Privacy policy
Stocked is made by Lakeland Software in Ireland. This policy explains what information the Stocked app and website collect, why, who else handles it, and what you can do about it. The short version: we keep what's needed to run your household's lists and nothing more. There are no ads, no analytics and no tracking, and your information is never sold.
Who is responsible for your information
Lakeland Software is the data controller for information processed through Stocked. You can contact us at support@lakelandsoftware.ie.
What we collect
Your account
- Your name and email address, from Sign in with Apple or Google when you sign in. If you use Apple's “Hide My Email”, we only see the relay address Apple gives us.
- An account ID from Apple or Google, so we can recognise you next time. We never see your Apple or Google password.
- A token from Apple (if you use Sign in with Apple), used only to revoke Stocked's access when you delete your account.
- Your profile picture address from Google, if your Google account has one.
Your households and lists
- Household names, who is in each household, and who the admin is.
- What you add to Stocked: shops and aisles, storage spots, items, how many you have and like to keep, and the shopping list.
- Occasion lists (such as Christmas or a birthday) and the things on them.
- Shopping trips: who is shopping, at which shop, when it started and finished, and how much has been ticked off.
- Invite codes you create, and when they expire or are used.
Stocked Plus
If you subscribe to Stocked Plus, Apple handles the payment. We never see your card or bank details. Apple sends us a signed record of the subscription, and we keep:
- the subscription's transaction ID and which plan it is (monthly or yearly);
- when it renews or ends, and whether it is active, expired, refunded or revoked;
- whether it was bought in Apple's test environment or for real.
If you redeem a promo code or we give you Plus as a gift, we keep the code, when it was used, which household it covers and when it ends.
Notifications
- Push notification tokens for your phone, and for lock screen Live Activities, so we can send you notifications. These identify the app on your phone, not you personally.
- Your notification settings for each household, including your time zone, so quiet hours and daily summaries happen at the right time.
Technical information
Like any website or online service, our hosting provider records basic request information (such as IP address, time and the address requested) to keep the service running and secure. We don't use it to build a profile of you.
What we don't collect
We don't collect your location, contacts, photos or health data, and we don't use advertising IDs, analytics or tracking tools in the app or on this website. This website doesn't set cookies.
How we use it
- To sign you in and keep you signed in.
- To keep your household's lists in step on everyone's phones.
- To send the notifications you've chosen: things running low, someone joining your household, and someone starting a shop (including the lock screen Live Activity).
- To keep widgets up to date, using silent background notifications.
- To check whether you or your household has Stocked Plus, and switch Plus features on or off.
- To answer you when you contact us for support.
Our legal basis is that we need this information to provide Stocked to you (performance of a contract). For keeping the service secure and working, it is our legitimate interest in running a reliable service.
Who can see it
The people in your households. Everyone in a household can see its lists, the household's members (their names and email addresses) and when someone is shopping. Only invite people you're happy to share this with.
Service providers who run parts of Stocked for us, only to provide the service and under data processing terms:
- Vercel, which hosts the Stocked server and this website.
- Neon, which hosts the Stocked database, in London, United Kingdom.
- Apple, for Sign in with Apple, delivering notifications to iPhones, and handling Stocked Plus payments.
- Google, for Google sign-in.
Some of these providers may process information outside the European Economic Area. Where they do, it is protected by an adequacy decision (as for the United Kingdom) or the European Commission's standard contractual clauses.
We don't sell or rent your information, and we don't share it with anyone for advertising.
On your phone
Stocked keeps a copy of your household's lists on your phone so it works without a connection, and a sign-in token in your phone's secure Keychain. The widgets read a copy of your shopping list stored in the app's own private space on the phone. Signing out removes your sign-in and stops notifications on that phone.
How long we keep it
We keep your information for as long as you have a Stocked account. When you delete your account, we delete your account and your memberships straight away, and any household where you were the only member, with everything in it, along with your Stocked Plus subscription records. Deleting your account doesn't cancel a Plus subscription with Apple, so cancel that first in your iPhone's settings. Lists in households you shared with others stay with those households, because they belong to everyone in them. Basic request logs are kept by our hosting provider for a short period and then deleted.
Deleting your account
You can delete your account at any time in the app, under Set up. See Delete your account for the steps, or to ask us to do it for you.
Your rights
Under data protection law (including the GDPR), you have the right to:
- get a copy of the information we hold about you;
- have it corrected if it's wrong;
- have it deleted;
- receive it in a portable format;
- object to, or ask us to restrict, how we use it.
To use any of these, email support@lakelandsoftware.ie. If you're not happy with how we've handled your information, you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or your local data protection authority.
Children
Stocked is for households to use together and isn't aimed at children. You need to be at least 16 to create an account.
Security
Information travels between the app and our server over encrypted connections, sign-in tokens are stored in your phone's Keychain, and access to the database is restricted. No system is perfectly secure, but we work to keep your information safe.
Changes to this policy
If we change this policy, we'll update the date at the top of this page, and tell you in the app if the change is significant.