Raw Markdown Privacy Policy

# Privacy Policy

Last updated: July 12, 2026

Privacy contact: [privacy@restockapp.app](mailto:privacy@restockapp.app)

## Quick summary

Re:Stock is built so your supplement inventory stays private by default.

- The app stores Re:Stock data on your device unless you enable optional iCloud Sync or export/share data yourself.
- There is no Re:Stock account system, advertising SDK, third-party analytics SDK, third-party crash-reporting SDK, or tracking pixel.
- The developer does not sell your personal data.
- Some features depend on Apple services, including iCloud, CloudKit, StoreKit, local notifications, Calendar, and the App Store.
- If you email Re:Stock, the developer receives the address and message content you choose to send.

## 1. Controller

| Item | Details |
| --- | --- |
| Controller | Rokas Kučinskas, IA Cert. No. 1489428 |
| Registered area | Marijampolė, LT-68147, Lithuania |
| Privacy contact | [privacy@restockapp.app](mailto:privacy@restockapp.app) |
| Data protection officer | Not appointed. Re:Stock is operated as an individual activity and does not involve developer-operated large-scale monitoring or developer-operated large-scale processing of special category data. |

## 2. What data Re:Stock handles

Re:Stock may store information you enter, create, or generate while using the app. Some of that information can be personal or health-adjacent depending on what you choose to record.

| Data category | Source | Required? | Typical use |
| --- | --- | --- | --- |
| Inventory and supplement data | Entered or generated by you in the app | Needed only for the features you choose to use | Inventory tracking, refill estimates, schedules, reminders, import/export, and backups |
| Device and app settings | Your device and app configuration | Depends on feature | Local storage, optional sync status, notification preferences, calendar integration, and app behavior |
| Purchase entitlement status | Apple StoreKit and the App Store | Needed for paid features | Unlocking subscriptions, lifetime purchase access, refunds, and subscription status |
| Website technical data | Automatically processed by Cloudflare when you visit the website | Necessary to deliver the website | Hosting, security, DNS, traffic delivery, and abuse prevention |
| Email contact data | Directly from you when you email Re:Stock | Optional | Support, privacy requests, troubleshooting, feedback, and legal record keeping |

**Health-adjacent information.** Re:Stock is an inventory management app, not a medical app. Still, supplement names, routines, notes, and logs may reveal information about a person's body, habits, or health. The developer does not normally receive this app data unless you choose to send it, for example in a support email or exported file.

## 3. Local storage, iCloud Sync, exports, and backups

### Local Only

Re:Stock opens in Local Only mode by default. App data stays in local storage on your device unless you export or share it.

### iCloud Sync

If enabled, Re:Stock uses Apple's private CloudKit database for the app's iCloud container. You manage iCloud through Apple account and device settings. The developer cannot access data stored in your private CloudKit database unless you choose to send it, for example in an exported file or support email.

### Exports and backups

`.stock` exports and backup files are under your control. If you share, upload, or store them elsewhere, that destination handles the copy you choose to create.

## 4. Purposes, legal bases, and retention

Where the GDPR applies, Re:Stock relies on the following legal bases.

| Processing activity | Data involved | Purpose and legal basis | Retention |
| --- | --- | --- | --- |
| App inventory features | Inventory, schedule, restock, log, note, settings, and estimate data | Providing the app features you request. Art. 6(1)(b) GDPR where processing is necessary for the app service; Art. 6(1)(f) GDPR for reliability, troubleshooting, and product improvement where applicable. | On your device until you delete it, remove the app, overwrite it through import/restore, or otherwise manage it through app/device controls. |
| Optional iCloud Sync | App data synced through Apple's private CloudKit database for the app | Providing sync across your Apple devices when you enable it. Art. 6(1)(b) GDPR and your feature choice. | In your iCloud account until you disable sync, delete app/iCloud data, or manage it through Apple/iCloud settings. |
| Notifications and calendar reminders | Reminder timing, supplement schedule details, notification permissions, and calendar events | Scheduling reminders you enable. Art. 6(1)(a) GDPR consent through iOS/app permission choices; Art. 6(1)(b) GDPR where needed to provide the requested reminder feature. | On your device and, for calendar data, according to Apple Calendar/iCloud settings until you delete or change the reminders/events. |
| Paid features and purchases | App Store purchase status, subscription status, entitlement status, refunds, and related records | Enabling paid features and complying with purchase, tax, accounting, and App Store obligations. Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR where legal obligations apply. | Entitlement data is retained as needed to provide paid access. Accounting or tax records may be retained for the legally required period. Apple controls App Store payment records. |
| Website hosting and security | IP address, request metadata, security events, and technical logs processed by Cloudflare | Delivering and protecting the website. Art. 6(1)(f) GDPR legitimate interests in a secure and reliable website. | According to Cloudflare's applicable service, security, and log retention settings. |
| Support, privacy, and general email | Email address, message content, attachments, and follow-up correspondence | Responding to your request, troubleshooting, improving Re:Stock, defending legal claims, and keeping appropriate records. Art. 6(1)(f) GDPR; Art. 6(1)(b) GDPR if the request concerns app support you ask for; Art. 6(1)(c) GDPR where legal obligations apply. | Routine support messages are generally deleted or anonymized within 24 months after resolution unless a longer period is needed for legal obligations, disputes, security, or abuse prevention. Messages relevant to legal claims or obligations may be kept longer where necessary. |

**Special category data by email.** Please avoid sending health information or other special category data by email unless it is necessary for your request. If you voluntarily include it, Re:Stock will use it only to handle your request or where needed for legal claims. Where GDPR treats it as special category data, Re:Stock will rely on an applicable Art. 9(2) GDPR condition, such as explicit consent where requested or Art. 9(2)(f) GDPR where processing is necessary for legal claims.

## 5. Notifications and Calendar

- **Adherence nudges:** If enabled, Re:Stock may schedule local iOS notifications about upcoming supplement occurrences. Permission is requested only after you opt in, and you can change it in iOS Settings.
- **Calendar Reminders:** If enabled, Re:Stock may ask for calendar access and create or update a dedicated "ReStock Supplements" calendar.
- **Apple handling:** Calendar events may include supplement schedule details and are handled by Apple Calendar and iCloud according to your device and Apple account settings.

## 6. Purchases

| Item | Details |
| --- | --- |
| Products | Monthly subscriptions, annual subscriptions, and a lifetime purchase may be offered. |
| Processor | Purchases are handled through Apple StoreKit and the App Store. |
| Developer access | Re:Stock receives purchase entitlement status needed to unlock paid features. The developer does not receive your full payment card details. |

## 7. Website, cookies, analytics, and tracking

### Cloudflare Pages

Cloudflare may process technical data such as IP address, request metadata, and security logs to deliver and protect this website, according to Cloudflare's own privacy policy.

### No third-party tracking SDKs

The current Re:Stock app does not include third-party analytics, advertising, crash-reporting, or tracking SDKs.

### Cookieless analytics

The website uses Cloudflare Web Analytics to measure aggregate traffic. It is cookieless: it sets no cookies, stores nothing on your device, and does not fingerprint you or track you across sites, so no cookie-consent banner is required. The website carries no advertising cookies or cross-site tracking. If Re:Stock ever adds tracking that would require consent, the required consent controls will be added first.

Apple may process information for App Store purchases, iCloud, CloudKit, notifications, device diagnostics, and other Apple services according to [Apple's privacy materials](https://www.apple.com/legal/privacy/).

## 8. Service providers and recipients

Re:Stock currently uses these service providers or platform services.

| Provider or service | Role | Data involved |
| --- | --- | --- |
| Apple App Store and StoreKit | App distribution, purchases, subscriptions, entitlement status, refunds, and related App Store services | Purchase and entitlement information handled through Apple |
| Apple iCloud and CloudKit | Optional iCloud Sync | App data you choose to sync through your Apple account |
| Apple Calendar and local iOS notifications | Optional reminder features | Calendar events, notification permissions, and reminder timing |
| Apple iCloud Mail | Email addresses used for Re:Stock contact | Email address, message content, attachments, and correspondence metadata |
| Cloudflare Pages and Cloudflare DNS | Website hosting, delivery, DNS, security, and cookieless analytics | Website technical data, request metadata, and security logs |

The developer does not sell supplement inventory data.

## 9. International transfers

| Item | Details |
| --- | --- |
| When transfers may happen | Some providers listed above may process data outside Lithuania or outside the European Economic Area. |
| Safeguards | Where required, transfers are handled under the provider's legal transfer mechanisms, such as adequacy decisions, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or other safeguards described in the provider's own privacy materials. |
| How to ask | You can request information about relevant transfer safeguards by contacting [privacy@restockapp.app](mailto:privacy@restockapp.app). |

## 10. Deletion and control

1. **Data under your control.** App data remains on your device and, if enabled, in your iCloud account unless you delete it in the app, remove the app, change iCloud settings, delete relevant iCloud data, or import/restore different app data.
2. **In-app deletion.** Settings includes a "Delete My Data" option that permanently deletes your Re:Stock data from this device, from your iCloud, or from both. You can also remove local app data by deleting the app from your device and manage iCloud data through Apple/iCloud settings.
3. **Privacy request limits.** Because Re:Stock has no separate account system and the developer generally cannot access data stored only on your device or in your private iCloud account, some access or deletion requests need to be completed directly on your device or through Apple/iCloud settings.

## 11. Your rights

Depending on where you live, including if you are in the European Economic Area, you may have the rights below.

- **Access:** Request a copy of personal data.
- **Correction:** Ask for inaccurate or incomplete data to be corrected.
- **Deletion:** Ask for personal data to be deleted where the conditions apply.
- **Restriction:** Ask Re:Stock to limit processing in certain cases.
- **Portability:** Request portable data where portability applies.
- **Consent withdrawal:** Withdraw consent at any time with future effect where processing is based on consent.
- **Complaint:** Lodge a complaint with a data protection supervisory authority.

**Your right to object.** Where Re:Stock relies on legitimate interests under Art. 6(1)(f) GDPR, you may object to that processing on grounds relating to your particular situation. If Re:Stock ever processes personal data for direct marketing, you may object to that marketing at any time.

| Item | Details |
| --- | --- |
| Exercise rights | Contact [privacy@restockapp.app](mailto:privacy@restockapp.app). Re:Stock may need to verify your identity in a proportionate way before responding. GDPR requests are normally answered within one month, unless an extension is permitted because the request is complex or numerous. |
| Supervisory authority | State Data Protection Inspectorate, Valstybinė duomenų apsaugos inspekcija, L. Sapiegos str. 17, LT-10312 Vilnius, Lithuania. Website: [vdai.lrv.lt](https://vdai.lrv.lt/). |

## 12. Automated decisions and AI

- **Inventory calculations:** Re:Stock may calculate inventory estimates, refill timing, and low-stock states based on information you enter.
- **No legal effects:** These calculations are utility estimates for inventory planning and do not constitute automated decision-making with legal or similarly significant effects under Art. 22 GDPR.
- **No AI decisions:** The current Re:Stock app does not use artificial intelligence to make decisions about you, score you, profile you, or generate legal or similarly significant effects.

## 13. Children's privacy

Re:Stock is not intended for children under 16. If you believe a child has provided personal information through email contact, contact [privacy@restockapp.app](mailto:privacy@restockapp.app) so it can be reviewed.

## 14. Changes to this policy

This policy may be updated as Re:Stock changes. The latest version will be published on this page with an updated date. If material changes are made, Re:Stock may provide additional notice where practical.

## 15. Contact

For privacy questions, contact [privacy@restockapp.app](mailto:privacy@restockapp.app).