Privacy Policy

Last updated: June 11, 2026

1. Who we are

Stoq is built by PMFOR Paweł Pasterak, a sole proprietorship registered in Poland. You can reach us at contact@getstoq.app.

2. Data stored on your device

All your inventory lives in a local SQLite database (file stoq.db) on your phone. This includes:

• Products you add (name, brand, category, image URL, quantity, unit, notes, barcode)
• Batches (delivery date, expiry date, quantity per batch)
• Shopping list items
• Language and theme preferences
• AI usage counter (how many AI scans you used this month, only locally)

We do not have access to this data. If you delete the app, the database is removed by iOS along with it.

3. Data sent off your device

Open Food Facts (barcode lookup)

When you scan a barcode, Stoq queries the public Open Food Facts API to fetch the product name, brand, and image. This is a single request containing the barcode number, no personal data attached. Open Food Facts is a non-profit, open-data project. Their privacy notice: openfoodfacts.org/privacy-policy.

Anthropic Claude (AI scans)

When you use the "Receipt / Multiple items" feature, Stoq sends the photo to Anthropic's Claude Haiku 4.5 API for product recognition. The request contains the image and a system prompt. Anthropic processes it according to their privacy policy (anthropic.com/legal/privacy). We do not store the photo on our end, we send it, receive the response, and the photo is discarded.

Apple Mail (contact form)

When you tap "Send" in the Contact form (Info → Contact), Stoq hands the message + attachment off to your iOS Mail app. The email is sent through your own configured email account, not ours. We receive it as a regular email at contact@getstoq.app.

What we do NOT do

• We do not run a Stoq server or maintain Stoq accounts
• We do not have analytics in the app (no Firebase, no Mixpanel, no Amplitude)
• We do not have ads
• We do not have third-party SDKs that track you
• We do not sell, share, or rent your data

RevenueCat

When you start a free trial or purchase a subscription, RevenueCat processes the subscription on our behalf.

• What is sent: an anonymous device identifier and your purchase receipt (signed by Apple)
• What RevenueCat does NOT receive: your name, email, payment details (Apple processes payment directly)

RevenueCat privacy policy: https://www.revenuecat.com/privacy

Apple App Store

All payments are processed by Apple through your Apple ID. Apple may share crash data and basic device information (model, OS version) with us via App Store Connect Analytics.

• What Apple sends us: anonymous crash logs, aggregated download/usage stats
• Apple privacy policy: https://www.apple.com/legal/privacy/

4. The website (getstoq.app)

The website you are reading uses minimal cookies. By default we only set what is strictly necessary for the cookie consent banner itself. With your consent we may enable Google Analytics 4 (anonymized IP) to measure aggregate traffic. See the Cookie Policy for details and to change your preferences.

5. Children

Stoq is not directed at children under 13. The app contains no chat, social features, or advertising.

6. Your rights (GDPR / RODO)

Since we do not collect personal data from app users, there is no profile to access, correct, or delete on our side. If you have contacted us by email, you can ask us to delete that correspondence at contact@getstoq.app. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

7. Security

The app uses iOS's standard sandboxing for the local database. API calls (Open Food Facts, Anthropic, Apple) go over HTTPS.

8. Changes to this policy

If we make material changes, we will update the "Last updated" date at the top and, if you have given consent on the website, surface the new version. You can always read the current version at getstoq.app/privacy.html.

9. Contact

Questions? Write to contact@getstoq.app.