Privacy Policy

Last updated: July 2026  ·  Version 1.0  ·  This document will be updated when material changes are made.

Who we are

StoKHaus is a personal inventory and household management application developed and operated by ProgSoft. For the purposes of this policy, "we", "us", and "our" refer to ProgSoft. For data protection enquiries, contact us at support@stokhaus.dev.

What data we collect

We collect only what is necessary to provide the service:

• Account information: email address, display name, account identifiers (internal user ID, device identifiers).
• Authentication data: hashed passwords, OAuth provider tokens (Google Sign-In), session tokens. We never store your password in plaintext.
• Inventory data: the names, descriptions, photos, and organisation of items you add to StoKHaus. This data is yours.
• Settings and preferences: app appearance preferences, security settings, sync configuration.
• Device information: device type, operating system, a hardware-derived device identifier used for security and multi-device management.
• Subscription and billing data: subscription tier, subscription start date, purchase tokens (processed via Google Play). We do not store payment card details — these are handled entirely by Google Play.
• Error and diagnostic logs: anonymised crash reports and error logs used to identify and fix bugs. These are purged automatically after 90 days.

If you use Google Sign-In, we receive your Google account email address and profile name. We do not receive or store your Google password.

How we use your data

• To provide, maintain, and improve StoKHaus.
• To authenticate your identity and secure your account.
• To sync your data across your devices (if you enable sync).
• To process subscription payments via Google Play.
• To respond to support requests.
• To detect and prevent fraud and abuse.

We do not sell your personal data. We do not use your inventory content for advertising targeting.

Data storage and security

Your data is stored on Supabase infrastructure hosted in Frankfurt, Germany (EU). All data is encrypted in transit (TLS) and at rest (AES-256-GCM). Your inventory data in the app is additionally encrypted on-device using a key derived from your Recovery Phrase — we cannot access this data, and neither can Supabase.

Your local app data is encrypted with SQLCipher. Your Recovery Phrase is never stored in plaintext anywhere.

Data sharing

We share data only with the following third parties, strictly as necessary to operate the service:

• Supabase: database and authentication infrastructure (Frankfurt, EU).
• Google Play: subscription billing and payment processing.
• Google (OAuth): if you use Google Sign-In.
• Google Drive: if you enable Drive sync — your encrypted sync files are stored in your own Google Drive account, not ours.

We do not share your data with advertisers, data brokers, or any other third party.

Personalised suggestions

StoKHaus includes an optional "Personalised Suggestions" feature. If you enable this, we may use your inventory content to show contextually relevant product suggestions. This feature is off by default. You can toggle it at any time in Settings → Data & Privacy.

Data retention

• Your account data is retained for as long as your account exists.
• Error logs are purged automatically after 90 days.
• When you delete your account, all your data is permanently deleted from our systems within 30 days. Encrypted backups stored in your own Google Drive are not within our control and must be deleted by you.

Your rights (UK GDPR)

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you (use Settings → Data & Privacy → Download Account Data).
• Correct inaccurate data.
• Delete your account and all associated data (use Settings → Data & Privacy → Delete Account).
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at support@stokhaus.dev.

Children

StoKHaus is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

Changes to this policy

When we make material changes to this policy, we will update the version number and date at the top of this page and notify you within the app. Continued use of StoKHaus after changes take effect constitutes acceptance of the updated policy.

Contact

ProgSoft
Registered address: to be added before public launch.
ICO registration number: to be added before public launch.
Email: support@stokhaus.dev