Estoki privacy policy

Estoki helps a household keep track of what it has in stock. This page explains what we keep, why, and how to delete it.

Estoki is run by 4Freedom Hub, which is responsible for your data. You can reach us at jonathan.santos@4freedomhub.com.

What we keep

• Your account: your name and email address as Apple or Google gives them to us when you sign in, and your language. If you sign in with Apple and hide your email, we only see the private address Apple makes for you. We also keep when you created your account and when you last signed in.
• Your household: its name, country and time zone, the names of the people in it, and everything you record: spots, products, stock, dates, grab bags, and a log of each change with who made it and when. Invite codes are kept too, and stop working after 7 days.
• Kiosks: a storage-room kiosk, if your household has one, has its own account that can only see and change your household's stock. It isn't tied to any person.

We don't collect your location, contacts or photos. When you scan a barcode with the camera, it is read on your phone and no picture is sent to us.

Barcodes

When you scan a barcode we don't know, our server asks Open Food Facts (openfoodfacts.org) for the product's name. Only the barcode is sent, never anything about you.

When your household names a product, its name, brand and size, never your stock, may help other households that scan the same barcode. What is shared carries nothing that points back to your household. You can turn this off in your household's settings.

Usage statistics and crash reports

The apps send usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics), so we can see what's used and fix what breaks. They include things like your phone's model and system version, the app's version, which screens are opened, a random ID for the app on your phone, and the country you're in. They don't include your name, your email address or what your household keeps. A crash report may carry your Estoki account ID, so we can find what went wrong for you.

Estoki doesn't send notifications or keep a notification token today. If that changes, this page will say so first.

Why we use it

We use your account and household data to give you Estoki, which is what you sign up for. We use usage statistics, crash reports and shared product names because we have a legitimate interest in keeping Estoki working and useful, in ways that say nothing about what you keep. You can turn shared product names off at any time.

Who sees it

Only the people and kiosks in your household see your household's data. We don't show ads, and we don't sell your data or share it for anyone's marketing.

A few services do work for us, and only that:

• Google Firebase stores your account and your household's data and runs Estoki's server. Your household's data is kept in Google Cloud's europe-west1 region, in Belgium. Sign-in, usage statistics and crash reports run on Google's global services and may be handled outside Europe, under Google's data protection terms.
• Apple and Google confirm who you are when you sign in.
• Open Food Facts receives barcodes, as above, and nothing else.

How long we keep it

We keep your account and household data until you delete it. When the last person leaves a household, the household and everything in it are deleted, including its kiosk accounts. Google deletes crash reports after 90 days and usage statistics after at most 14 months.

Deleting your account

You can delete your account in the app at any time: Settings → Account → Delete account. How it works, and how to ask without the app: Delete your account.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop or limit how we use it, by writing to jonathan.santos@4freedomhub.com. We'll answer within a month. If you're not happy with our answer, you can complain to the data protection authority where you live, such as Ireland's Data Protection Commission or Brazil's ANPD.

Children

Estoki is meant for adults running a household, and isn't directed at children.

Changes

If this policy changes, the new version is published here with its date.