Privacy Policy

SoloStock ("the App," "we," "us," or "our") is a mobile inventory management, invoicing, and point-of-sale application designed for independent retailers and growing businesses. We are committed to protecting your privacy and ensuring transparency about how your information is handled.

This Privacy Policy describes what data is collected, how it is used, and your rights as a user. By using SoloStock, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information (Optional)

When you create an account or sign in, we collect:

• Email address — via email/password sign-up, Apple Sign-In, or Google Sign-In
• Full name — provided by you or your social sign-in provider
• Profile photo URL — if available from your Google or Apple account

1.2 Business Information

You may voluntarily enter:

• Business name, address, phone number, and email
• Tax registration number and business registration number
• Bank account details (name, number, bank name) — for invoice display only
• Business logo

1.3 Inventory & Transaction Data

The core data you create within the App:

• Product names, prices, cost prices, stock quantities, SKUs, and product images
• Customer and supplier names, phone numbers, emails, and addresses
• Invoices, quotes, sales transactions, and payment records
• Expenses, vendor names, and receipt images
• Staff names, roles, and audit logs
• Recurring billing profiles

1.4 Device & Technical Data

• Device identifier — used locally to identify the default user before account sign-in
• Subscription status — managed through Apple App Store / Google Play Store via RevenueCat

1.5 Camera & Photo Library

With your explicit permission, we access:

• Camera — to scan product barcodes and take product photos
• Photo Library — to select existing images for products, business logos, and receipt records

2. How Your Data Is Stored

2.1 Local-First Architecture

SoloStock is a local-first application. All your business data (products, suppliers, quotes, invoices, recurring billing profiles, customers, expenses, staff records, audit history, and settings) is stored on your device in a local SQLite database. The App functions fully offline.

2.2 Cloud Backup (Optional)

If you sign in and enable cloud backup, your data may be synchronized to our cloud infrastructure powered by Supabase (hosted on AWS). Cloud backup is:

• Opt-in only — you must sign in and explicitly enable it
• Encrypted in transit via HTTPS/TLS
• Protected by Supabase's row-level security policies

2.3 Data You Control

You can:

• Use the App entirely offline without any cloud connection
• Delete your local data at any time by uninstalling the App
• Delete your cloud account and all associated backup data directly from within the App (via your account settings), or by contacting us

3. How We Use Your Information

We use the information collected to:

We do not:

• Sell your personal data to third parties
• Use your data for advertising or ad targeting
• Share your business data with other users (unless you explicitly invite staff members)

4. Third-Party Services

SoloStock integrates with the following third-party services, each with their own privacy policies:

We do not share your inventory, customer, or financial data with any of these services. They only receive the minimum information necessary for authentication and subscription management.

5. Data Security

We take reasonable measures to protect your information:

• Local storage: Data is stored in a sandboxed SQLite database on your device, protected by your device's operating system security
• Cloud transmission: All data transmitted to Supabase is encrypted using TLS 1.2+
• Authentication: Passwords are hashed and never stored in plaintext; social sign-in uses industry-standard OAuth 2.0 / OpenID Connect protocols
• Access control: Cloud data is protected by row-level security policies ensuring only authenticated users access their own data

6. Data Retention

• Local data: Retained on your device until you delete it or uninstall the App
• Cloud backup data: Retained as long as your account is active. When you delete your account (via the in-app account settings or by contacting us), all associated data is permanently deleted within 30 days
• Subscription records: Managed by Apple/Google and RevenueCat per their respective retention policies

7. Children's Privacy

SoloStock is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and all associated data directly from your account settings within the App, or by contacting us
• Portability: Export your data (available via the App's backup feature)
• Withdrawal of Consent: Disable cloud backup or delete your account at any time

To exercise any of these rights, contact us at the email address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the App after changes constitutes your acceptance of the updated policy.