Stockio Privacy Policy

This Privacy Policy applies to Stockio(the “App”), the voice-first inventory, billing and credit-book app for shops, published on Android by Nohaya (“we”, “us”, “our”; package name com.kadaios.kadaios_app). It explains what data the App collects, why, where it goes, and the choices you have. The Nohaya website is covered separately by our main Privacy Policy.

1. Summary

• Stockio has no sign-up. Your shop is identified by a secret shop key, not by your name, phone number or email.
• Your shop's records (products, stock, sales, purchases, customers, suppliers) are stored on our servers so they are backed up and can be shared across the devices you choose.
• We never sell your data, never show ads, and do not use any analytics or advertising SDKs.
• Voice is converted to text by Google's speech service. We receive only the text, never the audio.
• Payments are handled by Razorpay. We never see your card, UPI or bank details.

2. Data We Collect

• Shop profile. When you create a shop we generate a random shop key and store the business name you enter. You can also add an owner name, currency, speech language and a shop logo.
• Business records. Everything you enter in the App: products (name, category, unit, prices, stock level, barcode, photo), sales and purchase transactions, checklists, and the text of the voice or typed phrases that created them.
• Customer and supplier details. If you add customers or suppliers, we store the details you enter, such as name, contact person, phone number, email, address, city, GSTIN, photo, credit balance and payments.
• Photos. Photos you choose to attach to a product, customer, supplier or your shop are uploaded to our servers.
• Files you import. CSV or JSON files you import are read and their records added to your shop.
• Subscription data. Your plan (monthly or yearly), subscription status, renewal or expiry date, and the Razorpay subscription ID.
• Technical data. Like any web service, our hosting provider records the IP address, time and type of each request to our server in standard logs, which we use only for security and troubleshooting.

We do not collect your contacts, location, call logs, SMS, advertising ID or any data from other apps.

3. Device Permissions

• Microphone: used only while you tap the mic to speak an entry, such as “sold 2 kg sugar”. Speech is converted to text by your phone's Google speech recognition service or by Google Chrome's speech service. That processing follows Google's Privacy Policy. Stockio receives only the recognised text. We never receive or store audio recordings.
• Camera: used to scan barcodes, read text from labels and bills, recognise products, and take photos. Barcode scanning, text recognition and object detection run on your device using Google ML Kit. The camera image is not uploaded unless you save it as a photo.
• Photos and files: only the image or file you pick is read, when you pick it.
• Internet: to sync your shop with our server.

4. How We Use Your Data

• To run the App: keep your stock, sales, purchases and credit balances up to date, and show reports and analytics.
• To understand what you said or typed and turn it into a transaction or product.
• To keep the same shop in sync across every device that uses its shop key.
• To manage your free trial and subscription.
• To provide support when you contact us, and to protect the service against abuse.

We do not use your data for advertising or profiling, and we do not sell it.

5. AI Processing

Most phrases are understood by Stockio's own rules on our server. When they can't understand a phrase, the server sends the text of that phrase and, where needed, the names of matching products in your shop to OpenAI (model gpt-4o-mini) to work out the items, quantities and prices. No customer or supplier details, shop key or payment data are sent. Under OpenAI's API terms, this data is not used to train OpenAI's models and is kept by OpenAI for up to 30 days for abuse monitoring. See OpenAI's Privacy Policy.

6. Your Shop Key

The shop key is the only credential for your shop, like a Wi-Fi password: anyone who has it can view and change that shop's data. It is stored on your phone in encrypted storage and is shown only in More → Settings. Share it only with people you want to give access (for example your staff), and don't post it publicly. If you believe your key has been exposed, contact us.

7. Data About Your Customers and Suppliers

When you record details of your customers or suppliers, you decide what to record and why, and we process it only on your behalf to provide the App. You are responsible for having a lawful reason to record it, such as keeping a credit book, and for telling those people if the law requires it. We do not contact your customers or suppliers and do not use their details for any other purpose.

8. Data Stored on Your Device

The App stores your shop key (encrypted), app settings such as language and theme, and entries made while offline that are waiting to sync. Uninstalling the App or clearing its data removes these from your phone. This does not delete your shop from our server (see section 11).

9. Payments

After the 7-day free trial, Stockio Pro is available as a monthly or yearly subscription billed by Razorpay. Your card, UPI or bank details go directly to Razorpay and are never shared with us. We receive only the subscription ID and its status (active, cancelled or expired) and renewal dates. See Razorpay's Privacy Policy and our Stockio Refund & Cancellation Policy.

10. Service Providers

• Google Cloud: hosts the Stockio server (Singapore region).
• Supabase: hosts the Stockio database.
• OpenAI: understands phrases our own rules can't, as described in section 5.
• Razorpay: subscription payments.
• Google: speech-to-text on your device or in Chrome, and on-device ML Kit.

These providers process data only to provide their service to us. We may also disclose data if required by law or a valid legal request. Otherwise we do not share your data with anyone. Your data may be processed outside your country, including in Singapore and the United States. We rely on our providers' safeguards for such transfers.

11. Retention and Deletion

• We keep your shop's data for as long as the shop exists, so it is there whenever you or your staff open the App.
• “Leave this shop” in Settings only removes the shop key from that phone. The shop and its data stay on our server so you can rejoin with the key.
• To delete your shop and all its data, use More → Settings → Delete shop and all data in the App (it takes effect immediately), or follow the steps at nohaya.com/stockio/delete to request it by email (within 30 days). Payment records we must keep for tax and accounting law are retained in our Razorpay account.
• You can delete individual products, customers and suppliers at any time inside the App.

12. Your Rights

You can access and export your shop's data at any time from More → Settings (Export shop data as JSON, or transactions as CSV), correct it in the App, and request its deletion. Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may also have the right to ask what we hold, to withdraw consent, and to raise a grievance. Email us with your request and we will respond within 30 days.

13. Security

All traffic between the App, our server and our providers is encrypted with HTTPS/TLS. Our database and servers are access-controlled and encrypted at rest by our hosting providers. No system is 100% secure, so please keep your shop key private.

14. Children

Stockio is a business tool for shop owners and their staff. It is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has provided data, contact us and we will delete it.

15. Changes to This Policy

When we update this policy we change the “Last updated” date above. For significant changes we will also tell you in the App. Continuing to use the App after a change means you accept the updated policy.

16. Contact and Grievances

Questions, requests or complaints about your data: nohayasite@gmail.com. Please include your business name. For requests about a specific shop's data we will ask you to prove you own it, as described on the deletion page.