Privacy Policy
Last updated: 25 October 2026
Stoq ("the app", "we", "us") is a personal grocery & pantry tracking app. This policy explains what data we collect, why, and your rights over it. We follow India's Digital Personal Data Protection Act, 2023 (DPDP) and Google Play's data-safety requirements.
1. Who we are
Stoq is operated by the Stoq team. For any privacy request, contact: support@trystoq.com.
2. What we collect
We only collect what's needed to run and improve the app:
| Data | Source | Why |
|---|---|---|
| Name, email address, profile photo, your account ID and last sign-in time | Your Google account (via Google Sign-In) | To create, identify and secure your account |
| Pantry items, cart items, quantities, units, brands | You enter them | Core feature — tracking your stock |
| Purchase history and activity log: items you mark as bought, with quantity, brand, date and where you bought them | Generated when you confirm orders | To predict consumption and low-stock alerts |
| App settings (language, preferred delivery app, alert threshold, theme, your analytics choice) | You set them | To personalise the app |
| Usage analytics: features used, session counts, app version and build, device model and manufacturer, OS version, screen size, language setting, whether the device is an emulator, and a random analytics ID | Collected automatically via PostHog (on by default; you can turn it off) | To understand how Stoq is used and improve it |
| App and device integrity checks: an attestation token from Google Play, app-installation identifiers, and basic device and software details | Generated automatically by Google Play and Firebase when the app talks to our servers | To confirm requests come from a genuine copy of Stoq and protect your account from abuse. Never used for analytics or ads. |
We do not collect your location (precise or approximate), contacts, microphone, camera, or advertising identifiers. We use a single third-party product-analytics tool, PostHog (see §5), to understand usage. We do not use advertising SDKs and we do not show ads.
3. How we store it
Your personal data (account, pantry, cart, history, settings) is stored in Google Firebase (Cloud Firestore and Firebase Authentication), secured per-user — only your authenticated account can read or write your data. To keep sign-in and your data secure, Google also processes your IP address and basic device details when you sign in and when the app checks it is genuine. Data is transmitted over encrypted (HTTPS/TLS) connections. Google acts as our data processor; see Google's privacy policy at policies.google.com/privacy. Usage-analytics events are processed by PostHog as described in §5.
4. How we use it
- To provide the service: store your pantry, predict when items run low, and pre-fill searches in your chosen delivery app.
- To send you on-device low-stock notifications (only if you grant notification permission).
- To understand how the app is used and improve it, via the usage analytics described in §5.
- To send you one welcome email with tips for getting started, the first time you sign in. Your account's email address is sent to Loops, the service we use to send email (loops.so/privacy). This is a one-off service email: you are not added to any mailing list. To have it deleted, write to support@trystoq.com.
We do not sell, rent, or share your personal data with any third party for marketing.
5. Analytics
We use PostHog, a product-analytics tool, to understand how people use Stoq — which features are used and where people get stuck — so we can improve it. PostHog collects pseudonymous usage events tied to a random identifier, not your name or email. We do not send your pantry contents, item names, brands, or other personal entries to PostHog. We've set PostHog to discard your IP address and not to work out your location from it. Analytics data is sent to PostHog's servers in the EU, outside India. See PostHog's privacy policy at posthog.com/privacy.
Usage analytics is on by default. You can turn it off at any time in Settings → Privacy. Turning it off stops all analytics events from your device.
6. Notifications
With your permission, Stoq schedules local notifications to remind you when an item is predicted to run low. You can revoke this anytime in your device settings.
7. Your rights & data deletion
You can permanently delete all your data and your account at any time: Settings → Delete all data. This erases your pantry, cart, activity, purchase history, settings, and your Stoq account from our servers. This action cannot be undone. It doesn't reach the record Loops keeps of the one welcome email we sent you; email support@trystoq.com and we'll have that deleted too.
If you no longer have the app installed, you can request account and data deletion by emailing support@trystoq.com from the email address associated with your account.
You may also request access to or correction of your data by emailing us.
8. Data retention
We retain your personal data only while your account exists. Deleting your account (above) removes it immediately. Pseudonymous analytics events are retained by PostHog under its standard retention period and are not linked to your account.
9. Children
Stoq is not directed at children under 18 and we do not knowingly collect their data. Under India's Digital Personal Data Protection Act, 2023, a child is anyone under 18; processing a child's data requires verifiable parental consent, which Stoq does not seek because the app is intended for adults managing a household.
10. Changes
We may update this policy; the "Last updated" date above will change. Material changes will be reflected in the app.
11. This website (trystoq.com)
Everything above is about the app. This section covers the website.
- Beta and waitlist signup. If you join the beta or the iOS waitlist, we collect the email address you type, which list you joined (Android beta or iOS waitlist, worked out from your browser type), and the campaign tag in the link that brought you here (for example
utm_source=whatsapp), if there was one. These go to Loops, the service we use to send email (loops.so/privacy). When you submit the form, your browser sends it straight to Loops, so Loops also receives your IP address and browser type. Loops first sends you a confirmation email, and you're only added once you tap the confirm link inside it. We use your address to invite you to the beta and to tell you when Stoq launches. Every email has an unsubscribe link, and you can ask us to delete your signup at any time at support@trystoq.com. - Hosting. The site is served by Cloudflare, which processes your IP address and request details (the page requested, your browser type) to deliver the site and protect it from attacks (Cloudflare's privacy policy).
The website runs no analytics or advertising, sets no cookies of its own, and serves its fonts from trystoq.com itself. Loops and Cloudflare may process this data outside India.
12. Contact
Questions or requests: support@trystoq.com