Who publishes Stokky
Stokky is published by RAZAFINDRAMANANA Andry Henintsoa, the data controller for the processing described here. For any question, or to exercise your rights, write to contact@henkinn.com.
Using Stokky without an account
On Android and iOS, Stokky works without an account. In that mode your whole inventory stays in a local database on your device. Nothing is sent to our servers, and we have no way to read it.
Sync and household sharing begin only when you create an account. At that point the data already on the device is moved into your household.
The web app, at stokky.henkinn.com, has no local database, so it always requires an account. It reads and writes your household directly on our servers and keeps only your sign-in session in the browser.
There is one exception: if you write to us from Contact us in Settings, the address, subject and message you type are sent to our servers so we can read and answer them. Nothing else about your inventory goes with that message.
Data we store
With an account, the following is the complete inventory of what is stored on our servers. There is nothing else.
- Your account — your email address and a password. The password is hashed by our authentication provider; we never see it. If you sign in with Google instead, there is no password: we store what Google returns when you sign in — your Google account identifier, email address, name and the link to your profile picture.
- Your pseudo — the display name the other members of your household see. Until you choose one, it is the part of your email address before the “@”.
- Your household — its name, who owns it, and the email addresses of its members and of anyone invited to it.
- What you keep — product names, categories, units, quantities, minimum thresholds, expiry dates, barcodes, how long a product may sit untouched before the app mentions it, and any notes you write.
- Where you keep it — the rooms, furniture and storage spots you set up, and the names you give them.
- Your photos — the pictures you take or choose, held in private storage, up to 5 MB each, in JPEG or PNG only.
- Your activity — the history of what was added, used up, corrected or moved, with the date and which member did it.
- Your shopping lists — the items on them and whether each one is ticked off.
- Your app preferences — which introductory guides you have already seen, so they are not shown again, and the order in which you arranged your own rooms, furniture and storage spots. That order is yours alone: it changes nothing for the other members of your household.
- Your messages to support — when you use Contact us, the address you give us for the reply, the subject and the message itself.
Inviting someone stores their email address. When you invite a person to your household, their address is stored immediately, before they even have an account. We send them nothing — telling them is up to you. If they never sign up, you can revoke the invitation from the members screen, which deletes the address.
What we do not collect
Stokky contains no analytics, no crash reporting, no advertising and no third-party trackers. Specifically, we do not collect:
- your location;
- your contacts, calendar or other apps;
- an advertising identifier or behavioural profile;
- your address book when inviting — only the address you type is stored.
The app requests camera access solely to scan barcodes and take photos. No image leaves the device except those you deliberately attach to a product or a piece of furniture.
We do not sell any data, and we pass none to advertisers or data brokers.
Why, and on what basis
We process this data for one reason: to run the app you installed — to keep your inventory current, sync it between your devices, and share it with the members of your household.
The legal basis is performance of the contract formed when you create an account (GDPR article 6.1.b). There is no legitimate-interest processing for measurement or advertising, because there is none.
Sharing inside a household
A household is a shared space. Every member of a household sees all of its inventory, rooms and furniture, photos, and history, and the pseudo of every other member.
The history records who made each change. Other members can therefore see who added, consumed or moved an item, and when. If that is not acceptable to you, do not join a shared household.
Processors and third parties
Supabase
Authentication, database and photo storage are provided by Supabase, acting as a processor on our behalf. Data is hosted in Ireland, within the European Union. It is not transferred outside the European Economic Area.
Open Food Facts and Open Products Facts
When you scan a barcode, that barcode alone is sent to world.openfoodfacts.org, an open food database, to look up the product name. If that database does not know the code, the same barcode is then sent to world.openproductsfacts.org, its sibling for household goods — cleaning products, kitchen roll, toilet paper. When either one holds a picture of the product, the app downloads that picture so the form can offer it to you.
No account data, no identifier and no household information is sent with those requests.
Google sign-in
If you choose Continue with Google, Google authenticates you and passes our authentication provider the details listed in section 3. Google applies its own privacy policy to that sign-in. If you use an email address and password, Google is not involved.
Resend
When you ask to reset your password, the email carrying your reset code is sent through Resend, acting as a processor on our behalf. It receives your email address and that message, nothing else.
Shorebird
The Android and iOS apps receive fixes through Shorebird, an update service. When the app starts, it asks Shorebird whether a fix is available, sending the app version, the platform, the processor architecture and an identifier generated at random on install. That identifier is not linked to your account, your email address or your household.
Cloudflare
The web app and these pages are served by Cloudflare. As with any website, Cloudflare processes your IP address and browser details to deliver them. Cloudflare also forwards the email you send to contact@henkinn.com to our inbox.
Google Play
The Android app is distributed through Google Play, which applies its own privacy policy to installation and updates. We receive no personal data about you from Google Play.
How long we keep it
Your data stays stored for as long as your account exists, because an inventory is only useful if it is kept. It is deleted when you delete your account, as described in section 9.
A pending invitation is kept until the person signs up or you revoke it.
When you delete a product, a room, a piece of furniture, a storage spot or a shopping-list item, it disappears from the app at once, but its record stays on our servers, marked as deleted, so that your other devices and the other members learn about the deletion. Those records go when the household is deleted.
A message sent through Contact us is kept while we handle it. If you had an account when you sent it, deleting that account deletes the message with it.
Your rights and deletion
You have the right to access, correct, erase, restrict, object to and port your data. To exercise it, write to contact@henkinn.com from the address associated with your account. We respond within 30 days.
Deleting your account
You can delete your account yourself, from inside the app: open Settings, scroll to Delete account and confirm. This happens immediately. It erases your account and all data attached to it, with no backup copy retained and no way to restore it.
If you no longer have the app installed, write to contact@henkinn.com from the address associated with your account and we will delete it within 30 days. Full instructions are on the account deletion page.
Deleting an account deletes the households it owns. If you created a household, deleting it removes all of its contents — products, stock, photos, history. To protect the other members, the app will not let you delete your account while a household you own still has other people in it: hand that household over to another member, or remove them, first. Leaving a household you do not own deletes nothing.
You can also remove local data by uninstalling the app, which erases the database held on the device. If you use Stokky without an account, the app offers Delete local data in Settings, which does the same thing without uninstalling.
If you believe your rights are not being respected, you may lodge a complaint with the data protection authority in your country.
Security
Traffic to our servers uses HTTPS. Every table is protected by row-level security rules that allow reads and writes only to the household concerned, or to you alone for what is yours alone. Photos live in a private storage bucket under the same rules — they are not reachable from any public URL.
No system is perfect. In the event of a breach likely to create a risk to your rights, we will notify the people affected and the competent authority within the legal deadlines.
Children
Stokky is not directed at children, and we do not knowingly collect data about a child under 13. If you believe a child has given us data, write to us and we will delete it.
Changes
If this policy changes materially, the update date at the top of the page will change and a notice will appear in the app before the change takes effect.
Contact us
For any question about this policy, or to exercise your rights: contact@henkinn.com.