (stored as hashes), aggregate request metrics (route, status and timing, with no user identifiers), and server logs that may include error details. When something fails on our servers, an error report is also sent to Sentry, our error-monitoring provider, so we find out and can fix it. A report describes the fault: the error and where in our code it happened, which part of the service was being used (for example “POST /items”), and basic technical details of the request such as the app and iOS version. Before anything is sent we remove your IP address, your sign-in token, cookies, and the content of the request itself (what you typed or uploaded). An error message can occasionally contain an internal reference such as an item or account ID, or rarely an email address. Error reporting runs only on our servers, not in the app. The app includes two third-party SDKs: PostHog’s, for the usage analytics described above, and Meta’s, used solely for the advertising measurement described next. The app never asks for Apple’s tracking permission and never reads the advertising identifier.

Advertising measurement. We advertise Hangar on Facebook and Instagram. To know whether those adverts lead to installs, the app includes Meta’s SDK, which sends Meta an event when the app is installed and opened, and when a free trial or subscription starts through the App Store (the plan and price, never your payment details). Each event carries a random identifier created on your phone for this purpose (not your Apple ID, name or email), your device model and screen size, iOS version, app version, language, time zone, network operator and IP address, plus a crash report if Meta’s SDK itself fails. It never includes your inventory, photos, notes or prices. Because we don’t ask for tracking permission, Meta gets no advertising identifier and can only report results in aggregate (Apple’s SKAdNetwork and Meta’s Aggregated Event Measurement). For this data we and Meta Platforms Ireland Limited are joint controllers under Meta’s Business Tools terms; Meta’s privacy policy describes what it does with it.

Website. If you send the contact form, your name, email and message are delivered to our team chat so we can reply. With your consent, Google Analytics sets cookies so we can see which pages help people; if you decline, no analytics cookies are set. Your choice is stored in your browser.

Why we use it

  • To run the service (performance of our contract with you): storing and syncing your inventory, signing you in, showing your plan, generating QR labels, publishing to eBay when you ask.
  • AI features you choose to run (your consent, each time you tap the button): see below.
  • Keeping the service secure, honest and working (our legitimate interests): session management, abuse prevention, spend caps on AI, an audit log of actions taken by our staff, and error reports so we can find and fix faults.
  • Understanding how the app is used (our legitimate interests): usage analytics, screen recordings and surveys, so we can see where people get stuck and why they stop using Hangar, and fix it. You can object at any time with the “Share usage data” switch in More → Preferences.
  • Measuring our advertising (our legitimate interests): the aggregate install signal described under “Advertising measurement”, so we know which adverts are worth paying for.
  • Billing and legal obligations: keeping subscription records Apple sends us, and responding to lawful requests.
  • Website analytics (your consent): only if you accept cookies.

AI features

Photo auto-fill sends up to six of an item’s photos to an AI model, and “Describe it” sends the text transcript, to suggest listing fields. Our current provider is Anthropic (Claude); we may also use Google’s Gemini API. We use their business APIs under terms that do not permit your inputs to be used to train their models. We keep a record of each run (which workspace and item, which model, token counts and cost) but not the content sent or returned. Suggestions are only suggestions: you review and can change everything before it is saved or published. AI runs are capped per item and may be paused if our global usage cap is reached.

Shared workspaces

Hangar stores inventory in a workspace, not against a single person. If you invite a partner (or join someone else’s workspace with their invite code), every member can see and edit everything in it (items, photos, private notes, prices, costs, sales and fees) and sees the other members’ display names and roles (not email addresses). Anyone who has your invite code can join up to your plan’s member limit, so only share it with people you trust. When a member deletes their account, the workspace and its contents stay with the remaining members.

Who we share it with

We use these providers to run Hangar. None of them may use your data for their own purposes, with the one exception of Meta, noted below.

  • Fly.io: hosts our API in London, UK.
  • Neon: our Postgres database, hosted in London, UK.
  • Cloudflare: photo storage (R2), this website, and access control for our admin tools.
  • Sentry: error monitoring for our servers. It receives the error reports described under “Technical”, and stores them in Frankfurt, Germany.
  • PostHog: usage analytics, screen recordings and in-app surveys, described under “Usage analytics”, stored in Frankfurt, Germany (PostHog EU Cloud).
  • Apple: Sign in with Apple, App Store billing, and speech recognition on your device.
  • Anthropic and, where enabled, Google: AI suggestions, only for the photos and text you choose to send.
  • eBay: only if you connect it. When you publish, we send the listing title, description, condition, price, category, your chosen policies, the postcode you enter, and time-limited links to your photos (eBay copies them to its own servers). When you import, we fetch your active listings from eBay. Listings live in your own eBay account and are governed by eBay’s terms.
  • Vinted / Depop: their public listing pages are fetched when you import; nothing about you is sent to them. Hangar is not affiliated with Vinted, Depop or eBay.
  • Meta (Facebook and Instagram): the anonymous install and app-open signal described under “Advertising measurement”. Meta also uses it for its own advertising systems as a joint controller, under its own privacy policy.
  • Google Analytics: website only, and only with your consent.
  • Team chat (Slack/Discord): receives contact-form messages from this website.

We’ll also disclose data if the law requires it, or to a successor if Hangar is sold or merged (we’d tell you first). We do not sell personal data and never have.

Where it lives

We are a company registered in Cyprus, so EU data protection law (the GDPR) applies to everything we do, wherever you live. Our servers and database are in the UK, which the European Commission recognises as providing adequate protection. Some providers (Apple, Anthropic, Google, Cloudflare, eBay, Meta, PostHog, Sentry) process data outside the EEA and the UK, including in the United States. Where they do, we rely on an adequacy decision, such as the EU-US Data Privacy Framework where the provider is certified, or on the EU Standard Contractual Clauses, as included in those providers’ terms. If you are in the UK, the UK’s equivalent adequacy regulations and transfer addendum apply.

How long we keep it

  • Inventory and account data: for as long as your account exists. Items and photos you delete in the app are hidden immediately and erased when your account is.
  • Account deletion: deleting your account in the app (More → Delete account) is immediate: your profile, sessions, and every workspace where you are the only member (including its photos) are erased, Hangar’s access to your Apple ID is revoked, and we ask PostHog to erase your usage analytics and screen recordings. Residual copies in backups and logs are gone within 30 days. If we close an account ourselves, it is suspended immediately and purged after 30 days.
  • Subscription records: the transaction records Apple sends us are kept for accounting purposes after deletion; they contain no name or email.
  • AI usage records: kept for cost accounting; they record the workspace, the item, the model and the token counts, never the content sent or returned.
  • Error reports: deleted by Sentry after 30 days.
  • Usage analytics and screen recordings: deleted by PostHog after at most 12 months, or when you delete your account.
  • Advertising measurement events: held by Meta under its own retention rules; the random identifier lives only in the app on your phone and goes when the app is deleted.
  • Sign-in sessions: expire after 90 days of inactivity, or immediately on sign out.
  • eBay token: deleted when you disconnect eBay in the app or delete your account. You can also revoke Hangar from your eBay account settings at any time; eBay also notifies us if you close your eBay account, and we remove the connection.
  • Contact-form messages: as long as needed to handle your query.

Security

All traffic is encrypted in transit. Apple and eBay tokens are encrypted at rest, sign-in tokens are stored only as hashes and rotate on use, and photos are served through time-limited signed links. Our admin tools sit behind Cloudflare Access with a named allow-list, and every administrative action is written to an audit log. Our staff can see your name, email, plan and usage counts to support you; they cannot browse your items or photos through those tools. Screen recordings show how the app was used with your text and photos hidden, so they don’t reveal your items either.

Your rights

Wherever you live, you can ask for a copy of your data, have it corrected or deleted, restrict or object to processing, and take your data elsewhere. These are your rights under the GDPR (and UK GDPR if you are in the UK), and we give everyone the same ones. You can correct your inventory in the app, delete your account in the app, disconnect eBay in the app, switch off usage analytics in the app (More → Preferences → Share usage data), and withdraw cookie consent via “Cookies” in the footer. For anything else, including a full export, email hello@tryhangar.app and we’ll respond within one month. If you’re unhappy with how we handle your data you can complain to our lead supervisory authority, the Commissioner for Personal Data Protection in Cyprus at dataprotection.gov.cy, to the data protection authority where you live in the EU, or, if you are in the UK, to the Information Commissioner’s Office at ico.org.uk.

Children

Hangar is for people aged 18 or over, matching the marketplaces it works with. We don’t knowingly collect data from anyone under 18; if you think we have, email us and we’ll delete it.

Cookies and device storage

This website stores your cookie choice in your browser and, only if you allow it, Google Analytics cookies. The iOS app uses no cookies; it keeps a local copy of your workspace on your phone so it works offline, which is removed when you sign out. PostHog’s SDK keeps a random identifier and any not-yet-sent analytics in the app’s own storage (a new identifier after you sign out), and Meta’s SDK keeps its random identifier there too; both go when you delete the app. That local copy is included in your iPhone backups like other app data.

Changes

If this policy changes materially we’ll update the date above and, for significant changes, tell you in the app. See also our terms of service. For questions, email hello@tryhangar.app.