Privacy Policy

1. Who is responsible

Stockd is developed as a personal application. Questions about privacy can be directed to stackdkontakt@outlook.com.

2. What data we collect

We only collect what is necessary for the app to function:

• Email address and password – upon registration via Firebase Authentication.
• Inventory – items you add (name, barcode, expiry date, quantity, category).
• Shopping list – items you mark as missing or add manually.
• History – events such as waste, consumption, and entries, used for statistics within the app.
• Household information – a household ID and list of members (Firebase UIDs) for shared access.

We do not collect location, contacts, health information, or other sensitive information.

3. Purpose and legal basis

The data is processed solely to deliver the app's services:

• Keep track of the household's food inventory and shopping list.
• Provide statistics and waste history to the household's own users.
• Enable sharing of inventory between household members.

The legal basis is performance of a contract (GDPR Art. 6(1)(b)) – you have requested these features yourself by using the app.

4. Third parties

• Google Firebase (Authentication + Firestore) – used for login and data storage. Data is stored in Google's data centers (EU region where possible). See Google's privacy policy.
• Kassal.app – Norwegian grocery database used for product search and barcode lookup. Only search terms and EAN codes are sent; no personal data is shared. See Kassal's privacy policy.
• Open Food Facts – alternative lookup for barcode scanning. Same principle as above – no personal data is shared. See Open Food Facts' privacy policy.

No data is sold or shared with advertisers or other commercial third parties.

5. Camera access

The app requests camera access solely to scan barcodes on food items. The camera is only activated when you initiate scanning yourself. No images are stored or transmitted.

6. Notifications (push notifications)

The app can send local notifications about items that are about to expire. You can turn off notifications at any time in your device's system settings. Notifications are processed locally on the device and are not sent to any external server.

7. Storage and deletion

Data is stored in Firebase Firestore for as long as your account is active. You can delete your account and all associated data by contacting us at stackdkontakt@outlook.com or via the page for requesting account deletion. Deletion is carried out within 30 days.

8. Your rights

Under GDPR, you have the right to:

• Request access to the data we store about you.
• Request correction of inaccurate information.
• Request deletion ("the right to be forgotten").
• Withdraw consent where processing is based on consent.
• File a complaint with the Norwegian Data Protection Authority: datatilsynet.no.

Contact us at stackdkontakt@outlook.com to exercise your rights.

9. Changes

Significant changes to this policy will be announced in the app. The updated version is always available on this page.

10. Request account deletion

If you wish to have your account and all associated data deleted, you can use this page: Request account and data deletion.