HomeStock · Privacy Policy

Last updated: 2026-11-12 Effective: 2026-11-12

HomeStock (“家当”, “the app”) is maintained by an independent developer. It helps you keep track of what you have at home, where it is, and when it expires. This policy explains what the app collects, how it is used, stored and shared, and what rights you have.

1. Information we collect

Data kept on your devices and in your own iCloud (the app’s core data; the developer cannot access it):

Items and spaces: item names, categories, quantities, units, locations, expiry dates, opened dates, purchase dates and prices, warranty dates, notes and photos, and the rooms, cabinets and compartments you set up.
Records: use, used-up, discard and move records, routines and their completion history, moving boxes and checklists, and cooked-recipe records.
Profile and preferences: the name and avatar you enter under Me, plus reminder times, taste and dietary preferences.
Purchase status: your trial, lifetime and subscription status, provided on device by Apple’s StoreKit.

Data sent to the developer’s server (only when you use an AI feature, see section 3):

The text the feature needs;
A device token (a random ID the app generates for each device; it is not your Apple ID, phone number or advertising identifier);
During a trial or subscription, the Apple-signed transaction used to check eligibility.

The app does not collect your location, contacts, calendars, health data, browsing history or advertising identifier (IDFA), and does not use any data or device fingerprinting to track you across apps or devices.

2. How we use it

To show your items, spaces, reminders and statistics on your device;
To sync between your own Apple devices through iCloud;
To send local notifications as you configure them (expiry digest, warranty, restock, routines);
To process requests when you use an AI feature (section 3);
To check trial and subscription eligibility, enforce usage limits, prevent abuse and account for service costs (sections 3.4 and 3.5).

We do not use your information for advertising or profiling, and we do not sell it.

3. Storage and transfer

3.1 Local storage and iCloud

Items, spaces and records are stored in a local database on your device and synced within your own Apple ID through the CloudKit private database. Profile and preferences sync through iCloud key-value storage. Only you can access your private database; the developer cannot read it.

3.2 Processing on your device

Text on receipts, order screenshots and packaging is recognised on your device with Apple Vision. Photos are never uploaded. Expiry reminders, restock suggestions, statistics and asset totals are all calculated on device.

3.3 AI features

The AI features are: cloud recognition when adding items from a photo (identifying products and expiry dates), organising supplement and medicine labels, recipe suggestions for items about to expire, and creating a routine from one sentence.

Consent first for cloud recognition: before the first use, the app explains what will and will not be sent and asks for your consent. You can withdraw it at any time under Me → Data & Privacy; the app will ask again next time. Without consent, items are parsed on device instead.
What is sent:
- Cloud recognition: text from which names, phone numbers, addresses and similar details have already been removed on your device;
- Recipe suggestions: ingredient names, quantities, units and days left, plus the servings, cuisine, region and exclusions you set;
- Routine from a sentence: the sentence you type.
What is never sent: photos, item locations and prices, your profile, your Apple ID.
Server-side check: if text reaching the developer’s server still contains a phone number, ID card number or bank card number, the request is rejected and not forwarded to the model.
Where it goes: through the developer’s own server (homestock-api.xingcihang.com) to the third-party AI model service DeepSeek, which processes it and returns a result.
What the developer’s server keeps: it only forwards requests and returns results. It does not store the content of your requests or the AI’s answers.
Third-party provider: DeepSeek’s handling of what it receives is governed by its own privacy policy and terms. We do not give it your name, email, Apple ID or device token.
You stay in control: recognition results are reviewed by you before they are added; a recipe does not reduce your stock until you mark it as cooked.

3.4 What the developer’s server records

To enforce limits, prevent abuse and account for costs, the server records call metadata: time, the first 8 characters of the device token, feature type, model, token counts, response time and success or failure. The server’s access logs contain the requesting IP address, time and path, used for rate limiting and troubleshooting. These records do not contain your request content or item data.

3.5 Trial and subscription (AI Pack)

Purchases are handled by Apple; the developer never sees your payment details. To check whether you are in a trial or subscribed, the app sends Apple’s signed transaction to the developer’s server to verify its signature. The server only counts this month’s AI uses against the transaction’s original transaction ID, for the monthly limit. It does not store your Apple ID, name or email.

3.6 Third-party SDKs

The app includes no third-party analytics, advertising or crash-reporting SDKs.

We do not sell or rent your personal information or use it for advertising. We share it only:

With the AI model service DeepSeek, as described in section 3.3, when you use an AI feature (as the provider processing your request);
When required by law.

5. Your rights

Export your data as a spreadsheet (CSV) or as complete data (JSON) under Me → Data & Privacy;
Delete all data under Me → Data & Privacy: this clears items, spaces and records on this device and in iCloud, and clears your profile and preferences; your other devices clear after they sync. Purchases are not affected;
Withdraw consent for cloud recognition under Me → Data & Privacy;
Turn off iCloud sync for the app, or manage and cancel subscriptions, in system Settings;
Contact the developer to exercise rights of access, correction, deletion, withdrawal of consent or portability (under PIPL, GDPR, CCPA and similar laws). The server does not store your request content, and the metadata it keeps cannot be linked to your real identity.

6. Children

The app is not directed at children under 13 and does not knowingly collect their information.

7. Security

Local data is protected by iOS, iPadOS and macOS data protection; iCloud sync uses Apple’s encrypted channels;
Communication with the developer’s server uses HTTPS;
The server does not store AI requests or answers.

No method of electronic transfer or storage is completely secure. We recommend turning on a device passcode, Face ID or Touch ID.

8. Changes

We may update this policy. Significant changes (types of data collected, purposes, third-party sharing) will be announced in the app or in an app update.

9. Contact

For questions, complaints or to exercise your rights, use Me → Feedback in the app, or email xingcihang@foxmail.com.

This English version is a translation for reference. If there is any inconsistency, the Chinese version prevails.