Privacy Policy

Effective date: April 14, 2026  |  Last updated: April 14, 2026

Stokita ("we", "our", "us", or "the app") is an inventory and orders management application for iOS, operated by Emre Macit. This Privacy Policy explains what personal information we collect, how we use it, how we share it, and the choices you have regarding your data. By using Stokita, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account using Sign in with Apple, we receive:

• A unique Apple user identifier
• Your name (optional, provided by Apple only on first sign-in)
• Your email address (may be a private relay email if you choose)

1.2 Business & Application Data

When you use Stokita, you may create and store the following business data:

• Organization/workspace name and settings
• Products, variants, stock levels, barcodes, and product images
• Customers, suppliers, and contact information you enter
• Orders, purchase invoices, expenses, and inventory logs
• Team member names and assigned permissions
• To-do lists and internal notes

This data is owned by you. We process it only to provide the app's functionality.

1.3 Subscription & Purchase Data

Subscription purchases are processed by Apple through the App Store. We do not receive or store your payment information. We receive only:

• Subscription status (active, expired, cancelled)
• Subscription plan and renewal date
• Apple transaction identifier (for validation)

RevenueCat is used as a subscription management service to validate and track your subscription status.

1.4 Technical Information

For security, performance, and debugging, we may automatically collect:

• Device model and iOS version
• IP address (temporarily, for request authentication)
• Crash and error logs (anonymized)

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the app's core functionality
• Authenticate your account and protect it from unauthorized access
• Validate and manage your subscription
• Sync your data across your devices
• Communicate with you about service updates, security alerts, or support requests
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

We do not sell your personal data. We do not use your data for advertising. We do not train AI/ML models on your content.

3. How We Store & Protect Your Data

Your data is stored on Cloudflare infrastructure (Workers, D1 database, and R2 object storage). Cloudflare maintains industry-standard security measures including encryption at rest and in transit (TLS).

• Access tokens are securely stored in the iOS Keychain on your device
• We do not store passwords (authentication is handled by Apple)
• All communication between the app and our servers uses HTTPS
• Access to production data is limited to authorized personnel

4. Data Sharing & Third Parties

We share data only with the following service providers, strictly to operate the app:

• Apple — Sign in with Apple authentication, App Store subscription processing
• Cloudflare — Hosting, database, and image storage
• RevenueCat — Subscription validation and management

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Multi-Tenant Data

Stokita supports multiple users within an organization. If you join an organization:

• Organization administrators can see your name, email, role, and actions within the organization
• Data you create inside an organization is visible to other authorized members based on their permissions
• Administrators can deactivate your access and manage organization data

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and business data will be deleted within 30 days, except where we are required to retain information for legal, tax, or fraud prevention purposes.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data
• Withdraw consent or object to processing
• Lodge a complaint with a data protection authority

To exercise these rights, contact us at e.macit1130@gmail.com. You can also delete your account and associated data directly from the app's settings.

8. Children's Privacy

Stokita is a business tool and is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it.

9. International Data Transfers

Your data may be processed in countries other than your own. By using the app, you consent to the transfer of your data to these locations. We take reasonable steps to ensure your data is protected wherever it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the app. Continued use of the app after changes become effective constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: e.macit1130@gmail.com
Developer: Emre Macit