Privacy Policy

Last updated: 23 August 2026

Türkçe sürüm →

1. Introduction

At StokX we value your privacy. This policy explains which data is collected while you use the StokX mobile and desktop application and the stokxpro.com website, how it is processed, where it is stored, and what your rights are.

StokX is a cloud-based application and requires an internet connection to work. By using the application or the website you declare that you have read and accepted this policy.

2. Data We Collect

2.1. Account information

Your name, email address and password are collected during registration. Your password is stored in an irreversible (hashed) form; it cannot be seen by us in plain text.

2.2. Business data

The products, categories, customer accounts, stock movements, sales and purchase records, financial records, staff and permission information you create in the application, together with your application settings, are processed under your account and stored on our servers.

2.3. Contact data

You may provide data such as your name, email, phone number and message content through the contact form, newsletter sign-up or a support request on our website. This data is used to answer your request.

2.4. Technical and anonymous data

We may collect technical information that cannot be linked to your identity — such as device type, operating system version, application version and crash reports — for the purpose of improving the product.

2.5. Location data

Only in the field sales feature and only when you are assigned to a vehicle, the precise (GPS) location of your vehicle is collected and stored on our servers under your account. This data is used so that your business manager can track field vehicles live on a map and manage routes and deliveries. Location is collected only for as long as you are assigned to a vehicle. On Android it may also be collected while the application is in the background or closed; a persistent notification is shown on your device while sharing is active and you can stop it at any time. On iOS location is collected only while the application is in the foreground; the app does not use background location. Your location data is used only within your own business; it is not shared with third parties, not sold and not used for marketing.

2.6. Voice / microphone data

Microphone access is requested only when you use voice-based stock counting or ask the AI assistant a question by voice. Your voice is converted to text; no audio recording is stored. The text of the question you ask the AI assistant is sent to the relevant third-party service (see Section 5) so that an answer can be generated.

2.7. Purchase and subscription data

When you purchase the in-app StokX Pro subscription, the payment takes place entirely on Apple App Store or Google Play. Your card number, bank details and billing address are never transmitted to us and are never stored on our servers.

Only the technical data required to verify the validity of the subscription reaches our servers from the store: the transaction identifier, the purchased product identifier (which plan), the purchase and expiry dates, the automatic renewal status, the environment (production / sandbox) and the verification response returned by the store. This data is processed under your account.

This data is used only to verify the validity of your subscription, to grant you access to the application and to resolve your support requests; it is not used for marketing and not sold to third parties.

3. Purposes of Processing

• To provide the service and manage your account,
• To synchronise your data across the devices you sign in on,
• To run application features (reports, business intelligence, invoice reading, barcode lookup, etc.),
• To verify your subscription status and manage your access to the application,
• To respond to your support requests,
• To detect and fix software defects,
• To maintain information security and comply with legal obligations.

4. Storage and Synchronisation

Your business and account data is stored on our servers (stokxpro.com) under your account and is synchronised across all devices you sign in on. This lets you access the same data from more than one device with the same account.

Data is transmitted over a secure connection (HTTPS/TLS). A local cache is also kept on your device for fast access and temporary offline viewing. If you wish, you can back up your data to your own Google Drive account; that backup is under your control alone.

5. Third-Party Services

StokX uses the following third-party services in order to provide certain features. Only the data required by the relevant function is transmitted to these services:

• Anthropic (Claude AI): in the business intelligence and invoice reading features, the relevant business data is transmitted for processing.
• Barcode lookup service: only the barcode number is sent, in order to retrieve product information.
• Firebase (Sign in with Google / Apple): used for authentication if you choose it.
• Google Drive: only when you enable it, your backups are uploaded to your own Drive account.
• Currency / market data services: for display purposes only.
• Apple App Store / Google Play: subscription purchase and verification. Payment takes place entirely on the store side; only the technical data verifying the validity of the subscription is returned to us (see Section 2.7).

Some of these service providers may be located abroad; in that case the transfer is carried out in accordance with the applicable legislation. We do not sell, rent or share your user data with third parties for marketing purposes.

6. App Permissions

The application may request the following permissions, only when you use the relevant features:

• Camera: barcode scanning and adding documents/photos,
• Location: only when you are assigned to a field sales vehicle, to share the vehicle's live location with your business manager. On Android, background location is used only while this feature is active and remains visible through a persistent notification; on iOS, location is used only while the app is in the foreground,
• Microphone: for voice-based stock counting and asking the AI assistant a question by voice (voice is converted to text, not recorded),
• Storage / Gallery: product photos and backup files,
• Notifications: critical stock alerts and reminders,
• Contacts: importing customer/supplier information,
• Local network: connecting to a printer and to security cameras on the local network (RTSP/ONVIF),
• Biometrics: application security (fingerprint / face recognition).

Permissions are optional; if you do not grant one, only the related feature stops working and the application continues to run.

7. Cookies and Tracking

Our website uses a limited number of cookies for session management and anonymous analytics. You can delete or block cookies from your browser at any time.

8. Data Security

The main measures we take to protect your data:

• Encrypted communication between the server and the device with TLS (HTTPS),
• Storing passwords in an irreversible (hashed) form,
• Access to data only with your own authenticated account,
• The option of a biometric lock or PIN protection on the device.

For the security of your account we recommend using a strong password and not sharing your sign-in credentials.

9. Retention Period

Your data is retained for as long as the service is provided and within the applicable statutory retention periods. When you delete your account, the data linked to your account is deleted or anonymised, except where legal obligations require otherwise.

Subscription records (Section 2.7) may be kept after account deletion, in a form that cannot be linked to your identity, due to the retention obligations imposed by financial legislation. These records contain no payment information.

10. Your Rights and Account Deletion

Under the Turkish Personal Data Protection Law (KVKK) and the GDPR you have the following rights:

• To learn whether your data is being processed,
• To request access to, correction of, or deletion of your data,
• To request restriction of processing,
• To withdraw your explicit consent,
• To request data portability.

You can delete your account and your data directly from within the application: My Account → Delete Account. This permanently removes your account and your data on the server. If you prefer, you can also send deletion or other requests to stokx.info@gmail.com; your request is answered within 30 days at the latest.

11. Children's Privacy

StokX is not designed for users under the age of 13. If we learn that a user under 13 has provided data, we delete that data.

12. Contact

For all questions and requests regarding our privacy policy:

• Email: stokx.info@gmail.com
• Phone: 0555 753 9828
• Address: Karşıyaka Mah., Asya Center, Afyonkarahisar

This policy may be updated from time to time. We will inform you of significant changes by in-app notification or email.