The short version: HomeStox needs an account, so we do hold some of your data — your email address, your display name, and the household inventory you create. We use it to run the app and nothing else. There are no ads, no analytics SDKs, and no trackers, and we never sell or share your data with anyone for their own purposes. The one thing worth understanding clearly: a home is shared, so everything you add to a home is visible to the other members of that home. You can delete your account and all of its data at any time, from inside the app or by emailing us.
1. Who we are
HomeStox ("the app," "we," "us") is a shared household inventory and shopping app published by Codedelights. For any question about this policy, or to exercise any right described in it, contact support@codedelights.com.
2. What we don't do
- No advertising. The app contains no ads and no advertising SDKs.
- No analytics or tracking. There are no analytics, attribution, or behavioural tracking SDKs in the app. We do not build profiles of you.
- No selling or renting your data. Ever, to anyone, for any purpose.
- No access to your device's contacts, photos, files, location, microphone, or camera. The app does not request these permissions.
3. What we collect
Everything below is data you enter yourself, or that the app needs in order to function. We collect nothing else.
| What | Why we need it |
|---|---|
| Email address | Identifies your account, lets you sign in and reset your password, and is how other members invite you to a home. |
| Password | Stored only as a salted hash by our authentication provider. We never see, log, or store your actual password. |
| Display name | Shown to the other members of your home so they can tell who changed what. You choose it and can edit it at any time in Settings. |
| Home names and membership | Groups people and inventory together, and records who owns each home. |
| Inventory items | The name, category, stock status, quantity, unit, brand, store, rating, and any notes you add for each item. This is the core content of the app. |
| Purchase records | Price, quantity, brand, store name, rating, notes, date, and which member recorded it — used to build your price history and unit-price comparisons. |
| Invitations | The email address you invite, so the invitation can be matched to that person when they sign up or sign in. |
| Push notification token | An anonymous device token issued by the operating system, used solely to deliver notifications to your device. Only stored if you grant notification permission. |
| Notification history | The activity feed of changes made in your homes — titles and short descriptions of what changed. |
We do not collect your location, advertising identifier, contacts, device fingerprint, browsing activity, or any financial or payment information. HomeStox is free and has no payments.
4. Who your data is shared with
4.1 The other members of your home
This is the most important thing to understand about HomeStox, because it is the point of the app. When you join or create a home, everything in that home is visible to every member of it: the items, their stock status, your notes on them, the full purchase and price history, and which member recorded each change. Your display name and email address are also visible to members of your home.
If you would rather keep something private, do not put it in a shared home. Removing yourself from a home stops future sharing, but purchases and item history you already contributed remain part of that home's records for the other members.
4.2 Service providers
We use a small number of processors to actually run the service. They act on our instructions and are not permitted to use your data for their own purposes.
| Provider | Role | What they handle |
|---|---|---|
| Supabase | Database, authentication, and server functions | All account and household data described in section 3. Data is stored in the region configured for our project and may be processed outside your country. |
| Expo (Expo Application Services) | Push notification delivery | Your device push token and the title/body of a notification, at the moment it is sent. Expo forwards it to the platform service below. |
| Google (Firebase Cloud Messaging) | Android push delivery | Delivers the notification to your device, under Google's Privacy Policy. |
Notification titles and bodies describe household activity — for example, "Milk is running low". Keep that in mind when naming items, since notification text can appear on a locked screen.
4.3 Legal
We may disclose data if we are legally required to, or where necessary to protect our rights, safety, or the integrity of the service. We have never received such a request.
5. Legal bases (for EEA/UK users)
Where the GDPR or UK GDPR applies, we process your data on these bases: performance of a contract (creating your account, storing your inventory, sharing it with the home you joined, and delivering notifications you enabled), consent (push notifications, which you grant at the OS level and can revoke at any time), and legitimate interests (keeping the service secure and functioning). We do no profiling and no automated decision-making with legal effects.
6. How long we keep it
- While your account exists: your data is kept so the app works. We do not impose retention limits on your own inventory or price history — that history is the feature.
- When you delete your account: your profile, memberships, push tokens, notifications, and any home where you were the only member (including its items and purchase history) are permanently deleted immediately. This is not a soft delete or a deactivation.
- Shared homes you leave behind: if a home has other members, the home and its inventory survive — it belongs to them too. Purchases you recorded remain in that home's history, with your name detached.
- Backups: our provider's routine encrypted backups may retain deleted records for a short rolling window before ageing out.
7. Your rights and choices
- Access: everything we hold about you is visible in the app. Ask us if you would like it in a portable file.
- Correction: edit your display name in Settings, and your item and purchase data anywhere in the app.
- Deletion: Settings → Delete Account removes your account and data permanently. A web route is also available — see the Data Deletion page.
- Withdraw notification consent: turn off notifications for HomeStox in Android Settings at any time.
- EEA/UK users additionally have rights to restriction, objection, portability, and to lodge a complaint with a supervisory authority.
We do not charge for these requests and aim to respond within 30 days.
8. Security
All traffic between the app and our servers uses HTTPS. Every database table is protected by row-level security, so the server itself enforces that you can only read and write data for homes you actually belong to — it is not a rule applied only in the app. Passwords are salted and hashed by our authentication provider and are never visible to us. Administrative credentials are held server-side only and are never shipped inside the app.
No system is perfectly secure. If we ever become aware of a breach affecting your data, we will notify affected users and the relevant authorities as required by law.
9. Children
HomeStox is not directed at children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
If we change this policy we will update the effective date above, and for material changes we will note it in the app's release notes. Continued use after a change means you accept the updated policy.
11. Contact
Questions, concerns, or requests: support@codedelights.com.