Yonga Stock privacy policy

Everything you keep in the app is saved on your phone: your products and their options, prices and stock counts, every sale, arrival, return, write-off and count, the entries you wrote, the words the app learned from your picks, and your settings.

This data sits in the app’s private storage, which other apps cannot read. Low-stock notices and the month’s summary are worked out on the phone itself; no push service is involved. A CSV file you import or export is read or written on the phone, in the place you choose.

If Android’s backup is turned on for your phone, Android may keep a copy of this data in your own backup and bring it back on a new phone. That copy is handled by Android and your Google account, not by us.

The app uses these permissions:

• Network access, to have entries read once you have allowed that.
• Notifications, asked for only if you want a notice when something runs low or a summary when a month ends.
• Microphone, asked for the first time you tap “Speak”.
• Background work, also after a restart, so that an entry waiting for a connection is read when one returns.

It does not ask for your location, contacts, camera, photos or files, and it does not read your advertising ID.

Nothing leaves the phone until you allow reading. The first time you record an entry, the app shows what would be sent and asks. If you choose “Not now”, your entries stay on the phone, unread. The choice stays in Settings, where you can turn reading on or off at any time.

With reading on, each entry you record is sent to our server to be read. The request contains:

• the text of the entry and the date it was written on;
• your product list: the names of your products, their options, such as a colour or a size, and any other names you gave them;
• the words the app has learned from your picks, such as a nickname for one item;
• your currency, and identifiers the app made up at random for the entry and the products, so that the answer can point back at them;
• an access key that identifies this installation of the app.

It does not contain your stock counts, your prices or your sales history.

The access key is created at random. It is not your name, email address, phone number or advertising ID, and we have no way of telling who it belongs to.

An entry is free text, so it holds whatever you write in it. Please keep passwords, payment details and your customers’ private information out of your entries.

Pasting a product list to import it works the same way: the text you paste is sent to be read, and the button says so when pressing it also allows reading. A CSV file is read on the phone and is not sent.

Entries written while reading is off stay on the phone. One of them is sent only if you later open it and choose to have it read.

Two kinds of service handle a request.

Our server. It checks the access key, applies the fair-use limits and passes the entry on to be read. It does not write the text of your entries, your product names or the answer to its storage or to its logs. The answer is held in the server’s memory for up to an hour, so that a request repeated after a lost connection is not read twice, and is then discarded. What the server does keep is a record of the installation, counts of its requests, and totals for the whole service, such as how many entries were read in a day.

AI service providers. The reading itself is done by third-party AI services. They receive the entry’s text and date, your product list, the learned words and your currency. They do not receive the access key, and because the request reaches them from our server, they do not see your IP address or anything about your phone.

These providers process a request in order to answer it. Under the terms that apply to us, they do not use your entries to train their models. We also ask them not to keep a request wherever a service offers that choice; they may still retain it for a limited time under their own terms, for example to detect abuse.

We treat which providers we use as business information, but we will name the current ones if you ask: write to [email protected].

Traffic between your phone, our server and these providers also passes through the hosting and network providers that carry it. Our server and the services described here may process data in countries other than the one you live in.

When you tap “Speak”, your phone’s own speech recognition service listens and turns what you say into text in the entry box. The app asks for the microphone for this and for nothing else.

Stock does not record, store or send the sound. It receives the text, which you can read and correct before you record it; from there it is an entry like any other. The speech service is part of your phone, not of Stock: whether it works on the phone or sends the sound to its own provider depends on that service and on your phone’s settings.

• No advertising, and no advertising identifiers.
• No analytics or tracking software in the app.
• We do not sell or rent your data, and we share it with no one except the service providers described above.
• We do not build a profile of you or your shop from your entries, and we do not use them to train AI models.
• We do not send marketing email. The app never asks for your address.

On your phone, your data stays until you delete it. “Delete everything” in Settings erases every product, movement, entry and learned word. Uninstalling the app also removes everything it stored on the phone. A copy kept by Android’s backup is managed in your phone’s backup settings, not in the app.

You can stop entries leaving the phone at any time with “Turn reading off” in Settings. An entry still waiting to be read at that moment stays on the phone.

Our server holds no copy of your entries or your products, so there is nothing of that kind to delete there. The counts of an installation’s requests are removed by an hourly cleanup: the per-minute counts after an hour, the per-day counts after 40 days. The installation record is kept while the service runs. It is not linked to your identity; if you want it removed, write to [email protected] and we will work out with you which installation is yours.

Requests held by the AI service providers are removed under their own retention rules.

Everything the app sends travels over an encrypted connection. On the phone, the access key is stored encrypted with the phone’s own keystore and is left out of backups, and our server keeps only a one-way fingerprint of it. No system is perfectly secure; holding very little is the main protection we rely on.

Depending on where you live, for example under the GDPR in Europe or the KVKK in Türkiye, you can ask what data we hold about you, have it corrected or deleted, object to its processing or have it restricted, receive a copy of it, and complain to your data protection authority.

Most of your data is on your phone and under your control. For anything else, write to [email protected]. You will get an answer within 30 days, usually much sooner.

Where the law asks for a legal basis: entries are sent for reading on the basis of your consent, which you give by allowing reading and withdraw by turning it off. The installation record and the request counts are kept on the basis of our legitimate interest in keeping the service available and free of abuse.

Yonga Stock is made for people who sell things. It is not directed at anyone under 18, and we do not knowingly process a child’s data.

Yonga Stock is made by Yonga Works, an independent software developer based in Türkiye and the controller of the data described on this page. The same person writes the code, answers support mail and handles any request about data.

Contact: [email protected].

If this policy changes, the date at the top changes with it. There is no archive; the page you are reading is the current one.

We will not widen what leaves your phone without asking you in the app first.