Privacy Policy
Last updated: October 17, 2026
Stockly is an inventory and asset tracking app for small businesses. This policy explains what data Stockly collects, why, who it is shared with, and what your rights are.
In short: we collect the minimum needed for the app to work — your email and name for the account, and the content you enter (products, assets, movements). No ads, no trackers, no data sales. You can delete your account and all of your data at any time from within the app.
1. Who is responsible
The data controller is the developer of Stockly. For privacy questions, contact us at membros96_mapeadores@icloud.com (see also the Support page).
2. Data we collect
2.1 Account
| Data | Purpose | Retention |
|---|---|---|
| Email address | Sign-in, password recovery, essential service messages | Until you delete your account |
| Password | Authentication. Stored hashed (bcrypt) — never in plain text | Until you delete your account |
| Display name | Attributing each change in the activity history | Until you delete your account |
If you sign in with Google or Apple, we receive only your email and name from the provider. With Apple's "Hide My Email", we receive an anonymous relay address.
2.2 Content you enter
Products, assets, categories, locations, stock movements, stock counts, history, product and asset photos, and your workspace name, country and currency. This content is yours. Free-text fields (notes, serial numbers, the person responsible for an asset) may contain personal data that you choose to enter — we treat all of it as your content and delete it on request.
Photos are kept in private storage, reachable only through short-lived signed links and restricted to members of your workspace.
2.3 Subscription
If you subscribe to Stockly Pro, the purchase is processed by Apple (the App Store). Stockly does not see your card number or billing address. We receive only the subscription status (active, cancelled, renewal date), linked to an anonymous identifier for your workspace.
2.4 Technical data
We do not collect advertising identifiers, we do not use analytics SDKs, and we do not track you across apps or websites. Our infrastructure provider records IP addresses transiently in request logs for security and diagnostics; these logs are not used to profile you.
Error reports. The app keeps a log of technical errors only on your device, for up to 14 days. Nothing is sent automatically. If you choose More → About → Send error report, your device's share sheet opens and you decide where to send it. The report contains the app version, the system version and language, the types of error and where in the code they happened — no name, email, identifiers or inventory content. You can clear it at any time with Clear error log; deleting your account clears it too.
Label reading. When you use Fill from… with a label photo while adding a product or an asset, the text of the label is read on your device (on iOS 26 or later, the device's own model may suggest fields). The photo and the lines read never leave your device: the photo is discarded after the review unless you choose Use as product photo or Use as asset photo, and only the fields you confirm are sent when you save the product or asset. While you fill in an asset's serial number, only that serial is checked against the other assets of your workspace, to warn you about a possible duplicate. Until then, the form is kept as an encrypted draft on this device only, deleted when you save or discard it, sign out, switch workspace, delete your account or after 7 days.
Table photos. When you import products from a Photo of a table, the table is read on your device and opened in the import preview. The photo never leaves the device and is not kept; only the rows you confirm in the preview are sent, like a spreadsheet import.
2.5 Push notification token
| Data | Purpose & legal basis | Retention |
|---|---|---|
| Apple Push Notification service (APNs) device token | Sending you a low-stock alert when one of your products drops below its minimum stock. Collected only after you turn this on — your consent is the legal basis, and it's off by default. | Removed when you sign out of that device, and automatically when Apple reports the token invalid (app uninstalled, or the OS rotated it). Deleting your account also removes it immediately (it's tied to your account and erased along with it). |
To stop low-stock alerts: turn the toggle off in the app (More → Notifications), or disable notifications for Stockly in iOS Settings — either one stops alerts from arriving, though only the in-app toggle also removes your stored device token right away.
3. Device permissions
- Camera — to scan barcodes / QR codes, photograph products and assets, and read product and asset labels on your device.
- Photos — to attach an image from your library to a product or asset.
- Notifications — to send a low-stock alert. Asked only after you turn the feature on in the app, never at launch; see §2.5.
No location, contacts, microphone or calendar permissions.
4. Who we share data with
| Third party | Role | What it receives |
|---|---|---|
| Supabase | Database hosting, authentication and file storage | All app data, at rest in the cloud |
| RevenueCat | Subscription status management | Anonymous workspace identifier and purchase history — no name, email or inventory data |
| Apple | Payment processing, app distribution, and delivering push notifications (APNs) | Payment data (Stockly has no access) and, if you turn on low-stock alerts, your device's push token |
| Email provider | Sending transactional email (confirmation, password reset) | Your email address |
We do not sell personal data and we do not share it for advertising.
5. Where data is stored
Data is stored on our provider's cloud infrastructure (Supabase). Automated backups may retain copies for the provider's retention period; deleted data leaves primary storage immediately and expires from backups within that period.
6. Your rights
- Access and correction — you can view and edit all of your data in the app.
- Export — export your products to CSV at any time (Pro feature).
- Deletion — under More → Account you can delete the workspace (erases all of its content) or delete your account (erases the account and any workspaces where you are the only member). Deletion is immediate and irreversible.
Cancelling your subscription does not delete your data, and deleting your account does not cancel your subscription — cancellation is done in your App Store settings.
7. Children
Stockly is a business tool and is not directed at children under 13. We do not knowingly collect data from children.
8. Changes to this policy
We may update this policy. Material changes will be announced in the app or by email. The date at the top shows the last revision.
Home · Support · Terms of Service · Stockly — Scan. Track. Done.