Stock Privacy Policy

Last updated: 17 October 2026

Stock is a free shopping list app published by Clearpoint Studios. This policy explains what the app keeps on your phone, what leaves it, and how long anything is kept.

Contact: clearpointstudios@proton.me

The short version

Stock works on your phone. There are no accounts with passwords, no email sign up, no ads, no advertising identifier, no location and no contacts access. Your lists, staples and trips stay on the phone unless you share a list or write to us through the in-app support. We do not sell data and we do not share it with data brokers.

What stays on your device

Stored in the app's private storage, readable only by Stock:

• Your lists and their items, quantities and notes
• Finished trips and the staples rhythm calculated from them
• Your aisle order, department overrides and settings
• The display name you choose for sharing

Uninstalling the app removes all of it. You can also erase it inside the app under More, Privacy, Delete all data.

Shared lists, only if you share one

Sharing runs on a Supabase project we operate, hosted in the European Union (Frankfurt). Until you create a share code or join a list with a code, nothing in this section happens.

When you share a list or join one, the app creates an anonymous session on the server. It is a random identifier tied to this installation, with no email, no phone number and no password. The server then stores, for that one list only:

• The list name and its six character share code
• The items on it: name, quantity, unit, note, department, whether and when it was checked, and which member added it
• Finished trips of that list: the time, the item count, the items bought and the name of the member who finished it
• The members of the list: their random identifier and the display name they chose
• A short log of share and join actions per identifier, used only to limit abuse

Everyone who joins a list with its code can see the list, its items, its trips and the display names of the other members. Your other lists, your staples and your settings never leave the phone.

Feedback you send us

Opening More, Feedback & Support creates the same anonymous session described above, so your conversation can reach you. When you send a message, we receive what you wrote, the subject and category you picked, the app version, your device model, your Android version and your language. Replies arrive in the app. Messages can be translated for us so we can answer in your language.

Install counting

Stock sells nothing, but it includes the RevenueCat SDK, which we use to count installs and active users per app. On start, the SDK creates a random app user identifier and sends it to RevenueCat together with basic technical details such as the app version and platform. Once you use sharing or support, the anonymous identifier from the server is used as the RevenueCat identifier, so one person is counted once. No purchases happen, no advertising identifier is collected, and nothing about your lists is sent. RevenueCat's policy: revenuecat.com/privacy

Other connections

The More apps section checks once a day whether other Clearpoint Studios apps are available on Google Play, by requesting their public store pages. Rating the app opens Google Play's own review dialog. Neither sends anything about you or your lists.

Permissions

• Internet: shared lists, support, install counting and the More apps section.
• Wake lock: keeping the screen on in store mode, if you enable it.

Legal basis and where data is processed

Where the GDPR applies, shared list data and support conversations are processed to provide the feature you started and on the basis of your consent, given by sharing a list or sending a message. Install counting is based on our legitimate interest in knowing how many people use the app, and you can object by writing to us. Our Supabase project runs in the European Union. RevenueCat processes data in the United States under the standard contractual clauses.

Data retention

How long each kind of data is kept, and what ends the retention:

• Lists, items, trips, staples and settings on your phone: kept until you tap Delete all data in the app or uninstall Stock. Lists you never share are never copied to a server.
• A shared list, its items and trips: kept while the list has at least one member. Deleted immediately when its owner taps Stop sharing, or when the last member leaves.
• Your membership and display name on a shared list: kept while you are a member. Deleted immediately when you tap Leave list or Delete all data in the app, or within 30 days of an email request. Items you added stay on the list for the remaining members, because the list belongs to the household.
• Share and join log: kept while your anonymous session exists. Deleted immediately with Delete all data, or within 30 days of an email request.
• Anonymous session identifier: kept on the server without any list or name attached after Delete all data. Removed within 30 days of an email request.
• Support tickets and messages: kept while the conversation is open. Closed tickets are deleted no later than 12 months after the last message, or within 30 days of a request.
• RevenueCat app user identifier: kept by RevenueCat according to its own policy. The identifier on your phone is discarded when you uninstall Stock or clear its data. On request we delete the customer record in RevenueCat within 30 days.
• Server backups: database backups exist for disaster recovery only and are overwritten within 30 days, so deleted data disappears from them within that window.

Deletion happens on the server itself, records are not just hidden. The steps for deleting without the app are at /delete.

Your rights

You can export a list as text inside the app and delete everything under More, Privacy, Delete all data. Under the GDPR you can ask us for access, correction, deletion, restriction and portability, and you can object to processing. Write to clearpointstudios@proton.me. You can also complain to your local data protection authority.

Children

Stock is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has sent us data, write to us and we will delete it.

Changes

If this policy changes, the date at the top changes with it.

Contact

Clearpoint Studios
clearpointstudios@proton.me