Privacy policy

The short version

• Almost everything you put into Stockd Up never reaches us. Your inventory lives on your phone and, if you switch on backup, in your own iCloud account.
• There is no Stockd Up account and no Stockd Up server holding your inventory.
• We do not sell your data, we do not show you ads, and we do not track you across other apps or websites.
• A few features send small amounts of data to other services to work. Scanning a barcode sends the barcode number to a product database so the name can be filled in for you.
• If you agree, we send the barcode and name of products we couldn’t recognise, so the product list can learn them. Nothing about your home goes with it.
• You can export everything to a spreadsheet, or delete the lot, yourself at any time.

The rest of this policy explains the detail. It covers both the Stockd Up app and this website.

Who we are and how to contact us

Stockd Up is provided by Novaro Digital Labs Ltd ("Stockd Up", "we", "us", "our"), which is the data controller for the limited personal data described in this policy.

You can contact us about privacy at hello@stockd-up.com.

If your question relates to data held in your own iCloud account, that account is provided by Apple and Apple's privacy terms also apply to it.

What the app handles, and where it lives

Content you create. Your storage spaces, sections, items, quantities, dates, notes, prices, shopping lists, reminders, preferences, and any name, photo or emoji you set on your profile. This is stored on your phone and, if you enable backup, in your own iCloud account. We do not receive or keep a copy of it.

Barcodes you scan. When you scan a barcode, the barcode number is sent to Open Food Facts, an open product database, to look up the product name and category. Only the barcode number is sent. Your inventory and your identity are not.

Products we don’t recognise. If you turn it on, Stockd Up sends us the barcode and the product name you typed when we couldn’t identify something, so we can add it to the product list everyone uses. The pack size, the category, your App Store country and the app version go with it. Nothing about your home is sent — no storage spaces, no dates, no quantities, no notes — and nothing identifies you, your household or your phone. We ask before the first one is ever sent, and you can turn it off at any time in Settings, What you track.

Photos. If you add a photo to your profile, the app asks permission to use your camera or photo library. Photos are stored with your data on your device and in your own iCloud. They are not sent to us.

Voice. If you use voice control, your speech is processed by your iPhone's own speech recognition so the app can understand the command. We do not receive or keep recordings.

Diagnostics. We collect anonymous crash reports through Sentry so we can find and fix problems. These are configured to exclude personal information and screenshots, and they never include the contents of your inventory.

Subscription status. If you subscribe, the purchase is handled by Apple. We are told whether a subscription is active. We never see your card or payment details.

Support messages. If you email us for help, we process what you send so we can reply.

Camera, microphone, notification and location permissions are only requested when a feature needs them, and you can change or withdraw them at any time in your iPhone's settings.

What this website collects

This website carries no advertising and no tracking, and it sets no cookies. We do count visits using Cloudflare Web Analytics, which measures traffic without cookies, without storing anything on your device and without identifying anyone. See our Cookie policy.

If you join the waitlist, we collect the email address you give us and use it for one purpose: to tell you when Stockd Up launches, and to contact you about the beta if you have asked to take part. We will not sell it, pass it to anyone for their own marketing, or use it for anything else. Every email we send includes an unsubscribe link, and you can ask us to delete your address at any time by emailing hello@stockd-up.com.

We delete waitlist addresses once the launch announcement has been sent and a reasonable period has passed, unless you have asked to stay on a list.

Why we process it, and our legal bases

Under UK and EU data protection law we rely on the following:

• To provide the app and its features, including looking up barcodes you scan. Performance of our contract with you, and acting on your request.
• To send reminders and notifications you set up, and to use voice, camera or location features. Your consent, given through the relevant device permission, which you can withdraw at any time.
• To keep the app reliable and fix bugs. Our legitimate interests in maintaining the app, balanced against your rights.
• To email you about the launch if you joined the waitlist. Your consent, which you can withdraw at any time.
• To count visits to this website. Our legitimate interests in knowing whether people are finding the site, balanced against your rights. No cookies are used and nobody is identified.
• To improve the shared product list from the reports you choose to send. These contain nothing personal, so no legal basis is required. We ask before the first one anyway.
• To answer support requests. Our legitimate interests in helping you, and performance of our contract.
• To comply with the law. Our legal obligations.

Who we share information with

We share data only with the services needed to run the features you use:

• Apple. Your own iCloud account, when you switch on backup. Also the App Store, which handles subscriptions, and your iPhone's own speech recognition.
• Open Food Facts. Receives the barcode number when you scan something.
• Sentry. Receives anonymous crash reports.
• Cloudflare. Stores the product reports you choose to send, and counts visits to this website. It briefly handles your IP address to work out which country a visit came from and to avoid counting the same visit twice. It sets no cookies, stores nothing on your device and does not build a profile of you.
• Our email provider. Stores your address if you join the waitlist, so we can send the launch announcement.
• Authorities. Where we are legally required to disclose information.

We do not sell your personal data and we do not share it with advertising networks or data brokers.

International transfers

Some of the services above may process data outside the UK and the European Economic Area, for example in the United States. Where that happens we rely on appropriate safeguards, such as an adequacy decision, the UK International Data Transfer Agreement, Standard Contractual Clauses, or an equivalent mechanism. Where your data sits in your own iCloud account, its location depends on Apple's settings and terms.

How long we keep information

Your inventory and content stay until you delete them, either in the app or by removing the app and its iCloud backup. Because this data lives on your device and in your own cloud, you control how long it is kept.

Product reports are kept indefinitely. They are the record of which products have already been added or turned down, they contain nothing personal, and they cannot be traced back to anyone.

Barcode lookups are momentary and are not kept as any kind of profile of you. Crash reports are kept for a limited period and then deleted. Support messages are kept for as long as needed to deal with your query and a reasonable period afterwards. Waitlist addresses are covered above.

How we protect information

We use reasonable technical and organisational measures to protect data. Information on your phone is protected by your phone's own security, including your passcode, biometrics and encryption. Your backup is protected by the security of your iCloud account. Anything sent to another service is sent over an encrypted connection.

No app or online service can be guaranteed to be completely secure, so please also keep your device, your Apple account and your passwords secure.

Your rights

If you are in the UK or the EU you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, to receive it in a portable form, and to withdraw any consent you have given.

Because almost all of your data lives only on your phone and in your own iCloud, you can already see it, export it to a spreadsheet and delete it yourself at any time, from Settings, Privacy and Data inside the app.

To exercise any right that involves us, email hello@stockd-up.com. We will respond within one month, and will tell you if a complex request needs longer.

If you are in a region with its own privacy laws, such as California, you have comparable rights, including to know what is collected, to request deletion, and to opt out of any sale of personal information. We do not sell it. Use the same address.

Automated decisions

Stockd Up does not make decisions about you that have legal or similarly significant effects using automated processing. Suggestions the app makes, such as a likely category, a use-by estimate or a freezer duration, are conveniences to help you rather than binding decisions, and you can always change or ignore them.

Children

Stockd Up is intended for general household use and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, please contact us and we will take appropriate steps.

Advertising and tracking

The app and this website carry no advertising, use no advertising cookies, and do not track you across other apps or websites. We do not build profiles of you and we do not sell anything about you to anyone.

Changes to this policy

We may update this policy from time to time. When we make a material change we will update the date at the top and, where appropriate, tell you in the app. Please check back occasionally.

Complaints

If you have a concern about how we handle your data, please contact us first at hello@stockd-up.com so we can try to put it right.

You also have the right to complain to a data protection authority. In the UK that is the Information Commissioner's Office at ico.org.uk. In the EU it is your local supervisory authority.