Version 2026-10-28. This page is the permanent record of this version and never changes. The current version is at /privacy/.
Português ·
Every version
Privacy policy
In force since 28 Oct 2026.
This is an English translation. The Portuguese version of this policy is the one that governs, and it prevails if the two ever differ: Política de privacidade.
1. Who looks after your data
Freedom Hub Brazil LTDA, CNPJ 55.802.734/0001-86, Avenida Paulista, 1471, Conj. 1110, Sala 01, São Paulo, SP, CEP 01311-927, Brazil ("Estoki", "we"), is the controller of the personal data processed in the Estoki apps, the Estoki kiosk and on estokiapp.com.
This policy explains what personal data we process, why, who else handles it, how long we keep it and what your rights are. It is written under Brazil's data protection law, the LGPD (Lei 13.709/2018).
2. Who Estoki is for
Estoki is for adults running a household, to keep track of what it has in stock. You must be 18 or over to have an account. Estoki isn't directed at children.
3. What we process, and why
3.1 Your account
| Data | Where it comes from | What it is for |
|---|---|---|
| Your name and email address | Google or Apple, when you sign in with them | to identify your account, and to show your name to your household |
| A sign-in identifier from Google or Apple | Google or Apple | to sign you in |
| Your language, when you created your account and when you last signed in | the app | to show Estoki in your language, and to run your account |
| The legal texts you accepted, and when | the app, when you sign in or accept a new version | to record what you agreed to |
With Sign in with Apple you may hide your email address. We then receive an address Apple relays to you, and never your own.
Legal basis: performing the contract you enter into with us by accepting the Terms of use (LGPD Art. 7, V).
3.2 Your household
Your household's name, country and time zone; the names of the people in it; and everything you record: rooms, units and spots, products, stock, dates, grab bags, and a list of each change with who made it and when. Invite codes are kept too, and stop working after 7 days.
Everyone in your household sees all of it, including your name beside the changes you made. Nobody outside your household does.
Legal basis: performing the contract (Art. 7, V).
3.3 Kiosks
A storage-room kiosk, if your household has one, has its own account that can only see and change your household's stock. It isn't tied to any person, and records its changes as the kiosk.
3.4 Barcodes and shared product names
When you scan a barcode we don't know, our server asks Open Food Facts (openfoodfacts.org) for the product's name. Only the barcode is sent, never anything about you.
When your household names a product, its name, brand and size, never your stock, may be suggested to other households that scan the same barcode. What is shared carries nothing that points back to your household. You can turn this off in your household's settings.
If you report a suggested name as wrong or offensive, we stop suggesting it straight away and keep your report: the barcode, the name as it was shown, your account identifier and your household's identifier, so we can look into it.
Legal basis: legitimate interest (Art. 7, IX), in suggesting names that save every household typing, and in keeping those names fit to show.
3.5 Usage statistics and crash reports
Both are off until you turn them on, with Share usage and crash reports in Settings. You can turn them off there at any time: the app then stops sending both at once.
The apps use Google Analytics for Firebase to count how Estoki is used: which screens are opened, the device's model and system version, the app's version, a random identifier for the app on your phone, and the country you're in. On Android it also sends the advertising ID.
The apps use Firebase Crashlytics to send us a report when they crash: what went wrong, the device, the system and the app's version. A crash report may carry your Estoki account identifier, so we can find what went wrong for you.
Neither ever receives your name, your email address or what your household keeps.
Legal basis: your consent (Art. 7, I), given when you turn the switch on and withdrawn when you turn it off. The app works the same either way.
3.6 Our servers' logs
Our servers keep technical logs of requests: when, from which account, and what failed.
Legal basis: legitimate interest (Art. 7, IX), in finding and fixing faults and keeping the service secure.
3.7 What we do not do
- We do not collect your location, contacts or photos. A barcode scanned with the camera is read on your phone, and no picture is sent to us.
- We do not sell your data, or share it for advertising, and we do not show ads.
- We do not make automated decisions about you.
- Estoki does not send notifications or keep a notification token today. If that changes, this policy changes first.
4. Who else handles your data
We use these companies to run Estoki. Each processes your data on our behalf and only as we instruct (operators, LGPD Art. 5, VII):
| Company | What it does for us | What it receives |
|---|---|---|
| Google (Firebase and Google Cloud) | sign-in, our database, our servers, usage statistics and crash reports | everything in section 3 |
| Apple | Sign in with Apple, if you use it | what Apple needs to sign you in |
| Open Food Facts | the name of a product we don't know | the barcode, and nothing about you |
The people in your household see your name and what you record in it (section 3.2).
We share data with authorities only when the law or a court requires it.
5. Where your data is
| What | Where |
|---|---|
| Our database and our servers | Belgium (Google Cloud, europe-west1) |
| Sign-in | Google's global infrastructure, with no fixed region |
| Usage statistics and crash reports | United States (Google) |
The legal basis for each transfer abroad (LGPD Art. 33):
- our database and our servers: the standard contractual clauses approved by the ANPD, which Google Cloud's terms include (Art. 33, II, b);
- sign-in: performing the contract (Art. 33, IX with Art. 7, V), since you cannot have an account without it;
- usage statistics and crash reports: your specific consent (Art. 33, VIII), given with the switch in section 3.5.
6. How long we keep it
| What | How long |
|---|---|
| Your account, and your household's data | until you delete your account, or delete the item yourself. When the last person leaves a household, the household and everything in it are deleted, kiosk accounts included |
| Invite codes | 7 days |
| Reports of a product name | until we've reviewed them, or you delete your account |
| Server logs | 30 days, as Google Cloud keeps them |
| Usage statistics | 14 months at most |
| Crash reports | 90 days, as Crashlytics keeps them |
7. Deleting your account
You can delete your account in the app: Settings, then Delete account. It deletes, at once and for good:
- your account, your name and email address, and your acceptances;
- your place in your household;
- any report you made of a product name;
- if you're the last person in your household, the household too, with all its spots, products, stock, history, grab bags and kiosk accounts.
If others remain in your household, the stock you recorded stays theirs, and the history keeps the changes you made without your name. Product names your household shared stay, since they say nothing about you.
If you can no longer open the app, write to contact@4freedomhub.com from the email address of your account, and we delete it in the same way. How to delete your account.
8. Security
- Who can read and write what is enforced by rules on our servers, not by the app. A modified app can't reach another household's data.
- Your data is encrypted in transit and at rest by Google's infrastructure.
No measure removes every risk. If a security incident puts your data at relevant risk, we tell the ANPD and you within 3 business days of learning that it reached personal data, as Art. 48 of the LGPD and ANPD Resolution 15/2024 require.
9. Your rights
The LGPD (Art. 18) gives you the right to:
- confirm that we process your data, and get a copy of it;
- correct data that is incomplete, wrong or out of date;
- have unnecessary or excessive data anonymised, blocked or deleted;
- receive your data in a format you can use, or have it sent to another provider;
- delete data processed with your consent, and withdraw that consent at any time;
- know who we share your data with;
- know what happens if you don't consent;
- object to processing based on legitimate interest;
- complain to the ANPD, Brazil's data protection authority.
Much of it you can do yourself in the app: change what your household records, turn shared product names and usage reports off, leave your household, and delete your account.
For anything else, write to contact@4freedomhub.com. We answer requests to confirm or access your data within 15 days (LGPD Art. 19, II), and every other request within 30 days. We may ask you to show it's you, since giving your data to someone else would be a leak in itself.
10. Data protection officer
Encarregado: Jonathan Silva dos Santos. Contact: contact@4freedomhub.com.
You can write to the data protection officer about anything to do with your personal data, including to use the rights in section 9.
11. Changes to this policy
When this policy changes in a way that matters, we publish a new version with a new date and ask you to accept it in the app.
Earlier versions stay published, unchanged. The record of your acceptance names the version you accepted, and that version can still be read. A correction never rewrites a published version: it becomes a new one. Every version.
12. Contact
Privacy, your rights and anything else: contact@4freedomhub.com.
You can also complain directly to the ANPD, at gov.br/anpd.