On this page
The short version
Stocktend is a stock app for hair salons, run by Ian Magee, a sole trader in London. We collect what we need to run it: your sign-in details, your salon’s details and your salon’s stock records.
We never sell personal data. There are no ads in Stocktend, and we don’t track you across other companies’ apps or websites.
A salon’s stock records belong to the salon. We look after them on the salon’s behalf.
PDF delivery notes with text are read by our own reader, without AI. Photos, and PDFs our reader can’t read well, are read by Claude, an AI, only if you say yes. Say no and nothing is sent to Claude: your phone and our own reader still try to read the note, and you type in anything they miss. Nothing changes your stock until someone in your salon confirms it. See How AI reads delivery notes and photos.
Sharing how you use the app is off unless you switch it on. If you do, recordings of the screen hide all text. See Your choices in the app.
You pay through the App Store or Google Play. We never see your card details.
Your salon’s records are stored in the United States, with Railway in California. Some of our other service providers are in the United States too. Wherever data goes outside the UK and the EU, it has the safeguards UK and EU law require. See Sending data outside the UK and EU.
You can delete your account yourself in the app at any time, and your account and your personal details are deleted. You can also ask to see, correct or export your data. Email privacy@stocktend.com.
What we collect and why
This table is a summary. Each row is explained in more detail further down the page.
| What | For example | Why we use it | Lawful basis | How long |
|---|---|---|---|---|
| Your account | Email address, name, username, how you sign in (including Apple or Google), sign-in records | To sign you in and keep your account secure | Contract, if you set up the salon. Legitimate interests, if your salon invited you | Until you delete your account, or 90 days after your salon stops using Stocktend |
| Your salon and team | Salon name, delivery address, delivery contact, team names and roles | To run your salon’s workspace and put the right details on orders | Contract | While your salon uses Stocktend |
| Stock records | Products, photos, barcodes, stock counts, orders, supplier contacts | To keep your salon’s stock count | We act for your salon | Until your salon deletes them |
| Delivery notes | Photos and PDFs you add to a delivery, and the text read from them | To add deliveries to your shelf without typing | We act for your salon | Until your salon deletes the delivery |
| Documents your salon keeps | Price lists, cost lists and other files the owner keeps, with their file names | To keep supplier paperwork in one place and update prices | We act for your salon | Until the owner deletes them |
| Team activity | Which team member changed which stock, and when | So your salon has an accurate stock history | We act for your salon | With your salon’s stock records |
| Your subscription | Your salon’s Stocktend ID, the plan bought, whether it is active and when it renews or ends | To give your salon the access it has paid for | Contract | With your salon’s records |
| Notifications | Your device’s notification address, the alerts we send | Running low alerts and reminders | Contract, or legitimate interests for team members | Until the device stops accepting them, or you delete your account |
| How the app is used (only if you switch it on) | Screens opened, taps (including the words on what you tap), named actions, a random ID, your IP address, and session recordings with all text hidden | To see what works and fix what doesn’t | Your consent | See How long we keep it |
| Crash and speed reports | Error type, a cleaned error message, the screen, load time, device type | To find and fix crashes and slow screens | Legitimate interests | See How long we keep it |
| Feedback | Your message and a screenshot of your screen | To answer you and fix what you report | Legitimate interests | See How long we keep it |
| Messages you send us | Emails to support@ or privacy@stocktend.com, WhatsApp messages | To answer you | Legitimate interests | See How long we keep it |
| Website visits | IP address and browser details, seen by Cloudflare, our web host | To show you this website | Legitimate interests | See How long we keep it |
Who we are
Stocktend is run by Ian Magee, a sole trader based in London, United Kingdom, trading as Stocktend. In this policy, “Stocktend”, “we” and “us” mean Ian Magee trading as Stocktend. Our website is stocktend.com and the app runs at app.stocktend.com.
For anything about privacy, email privacy@stocktend.com. For help using the app, email support@stocktend.com.
We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, under the name Mr Ian Magee. Our registration number is ZC258816, and you can check it on the ICO’s public register.
Stocktend is offered in the UK. Before it is offered in EU countries, we will name our EU representative here.
Who this policy covers
- People who use the Stocktend apps for iPhone and Android, or Stocktend in a web browser: salon owners and their team.
- People whose details a salon keeps in Stocktend, such as supplier contacts and reps, and anyone named on a delivery note.
- People who visit this website or contact us.
Your salon’s records and our two roles
Under UK and EU data protection law (the UK GDPR and the EU GDPR), the organisation that decides why and how personal data is used is the controller. An organisation that handles personal data for someone else, on their instructions, is a processor. We are a controller for some data and a processor for other data.
Data we are responsible for
- Your account and sign-in details
- Your salon’s subscription
- How the app is used, if you share it, and crash reports
- Feedback and messages you send us
- This website
- The shared product list
Your salon’s own records
- Products, photos and stock counts
- Delivery notes, invoices and the documents your salon keeps
- Orders and supplier contacts
- The record of which team member made each stock change
Your salon is the controller of these records. We use them only to provide Stocktend to your salon, on its instructions, under the data processing terms in our terms.
Under the same data processing terms, our hosting provider keeps backups of salon records and files, so they can be restored if something goes wrong. Backups are deleted automatically, as How long we keep it explains.
We use one part of your salon’s records for our own purpose, and for this we are the controller: barcodes your salon confirms go into the shared product list.
If you work in a salon that uses Stocktend
Your salon decides how it uses Stocktend. The app shows your name to the rest of your salon’s team, and it records which team member made each stock change and when. Your salon uses this to keep its stock count accurate and to see how products are used. Here is who can see it:
- The salon owner can always see each person’s activity in Analytics, including a page for each person.
- By default, everyone in the salon can see it too. The owner can turn this off in Settings, with the Team on Analytics switch.
- The stock history export (a CSV file) includes the name of the person who made each change. Anyone in the salon’s team can download it.
- The owner gets a weekly notification that can name the team member who scanned the most.
Your salon is responsible for telling you about this and for answering questions about the salon’s records. If you contact us instead, we will pass your request to your salon and help them answer it. If you leave the salon, you can delete your account: what you scanned stays in the salon’s history, without your name.
If you are a supplier, a rep or a driver
Salons keep their suppliers’ details in Stocktend: the supplier’s name, email address and phone number, and the salon’s account number with that supplier. Some of this is typed in by the salon, and some is read from the delivery notes and invoices the salon uploads. Those documents can also show a rep’s or driver’s name or signature. The salon controls these records and we look after them for the salon. To ask about them, contact the salon. You can also contact us and we will pass your request on.
What the app collects
Everything the Stocktend app collects, where it comes from and why.
Most of it comes from you. The rest comes from:
- your salon: the salon’s details and team list, and the invite link you join with
- Apple or Google, if you sign in with them, and when you pay for a subscription
- the delivery notes, invoices and documents your salon uploads, which show supplier, rep and driver details
- your device, which sends crash reports, and usage information if you choose to share it.
Your account
To create an account you give us your email address and your first name. You can sign in with a one-time code sent to your email, with a password, or with Apple or Google.
- Sign-in is run by Clerk. Clerk holds your email address, name and username, and your password if you set one. Passwords are stored as a scrambled hash, never as the password itself.
- Clerk sends the sign-in codes and verification emails. Apart from replies to your requests, notices about important changes to this policy or our terms, and an email to the salon owner before an unused salon’s records are deleted, Stocktend doesn’t send you emails.
- If you sign in with Google, Google shares your name, email address and profile picture link with us. If you sign in with Apple, Apple shares your name and either your email address or a private relay address that Apple creates. In the iPhone app, Apple’s and Google’s own sign-in screens are used, and they pass these details to Clerk.
- Clerk keeps a record of each sign-in session, including your IP address and the type of browser and device.
- For your account itself, our own database keeps only your Clerk user number, your username or first name, the name you show to your team, your role (owner or team member) and when you joined.
You need an email address and a first name to have an account. Everything else in the app is optional, although some features need it. For example, an order can only include a delivery address if you add one.
Your salon and team
- Your salon’s name, its delivery address and delivery instructions (for example “buzzer 2, side door”), and a contact name and phone number for deliveries.
- The team list: each person’s name and role. Each salon has one owner, who can hand the salon to someone else in it.
- Your salon’s invite link, its referral code and the code it joined with, the date its access runs to, and settings such as alert levels and your order day.
The owner gives us most of this during setup and on the salon profile. Anyone who opens a valid invite link sees your salon’s name before they sign in. A new invite link can be made at any time from the salon profile, and the old link then stops working.
Products, photos and barcodes
- Products: name, brand, range, shade, size, category (such as Colours, Backwash, Retail or Sundries), barcodes, supplier code, stock levels and last cost.
- Up to 8 photos for each product. Photos are made smaller on your phone before they are uploaded, which normally also removes hidden details cameras add, such as location.
- Barcodes you scan that don’t match a product yet. We delete these 30 days after they were last scanned.
Product photos can show people by accident, such as a hand or a client in a mirror, so please frame photos around the product. Stocktend isn’t designed for your clients’ details or for health information such as allergy or patch test records. Please keep them out of it.
Delivery notes and invoices
When you photograph or upload a delivery note or supplier invoice, we keep:
- each file you add to a delivery (for example the packing note, the invoice or more pages), as you uploaded it, with its file name
- the text read from it, and each line: product, quantity, barcode, supplier code and cost
- the supplier’s reference, the date and the total.
These documents usually show names, addresses, phone numbers and account numbers for the supplier and the salon, and sometimes a rep’s or driver’s name or signature. Photos of delivery notes are stored as your phone sent them, which can include hidden details your camera adds, such as the time and, if your camera records it, the location.
Your phone makes a first reading of the text, and the file and that text are then uploaded. A PDF is read by our own reader on our server, and by Claude only if our reader can’t read it well. A photo goes straight to Claude to be read, if you have allowed it. See How AI reads delivery notes and photos. Nothing is added to your stock until someone in your salon checks it and confirms it.
Documents your salon keeps
The salon owner can also keep other documents in Stocktend, such as supplier price lists and cost lists, as PDFs or photos. We keep:
- the file, with its file name
- for a PDF, the prices our server reads from it, the product each price seems to match, and the supplier it recognises.
PDFs are read by our own reader on our server, not by AI, and documents are never sent to Claude. Photos are kept but not read. A price only changes in the app when the owner confirms it.
Only the owner can keep or delete documents. The owner can let individual team members see and share them. We keep each document until the owner deletes it.
Stock changes
Every stock change is recorded: the product, the amount, the reason (a delivery, used at the backwash, sold, adjusted, counted or scanned in), who made it and when. We also record who stopped a product from being re-ordered. See If you work in a salon that uses Stocktend for who can see this.
Orders
Stocktend helps you write an order, but it never sends it. When you tap send, Stocktend opens WhatsApp, Mail, Messages or your phone’s share sheet, or makes a PDF, and you send it from there. The order includes your salon’s name, its account number with that supplier, the delivery address and instructions, and the delivery contact’s name and phone number. Once you send it, the app you chose handles the message under its own privacy policy.
We keep a record of each order: its number, the supplier, the lines, its status, how it was sent and the dates.
Paying for Stocktend
Stocktend is paid for with an in-app subscription through the App Store or Google Play (see Pricing). The subscription belongs to your salon, so everyone in the salon shares it.
- Apple or Google takes the payment, under its own terms. We never see or store your card or bank details.
- RevenueCat runs in-app subscriptions for us. It receives your salon’s Stocktend ID (a random code, not your name or email address), which plan was bought, the purchase and subscription status and dates, and the purchase records Apple or Google send. Like any service your phone connects to, it also sees your IP address and device type.
- RevenueCat tells our server when your salon has paid, and we keep the date your salon’s access runs to.
To cancel, use your phone’s App Store or Google Play subscription settings. Deleting your Stocktend account doesn’t cancel a subscription.
Notifications
If you allow notifications, we keep your device’s notification address so we can send you running low alerts, delivery reminders and a morning summary. These messages include product names, supplier names and counts. The owner also gets a weekly summary that can name a team member.
- On iPhone, notifications go through Apple’s Push Notification service. Apple delivers the message, so Apple handles its text.
- In a web browser, notifications go through your browser maker’s push service: Google for Chrome, Apple for Safari, Mozilla for Firefox and Microsoft for Edge. These messages are encrypted, so the push service can’t read them.
- The Android app doesn’t send notifications yet.
We also keep a small cookie that tells our server which device is which, and a note of who used each device recently. You can turn notifications off at any time in your phone’s or browser’s settings.
Good to know
Signing out doesn’t yet stop notifications on that phone. To stop them, turn off notifications for Stocktend in your phone’s settings, or delete the app. Deleting your account also stops them on a phone that only you use.
Feedback
When you send feedback from the app (“Tell us something”), we receive your message, the screen you were on, your salon, your user number and the time. We also receive a screenshot of your screen, taken when you opened the feedback form.
The form tells you the screenshot is attached. You can’t remove it before sending yet, so check what is on screen first. We store your feedback, and Resend emails it to us.
Crash and speed reports
To find crashes and slow screens, the app sends us short reports from every screen, including the sign-in and setup screens. Each report includes:
- what happened, for example a load, a slow screen or an error
- the kind of screen, with any record numbers removed
- the error’s name and message, shortened, with numbers and quotes removed
- how long the screen took to load, and how long it was open
- the type of device and browser, the device’s memory and how much memory the app is using
- whether the app is installed on the home screen
- your salon, when you are signed in.
Reports never include your name, your email address or anything you type. We don’t store your IP address or your full browser details with them. They are kept in our own database. If you share usage (below), errors the app runs into are also sent to PostHog with your usage data, so we can see what went wrong and how. Errors on our server may also be sent to PostHog, without your name, your email address or anything you type.
How the app is used (only if you share it)
We use PostHog to see which parts of Stocktend work well and which need fixing, but only on phones where you have switched on Share anonymous usage (see Your choices in the app). Until you do, PostHog isn’t loaded at all. When it is on, PostHog records:
- the screens you open and the page you came from
- what you tap, including the words on the button or item you tap, such as a product name
- about 50 named actions, such as a scan, a product added or an order sent. These carry counts and settings only, never what you type
- your type of device and browser
- session recordings: a replay of how you moved through the app.
In session recordings, all text on screen is hidden, including anything you type. Recordings show the layout of each screen, where you tap and how you move between screens. Pictures on screen, such as product photos, are not hidden.
PostHog stores a random ID on your device, in a cookie and in local storage, for up to 365 days, so it can tell visits apart. We don’t link analytics to your account. We call it anonymous because it isn’t linked to your name, email address or account, but PostHog still receives your IP address and a random ID, and what you tap can include a name, so we treat it as personal data. PostHog sees your IP address when your device connects to it, and uses it to estimate your rough location, such as your country or town. Our analytics are stored in PostHog’s EU cloud, in Frankfurt.
If you switch usage sharing off, PostHog stops collecting from that phone. The random ID stays on the phone until it expires, but nothing more is sent.
Work done on your phone
The camera picture used to scan a barcode stays on your phone; only the barcode number is sent to us. Your phone makes a first reading of the text in a delivery note before it is uploaded.
The first time your phone reads the text in a photo or a scanned PDF, it downloads the reading tool it needs from jsDelivr, a public content delivery network. jsDelivr sees your IP address and device details, as any website you visit does. No photo or document is sent to it.
How AI reads delivery notes and photos
Stocktend uses AI to read delivery notes, invoices and product labels for you, so you don’t have to type them in. Our AI provider is Anthropic, and its AI is called Claude. Reading with AI is part of how Stocktend works.
We tell you first
Before your first photo is read, the app shows you how Stocktend uses AI, and you continue from there. You can see it again at any time in Settings › Privacy. If you would rather a particular note is not read by AI, don’t add a photo of it: type the lines in yourself instead.
Read without AI
A PDF delivery note or invoice that contains text is read by our own reader on our server. It follows fixed rules, uses no AI and sends nothing to Claude. Price lists and other documents your salon keeps are read the same way and are never sent to Claude.
What Claude receives
- every photo you add to a delivery, such as a photo of a delivery note or an invoice, so Claude can read it into lines
- a PDF delivery note or invoice, but only when our own reader can’t read it well
- product photos, when you add photos while adding a new product: up to 3 each time, so Claude can read the name and size from the label and fill in the form
- when you scan a barcode Stocktend doesn’t know and use “Snap it and we will find it”: a photo of the product, with a list of up to 500 of your salon’s products (names, brands, shades and sizes). Claude only matches the photo against your salon’s own product list.
Delivery notes often show names, addresses, phone numbers and account numbers, so what Claude reads can include personal data. Claude reads it for us as a service provider, only to send back what it reads. Under the business terms for Claude, what we send is not used to train AI models. Files are stored in the United States and deleted within 30 days, unless they are flagged for breaking Claude’s usage rules, when they can be kept for up to 2 years. Our server sends the files, so Claude sees our server’s address, not yours.
Claude only suggests what is on a note or in a photo. Nothing is written to your stock until someone in your salon checks each line and confirms it. A price read from an invoice you add to a delivery can fill in a product’s cost where none is set yet. You can change it at any time. We don’t use your files to train AI models.
Your choices in the app
One choice is yours on each phone: sharing usage stays off unless you switch it on. Change it at any time in Settings › Privacy, where you can also see how Stocktend uses AI.
Share anonymous usage
On: taps and screens go to PostHog, with all text hidden in recordings (see How the app is used). Off: nothing goes to PostHog.
Other settings
- Notifications: choose which alerts you get in Settings › Notifications, or turn them off in your phone’s settings.
- Export your data: Settings › Help › Export your data downloads your salon’s stock and stock history as CSV files.
- Delete my account: Settings › Account › Delete my account (see Delete your account).
What the app keeps on your phone
The app stores a few small items on your phone, in cookies and in local storage, so that it works and remembers your choices.
| Item | What it is for | How long |
|---|---|---|
| Sign-in cookies (Clerk) | Keep you signed in securely | While you are signed in |
| Your privacy choices | Cookies that remember your answer about usage sharing, so our server and the app respect it, and that you have seen how Stocktend uses AI | 2 years, or until you change them |
| Device cookie | Tells our server which device should get which notifications | 400 days |
| Setup cookie | Remembers how far you got in setting up | 30 days |
| Analytics ID (PostHog) | A random ID for usage analytics, stored once you switch on usage sharing. If you switch sharing off, the ID stays until it expires, but nothing more is sent | 365 days |
| Purchases (RevenueCat) | Your salon’s Stocktend ID and what it has bought, so the app can show and restore your subscription | Until you delete the app |
| Last person on this phone | Your first name, salon name, sign-in method and email address, so the sign-in screen can welcome you back. It stays after you sign out. | Until you tap Use another account, delete your account or delete the app |
| Setup draft | The salon name, address, categories, supplier names, order day, the names of people who work at the salon and the plan you pick during setup. Our server doesn’t store those names. | Until you finish setup, or delete the app |
| Preferences | Sound, scan mode, tips and updates you have already seen, when you first used the app and when it last asked for an App Store rating, and similar settings | Stays on your phone; deleting the app removes it |
The sign-in, privacy choice, device and setup cookies, the purchase record and your preferences are needed for features you use, so they don’t need your consent. The setup draft and the last person on this phone are kept so you can pick up where you left off and be welcomed back. The analytics ID is only stored if you switch on usage sharing. On Android, if you use Google’s device backup, Android may include the app’s stored data in your backup.
Permissions
- Camera: to scan barcodes and photograph delivery notes and products. The app uses video only, never the microphone.
- Photos: to pick a photo of a delivery note or a product from your library.
- Notifications: for running low alerts and reminders.
The app asks for your permission before it uses the camera or sends notifications. It doesn’t ask for your location, contacts, microphone or Bluetooth. You can change permissions at any time in your phone’s settings.
This website
- No cookies, no tracking. This website doesn’t set cookies, and it has no analytics, advertising or tracking scripts. That is why it doesn’t show a cookie banner.
- The Ideas page. If you vote for an idea or suggest one, your votes and ideas are saved in your browser’s local storage, on your device only. They are not sent to us. This is needed for a feature you choose to use, so it doesn’t need consent. Clearing your browser’s data for this site removes them.
- Hosting. Cloudflare hosts this website and runs our domain name. Like any web host, it sees your IP address, the page requested, the time and your browser details. Its logs of website visits are deleted within 7 days.
Links to other websites, such as the ICO’s, take you to pages covered by those organisations’ own privacy policies.
When you contact us
- Email. Emails to support@stocktend.com and privacy@stocktend.com are forwarded by Cloudflare to our inbox, which is a Gmail account. Google handles the inbox under its own privacy policy. We see your email address, your name if your email shows it, and what you send.
- WhatsApp. If you message us on WhatsApp, WhatsApp (part of Meta) carries and processes your message under its own terms and privacy policy. We see your phone number, your WhatsApp name and profile picture if you share them, and what you send.
We use what you send only to answer you and to help you with Stocktend. Our lawful basis is our legitimate interest in answering you.
Why we are allowed to use it
UK and EU data protection law let us use personal data only when we have a lawful basis. These are the ones we rely on.
| What we do | Lawful basis |
|---|---|
| Create your account, sign you in, run your salon’s workspace | Contract, for the person who sets up a salon. For team members invited by their salon: our legitimate interests in providing the service their salon has asked for |
| Store and read delivery notes, documents and photos, including AI reading | We act for your salon, which decides its lawful basis. Reading with AI is part of the service your salon signs up for |
| Your salon’s records, team activity and supplier contacts | We act for your salon, which decides its own lawful basis (usually contract or its legitimate interests as an employer and business) |
| Our own use of salon records: the shared product list | Legitimate interests: helping every salon recognise products |
| Your salon’s subscription | Contract |
| Notifications | Contract for the person who set up the salon, legitimate interests for team members. Your phone’s own permission decides whether they arrive |
| Crash reports, server logs and keeping Stocktend secure | Legitimate interests: keeping Stocktend working and safe |
| Usage analytics and session recordings | Your consent: you switch it on, and you can switch it off at any time in Settings › Privacy |
| Feedback and messages you send us | Legitimate interests: answering you and fixing what you report |
| Showing this website (hosting) | Legitimate interests: showing you the website |
| Keeping records the law requires, and answering lawful requests | Legal obligation |
Where we rely on legitimate interests, our interests must not override your rights, and you can object at any time (see Your rights). Where we rely on your consent, you can withdraw it at any time.
Who we share it with
We never sell personal data. We share it only with the service providers who help us run Stocktend, and only what each one needs. Some other services also handle your data when you use Stocktend or this website, under their own privacy policies.
Service providers acting on our instructions
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Clerk | Sign-in and accounts | Email address, name, username, password hash, Apple or Google sign-in details, sign-in IP address and device type | United States |
| Railway | Runs our servers, database and file storage, and keeps our backups | Everything stored in Stocktend, backups of it, and server logs that include IP addresses | United States (California) |
| Claude, made by Anthropic | Our AI provider: reads photos of delivery notes and products | The files and product lists described in How AI reads delivery notes and photos | United States |
| PostHog | Usage analytics, session recordings and error reports, only if you share usage; server error reports | The usage data described in How the app is used | The EU (Frankfurt, Germany); PostHog is a US company |
| RevenueCat | Runs in-app subscriptions | Your salon’s Stocktend ID, the plan, purchase and subscription status and dates, purchase records from Apple or Google, IP address and device type | United States |
| Resend | Emails feedback from the app to our inbox | Your feedback, the screenshot and your salon’s name | United States |
| Cloudflare | Hosts this website, runs our domain name and forwards emails sent to our stocktend.com addresses | Website visitors’ IP addresses and browser details, and emails you send to our stocktend.com addresses | Worldwide network; Cloudflare is a US company |
Each of these providers is bound by data processing terms with us. Each one may use your data only to provide its service to us, and must protect it as carefully as this policy describes.
Independent services that handle your data under their own privacy policies
These services are not our service providers. They decide for themselves how they use the data they receive, under their own privacy policies.
| Service | What it does | What it receives | Privacy policy |
|---|---|---|---|
| App Store and Google Play | Let you download the app, and take payment for subscriptions | What Apple and Google collect under their own terms, including your payment details. If you have agreed in your phone’s settings to share analytics with app developers, they may share crash reports and usage statistics with us | Apple, Google |
| Sign in with Apple and Sign in with Google | Let you sign in with your Apple or Google account | Your sign-in with them. They share your name and email address (or Apple’s private relay address) with us | Apple, Google |
| jsDelivr | Delivers the text reading tool to your phone | Your IP address and device details | jsDelivr |
| Apple Push Notification service | Delivers iPhone notifications | Your device’s notification address and the message, which Apple can read | Apple |
| Browser push services | Deliver notifications in a web browser | Your device’s notification address and an encrypted message they can’t read | Google (Chrome), Apple (Safari), Mozilla (Firefox), Microsoft (Edge) |
| Google (Gmail) | Our email inbox | Emails you send to support@ or privacy@stocktend.com, and the copies of app feedback that Resend sends us | |
| Carries messages you send us on WhatsApp | Your phone number, WhatsApp profile and the messages | ||
| WhatsApp, Mail, Messages and other apps you choose | Send the orders you choose to send | The order text or PDF you choose to send | Each app’s own policy, for example WhatsApp |
Other people who may see it
- Your salon’s team sees what your salon’s settings allow (see If you work in a salon that uses Stocktend).
- Professional advisers, such as accountants or lawyers, when we need their advice. They must keep it confidential.
- Authorities, when the law requires it, or to protect someone from harm.
- A new owner, if Stocktend is sold or merged. They would have to look after your data as this policy describes, and we would tell you first.
Sending data outside the UK and EU
Your salon’s records are stored in the United States, with Railway in California, and our analytics in the EU, with PostHog in Frankfurt. Some of our other service providers are in the United States too, so some data is stored or read there. When it is, it is protected by safeguards that UK and EU law recognise:
- The Data Privacy Framework. The EU-US Data Privacy Framework and its UK Extension (the UK-US data bridge), for providers that are certified to it.
- Standard contractual clauses. The EU’s standard contractual clauses, with the UK Addendum for data from the UK, which are part of each provider’s data processing terms.
| Provider | Where | Safeguard |
|---|---|---|
| Railway | United States (California) | Data Privacy Framework and UK Extension, and standard contractual clauses with the UK Addendum |
| PostHog | The EU (Frankfurt). Some of PostHog’s own providers, and its support staff, are outside the EU | Data Privacy Framework and UK Extension, and standard contractual clauses with the UK Addendum |
| Clerk | United States | Data Privacy Framework and UK Extension, and standard contractual clauses with the UK Addendum |
| Claude | United States. Files may be read in other countries where Claude runs | Standard contractual clauses with the UK Addendum |
| RevenueCat | United States | Standard contractual clauses with the UK Addendum |
| Resend | United States | Standard contractual clauses with the UK Addendum, and the Data Privacy Framework and UK Extension |
| Cloudflare | Cloudflare’s worldwide network. Cloudflare is a US company | Data Privacy Framework and UK Extension, and standard contractual clauses with the UK Addendum |
We are based in the UK. If you are in the EU, your data can come to us because the European Commission recognises the UK as giving personal data adequate protection. In the same way, the UK recognises the EU as giving adequate protection. You can ask us for a copy of any of these safeguards.
The independent services also send data outside the UK and the EU, under their own terms and safeguards. Google (our Gmail inbox, Google Play, and notifications in Chrome), Apple, Meta (WhatsApp), Mozilla and Microsoft are based in the United States. jsDelivr may deliver its tool from servers anywhere in the world.
How long we keep it
We keep personal data only as long as we need it.
When you delete your account, your account and your personal details are deleted. In the app this happens straight away, and if you ask us by email we do it within 30 days. Copies in our backups are gone within 35 days.
When a salon’s free months or subscription end and it doesn’t subscribe again, we keep its records for 90 days, so it can come back. We email the owner before anything is removed, and then the salon’s records are deleted. Stock figures that no longer identify you or your salon, such as how quickly a product is used, may stay in our records to help improve Stocktend.
| Data | How long we keep it |
|---|---|
| Your account | Until you delete your account, or 90 days after your salon stops using Stocktend |
| Salon details and team list | While your salon uses Stocktend. When the last person in a salon deletes their account, the salon and everything in it are deleted straight away. |
| Salons that stop using Stocktend | 90 days after the salon’s free months or subscription end. We email the owner first, then delete the salon’s records. |
| Products, stock history and photos | Until your salon deletes them. Removing a product also deletes its stock history and photos. |
| Delivery notes and their files | Until your salon deletes the delivery. Deleting it also deletes its files. |
| Documents your salon keeps | Until the owner deletes them. Deleting a document also deletes its file. |
| Barcodes that didn’t match a product | 30 days after they were last scanned |
| Orders | Kept with your salon’s records |
| Your subscription | We keep the date your salon’s access runs to, with your salon’s records. RevenueCat keeps purchase records while we use its service. They carry your salon’s Stocktend ID, a random code, not your name. |
| Records of merged products | Kept with your salon’s records, so that a merge can be undone, and deleted with them. |
| Notification addresses | Until the device stops accepting notifications, or you delete your account |
| Crash and speed reports | Reports from a salon are kept with its records and deleted with them. Reports from the sign-in and setup screens aren’t linked to any salon or person. No report carries your name, your email address or anything you type. |
| Feedback and screenshots | Kept with your salon’s records and deleted with them. Resend deletes its copy of the email after 30 days. Copies in our inbox are deleted 12 months after we reply, or sooner if you ask. |
| Photos read by Claude | Deleted within 30 days (see How AI reads delivery notes and photos) |
| Usage analytics and session recordings | Session recordings for 30 days. Other usage data for as long as PostHog keeps it on our plan, and never more than 7 years. |
| Sign-in records (Clerk) | Your sign-in details until you delete your account. Clerk’s logs of sign-in activity for up to 30 days. |
| Server logs (Railway) | 30 days |
| Backups | Railway, our hosting provider, makes daily backups of our database and files, each kept for 6 days, and weekly backups, each kept for 27 days. So anything deleted from Stocktend is gone from these backups within 35 days. Railway also keeps short-term copies of its own systems to protect its service. If we ever have to restore a backup, we delete again anything that was deleted after it was made. |
| Messages you send us | We delete emails and WhatsApp messages 2 years after our last reply, or sooner if you ask. |
| Website server logs | Up to 7 days (Cloudflare) |
Delete your account
You can delete your Stocktend account yourself, in the app, at any time. It happens straight away and can’t be undone: your account and your personal details are deleted, and copies in our backups are gone within 35 days. Stocktend is made by Ian Magee in the United Kingdom. The same steps are on our support page.
In the app
- Open Stocktend and tap your initial at the top of the home screen. Settings opens.
- Under Account, tap Delete my account.
- If you own a salon that others still use, make one of them the owner first. The app shows you how, in the same place. You can also do this in Settings › Salon › Owner.
- Check what goes, tap Continue, then Delete my account. The app signs you out and forgets the name and email address it kept on that phone.
If you can’t get into the app
Email support@stocktend.com from the address you sign in with, with the subject “Delete my account”, and tell us your salon’s name. We check that the request came from you, delete your account within 30 days and reply when it’s done.
Good to know
Deleting the app from your phone doesn’t delete your account. Deleting your account doesn’t cancel a subscription: cancel it in your phone’s App Store or Google Play subscription settings.
What we delete
If you are the only person in your salon, the salon goes with you:
- your sign-in account at Clerk: your email address, name, username, password and any Apple or Google sign-in link
- your user record, and the salon with everything in it: products, stock counts and history, photos, deliveries, delivery notes and their files, documents, suppliers, orders, categories and settings
- its unmatched barcodes, its records of merged products, the feedback and screenshots sent from the salon, its crash and speed reports and its notification addresses.
If others still use the salon, it carries on for them:
- your sign-in account at Clerk and your user record, so your name leaves the team list
- the notification addresses of devices only you used, so your phone stops getting alerts, and our note of which devices you used.
If you signed in with Apple, you can also remove Stocktend from your Apple Account’s list of apps that use Sign in with Apple, in your iPhone’s Settings under your name. If you signed in with Google, you can remove it from your Google Account’s list of connected apps.
What stays
- If the salon carries on, its stock, deliveries and orders stay with the others. Stock changes you made stay in the salon’s history without your name.
- Feedback you sent stays with your salon’s records. Your message or its screenshot may show your name, so ask and we will delete it, including the copy in our email inbox. Otherwise, that copy is deleted 12 months after we reply.
- Barcodes your salon confirmed stay in the shared product list, with no link to your salon.
- Crash and speed reports stay with the salon’s records, and go if the salon is deleted. Reports from the sign-in and setup screens aren’t linked to any salon or person. No report carries a name, an email address or anything you typed.
- If you shared usage, analytics and recordings aren’t linked to your account. PostHog deletes them at the end of the period in How long we keep it.
- If your salon subscribed, Apple or Google and RevenueCat keep their purchase records.
- Copies in our backups are deleted automatically within 35 days.
- Anything the law requires us to keep, for as long as the law requires.
Deleting part of your data
- A product: Remove product deletes it with its stock history and photos.
- A delivery: archive it, then delete it. A delivery you haven’t confirmed can be deleted straight away. This deletes its files and reverses the stock it added.
- A file on a delivery: remove it from the delivery’s list of files. The first file stays with the delivery until the delivery is deleted.
- A kept document: the owner can delete it.
- A team member: anyone can leave by deleting their account. To remove someone else, salon owners can email us, as there is no button for this in the app yet. A new invite link can also be made at any time, so the old one stops working.
- Anything else: email privacy@stocktend.com.
Your rights
Under UK and EU data protection law, you have these rights over your personal data:
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to fix anything wrong or incomplete. The salon’s name and delivery details can be changed in the app, on the salon profile.
- Deletion: delete your account in the app, or ask us to delete your data (see Delete your account).
- Restriction: ask us to pause using your data while a concern is checked.
- Portability: get your data in a format you can take elsewhere. In the app, Settings › Help › Export your data downloads your current stock and up to your latest 20,000 stock movements as CSV files. For anything else, ask us.
- Objection: object to how we use your data where we rely on legitimate interests. If we ever send marketing, you can object to it at any time and we will stop.
- Withdrawing consent: where we rely on your consent, you can withdraw it at any time: usage sharing in Settings › Privacy, and notifications in your phone’s settings.
- Automated decisions: the right not to be subject to decisions made only by automated means that have legal or similarly significant effects on you. We don’t make any (see Automated decisions).
How to use your rights
Email privacy@stocktend.com. It is free. We reply within one month. If a request is complex, we may take up to two more months, and we will tell you why. We may ask you to confirm who you are, and the time limit starts once we have what we need. We search for your data in a reasonable and proportionate way. You can also complain to a data protection authority (see Complaints).
If your request is about your salon’s own records, such as its stock history, your salon decides how to answer it as the controller. We will pass your request to your salon and help them answer it.
How we keep it safe
What we do today:
- All connections between the app and our servers are encrypted (HTTPS).
- Sign-in is handled by Clerk, a specialist sign-in service. Passwords are stored as hashes, never as the password itself.
- A salon’s files, such as product photos and delivery notes, are only shown to signed-in members of that salon, and to us when we need to run or fix Stocktend (see below).
- Product photos are made smaller on your phone, which normally removes hidden camera details such as location.
- Crash reports remove numbers and quotes from error messages, and don’t store your IP address.
- Session recordings, if you share usage, hide all text on screen.
- Photos go to Claude only with your permission, and payments are handled by Apple or Google, so we never hold card details.
- Only Stocktend (Ian Magee) can access salon records and files: to run Stocktend, to fix problems, and when a salon asks for help.
- Backups are made by our hosting provider, Railway, with its scheduled backups of our database and file storage, and are deleted automatically (see How long we keep it).
No system is completely secure. If a breach puts your data at risk, we will tell the ICO, or the data protection authority that needs to know, within 72 hours where the law requires it, and we will tell you without delay if it is likely to put you at high risk.
No ads, no selling, no tracking
- We don’t sell personal data, and we don’t share it for advertising.
- The app has no advertising and no advertising or tracking tools, and it doesn’t use your device’s advertising identifier.
- We don’t track you across other companies’ apps or websites, and we don’t combine your data with other companies’ data for advertising. That is why the app never asks for permission to track you.
- Payments for Stocktend go through Apple or Google. We never see or store your card details.
Automated decisions
We don’t make decisions about people by automated means. Claude reads documents and photos to suggest products and quantities, and a person confirms each line before it changes your stock. A price read from an invoice can fill in a product’s cost where none is set yet, and you can change it at any time. Running low alerts are rules about products, not people.
Children
Stocktend is a tool for salon businesses and is not meant for children. You must be 18 or over to use Stocktend, as our terms say. We don’t knowingly collect personal data from anyone younger. If we learn that we have, we will delete it.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters to you, such as a new service provider or a new use of your data, we will tell you before it takes effect, in the app or by email. You can ask us for earlier versions.
Complaints
If you are unhappy with how we have handled your data, please tell us first at privacy@stocktend.com. We will acknowledge your complaint within 30 days and tell you what we are doing about it.
You also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113. If you are in the EU, you can complain to the data protection authority in your country. The European Data Protection Board lists each country’s authority.
Contact us
- Run by
- Ian Magee, sole trader, trading as Stocktend
- Based in
- London, United Kingdom
- Privacy
- privacy@stocktend.com
- Help
- support@stocktend.com. You can also visit our support page.
- ICO
- Registration number ZC258816 (Mr Ian Magee)
- Website
- stocktend.com
Last updated .