Privacy Policy for STOCKD

STOCKD - AI Pantry ("STOCKD," "we," "us," or "our") provides a mobile application and related services that help users manage pantry inventory, shopping lists, grocery planning, household collaboration, barcode and product lookup, and AI-powered pantry assistance (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use STOCKD. By using the Services, you acknowledge that you have read this Privacy Policy.

1. Scope

This Privacy Policy applies to:

• the STOCKD mobile application;
• any website or landing page that links to this Privacy Policy;
• our support, communications, and related customer interactions; and
• features, subscriptions, and tools made available through STOCKD.

This Privacy Policy does not apply to third-party services, products, or websites not owned or controlled by STOCKD, even if they are linked to or integrated with our Services.

2. Information We Collect

We collect information you provide directly, information collected automatically when you use the Services, and information received from third-party service providers that support the app.

A. Information You Provide Directly

Depending on how you use STOCKD, we may collect:

• Account information: name/display name, email, login/auth details, optional avatar.
• Pantry and grocery information: pantry records, shopping lists, product metadata.
• User content: photos, barcode scans, notes, labels, AI prompts and related context.
• Communications: support requests, feedback, and survey responses.
• Subscription information: plan status and purchase identifiers via Apple/RevenueCat.

We do not collect or store full payment card details when purchases are processed through Apple.

B. Information Collected Automatically

• IP address, device type/model, operating system/version, app version.
• Unique device or app instance identifiers, language/region settings.
• App activity and feature usage, crash/error diagnostics, and security logs.

C. Information from Third Parties

We may receive information from providers that support STOCKD, including:

• Supabase (authentication, database, storage, backend infrastructure)
• RevenueCat (subscription management and purchase validation)
• Apple App Store (distribution and purchase-related information)
• OpenAI (AI-powered features)
• Open Food Facts (product and food information lookup)

3. How We Use Information

• create and manage your account;
• provide pantry management, shopping list, and collaboration features;
• sync data across supported devices and manage shared pantry workflows;
• process and manage subscriptions;
• enable barcode scanning and product lookup;
• power AI features using pantry and shopping context;
• personalize your app experience and provide service communications;
• maintain, troubleshoot, monitor, and improve the app;
• protect against fraud, abuse, unauthorized access, and threats; and
• comply with legal obligations and enforce terms.

4. Legal Bases for Processing

Where required by law, we rely on one or more of the following legal bases:

• performance of a contract;
• legitimate interests (security, fraud prevention, analytics, support, improvement);
• consent (where required for optional analytics or permissions);
• legal obligation.

5. How We Share Information

We do not sell your personal information.

A. Service Providers

We share information with vendors that help us operate STOCKD, including Supabase, RevenueCat, Apple App Store, OpenAI, and Open Food Facts, only as reasonably necessary to provide services.

B. Shared or Group Features

If you use group/shared pantry features, relevant content may be visible to group members to support collaboration.

C. Legal and Safety Reasons

We may disclose information to comply with law, enforce policies, detect/prevent abuse, or protect rights and safety.

D. Business Transfers

If STOCKD is involved in a merger, acquisition, reorganization, financing, or sale of assets, information may be transferred as permitted by law.

6. AI Features

STOCKD may offer AI-powered features through OpenAI. To generate responses, we may send relevant prompts, pantry data, shopping context, and related content.

AI chat messages and related AI interaction data are retained for up to 7 days. Core content (such as pantry and list records) is retained until deleted by you or until account deletion, subject to limited backup/legal retention.

7. App Permissions and Device Features

Depending on features you use, STOCKD may request access to:

• Camera (barcode scanning and image capture)
• Photos (uploading pantry/item images)
• Notifications (reminders, alerts, and service messages)

You can manage permissions in device settings. Some features may not work correctly if disabled.

8. Analytics and Tracking

We use first-party product analytics to improve features, monitor performance, and maintain reliability. We do not sell data and do not use personal information for targeted advertising.

9. Data Retention

We retain personal information only as long as reasonably necessary or as required by law.

• Account info: while active and for a reasonable period after for legal/security operations.
• Pantry content and shopping lists: until deleted by you or account deletion.
• AI chat messages and AI interaction data: up to 7 days.
• Support communications and subscription records: as needed for support, compliance, and disputes.
• Analytics data: as needed for product and operational analysis, subject to available controls.

10. How We Protect Information

We use reasonable administrative, technical, and organizational safeguards, including:

• encryption in transit where supported;
• authentication and access controls;
• secure backend infrastructure;
• logging and monitoring for abuse/security events;
• vendor protections appropriate to the Services.

No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

11. International Data Transfers

Your information may be processed or stored in countries outside your home jurisdiction, which may have different privacy laws. Where required, we apply appropriate safeguards.

12. Your Rights and Choices

Depending on location, you may have rights to access, correct, delete, restrict, object, or port data.

To submit requests, contact: Stockd.work@gmail.com.

13. California Privacy Notice

If applicable law applies, California residents may request categories/sources/purposes of collection, disclosure categories, correction, deletion (with exceptions), and access to portable copies. STOCKD does not sell personal information.

14. Do Not Track and Global Privacy Control

We do not currently respond to browser-based Do Not Track (DNT) or Global Privacy Control (GPC) signals. STOCKD instead provides in-app privacy controls for optional analytics.

15. Children's Privacy

STOCKD is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without required consent. If discovered, we take steps to delete such data.

16. Third-Party Services

Current third-party providers include Supabase, RevenueCat, Apple App Store, OpenAI, and Open Food Facts.

These providers have their own policies and terms, which we recommend reviewing.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If material changes are made, we will revise the Last Updated date and provide additional notice where required.

18. Contact Us

For questions, requests, or concerns about privacy practices, contact:

STOCKD - AI Pantry

Email: Stockd.work@gmail.com