Privacy policy — Restock Home

Who we are

This policy describes Restock Home (Portuguese name: Despensa em Casa), published by ApexCraft (GitHub organization ApexCraft-Br). ApexCraft is a Brazilian software studio.

Questions: apexcraft@googlegroups.com.

What the app is

Restock Home is a productivity app for a household pantry: items, quantities, consumption, and a restock cart. It is not a medical device and does not treat health conditions. The store category is Productivity.

Data we store

The app is offline-first. The source of truth is on this device (local Drift database). In v1 that includes:

• Household and members (names you enter at onboarding)
• Pantry items (name, category, ideal quantity, and stock events)
• Open shopping cart and lines
• Settings (theme, language, contrast, color inversion, last-sync stamp)

There are no ads, in-app purchases, or a public feed. Item names are private to the household.

Optional sync

You can use the app on this device only, with no account. When you generate an invite to share the household (optional), the app uses Firebase Auth and Firestore for that household only. With no invite, nothing is sent to the cloud.

The app keeps working if the network drops; the sync queue waits until it is back.

Permissions

v1 does not request notifications or exact-alarm privileges. Opening this policy uses the system browser (VIEW HTTPS), not an in-app WebView.

Third-party libraries

The app is Flutter. The libraries below run on the device. None is an ads or social SDK.

• Flutter — application framework
• drift / sqlite3 — local database
• shared_preferences / flutter_secure_storage — on-device local preferences and secure storage
• connectivity_plus — calm network indicator (does not block use)
• url_launcher — open external links in system browser
• Firebase (Auth / Firestore) — household sync only after you opt into an invite
• Firebase Analytics — optional aggregate app interaction and usage telemetry

Device integrity

Production builds may run on-device integrity checks (safe_device). Those checks do not send a device profile to ApexCraft.

Sharing & telemetry

We do not sell data and do not engage in cross-site tracking. No ads, IAP, or social login.

Product telemetry: we collect aggregate app interaction metrics (such as visited screens and restock event counts) via Firebase Analytics under legitimate interest to improve app stability and experience. We do not collect personally identifiable information (zero PII), pantry item names, or user IDs. You can fully disable telemetry collection at any time using the toggle in Settings.

If household sync is on, that household’s data lives in Firebase under rules that limit access exclusively to invited members.

Retention

Local data remains while the app is installed and app storage has not been cleared. If a cloud copy of the household exists, it remains until the owner deletes the account / household or requests deletion.

Deletion

In Settings you can wipe all data on this device. That command clears the local database and preferences and returns the app to onboarding. You can also clear app storage in system settings or uninstall the app.

Remote deletion of the Firebase household, when sync exists, is done by the owner in the same deletion flow (uninstalling the app is not enough).

Children

The app is not designed for children. The declared Google Play audience is 13 and older. It is not enrolled in Designed for Families. The expected content rating (Everyone / ClassInd L) describes the content, not the audience.

Security

Practical protection of local data is that of the device (screen lock and isolated storage). Production builds may refuse to continue on a compromised device, without sending telemetry.

Changes

If this policy changes, we will update the date at the top. The URL stays https://apexcraft-br.github.io/en/privacy/restock-home/ — we do not rename that path.

Contact

ApexCraft (ApexCraft-Br). Email: apexcraft@googlegroups.com.