HomeStock Privacy Policy

Last updated: 15 August 2026

BIG BRAIN SOLUTIONS, Obrt za računalno programiranje, based in Croatia, operates the HomeStock mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

By using HomeStock, you agree to the collection and use of information as described here. If you do not agree, please do not use the App.

1. Who We Are

Data controller: Big Brain Solutions, obrt
Location: Croatia, European Union
Contact for privacy matters: [email protected]

2. Information We Collect

2.1 Account information

• Email address — required to create an account and log in, whether you sign up directly or via "Continue with Google."
• Password — if you sign up directly (not via Google). We never see or store your plaintext password; it is handled and stored securely by our authentication provider (Supabase Auth).
• If you use "Continue with Google," Google shares your basic account information (email, and any profile info Google's sign-in flow discloses to us) with us, per Google's own consent screen shown to you at sign-in.

2.2 Household and inventory data

Everything you enter into the App to use its core features:

• Home and room names, icons, and organization
• Item names, categories, units, quantities, prices, and notes
• A history of quantity/price changes (purchases, stock adjustments) tied to each item
• Shopping lists and their contents
• Your selected currency

2.3 Receipt scanning

When you scan a receipt, the photo is processed entirely on your device. We extract structured data (item names, quantities, prices, store name, date) from the image using on-device text recognition. The photo itself is never uploaded to our servers and is discarded immediately after processing — we do not store receipt images.

2.4 Household sharing

If you invite someone to your home, or you join someone else's home using an invite code, your email address becomes visible to other members of that home (so people know who they're sharing with), and all inventory, shopping list, and spend data in that home becomes accessible to every member. Only invite the people you actually want to share this data with.

2.5 Diagnostic and crash data

We use Firebase Crashlytics to automatically collect crash reports if the App malfunctions — this includes technical information (device model, OS version, app version, and the technical details of what caused the crash) but not the content of your inventory or personal messages.

2.6 What we do NOT collect

• We do not store receipt images.
• We do not collect your location.
• We do not use advertising trackers, and the App contains no ads.
• We do not access your contacts, camera roll, or files beyond what's needed for the specific photo you choose to scan.
• We do not sell your data to anyone, ever.

3. How We Use Your Information

We use the information above only to:

• Provide and operate the App's core functionality (inventory tracking, syncing across your devices, shopping lists, spend insights)
• Enable household sharing that you explicitly set up by inviting or being invited
• Diagnose and fix crashes and technical problems
• Communicate with you about your account (e.g. email confirmation) where necessary
• Comply with legal obligations

Legal basis (for users in the EU/EEA): we process your account and inventory data because it's necessary to provide the service you've signed up for (performance of a contract). We process crash diagnostics under our legitimate interest in keeping the App reliable and secure.

4. Who We Share Data With

• Other members of a home you've joined or created, as described in Section 2.4 — this is a core, intentional feature of the App, not incidental sharing.
• Service providers who process data on our behalf: Supabase (database, authentication, and sync infrastructure); Google Firebase (crash reporting) and Google Sign-In (if you choose to sign in with Google); Google Play (app distribution).

These providers only process data as needed to provide their service to us, under their own data processing agreements. Some of these providers may process data on servers located outside your country, including outside the European Economic Area; where that happens, we rely on the safeguards those providers maintain (such as standard contractual clauses) to protect your data.

We do not share your data with advertisers or data brokers, and we do not sell your data.

5. Data Retention

We keep your account and inventory data for as long as your account is active. If you delete your account (see Section 6), we delete your personal data within a reasonable period, except where we're required to retain certain records by law.

6. Your Rights

Depending on where you live, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data (most of this you can do directly in the App)
• Delete your account and associated data ("right to erasure")
• Export your data in a portable format
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing

To exercise any of these rights, including account deletion, contact us at [email protected]. We will respond within the timeframe required by applicable law.

If you're in the EU/EEA and believe we haven't handled your data properly, you also have the right to lodge a complaint with your national data protection authority (in Croatia, this is AZOP — the Croatian Personal Data Protection Agency).

7. Children's Privacy

HomeStock is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Security

We take reasonable technical and organizational measures to protect your data, including encrypted data transmission and database-level access controls that restrict each user's data to themselves and the household members they've explicitly shared it with. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means. The "Last updated" date at the top reflects the most recent revision.

10. Contact Us

BIG BRAIN SOLUTIONS, Obrt za računalno programiranje
Riječka 15a, 20000 Dubrovnik
[email protected]