The short version
- Stovy does not sell your data, and shows no advertising. There is no tracking pixel, no advertising identifier, no analytics profile.
- Your data is hosted in Montréal, Québec. Only a few named services outside Québec are involved, and only for what they do (see §5).
- Nothing is public. Stovy has no open web profiles. What you share is visible to Stovy members only, and by default to your friends only.
- GPS coordinates are removed from your photos before they are stored — see §4.
- You can have everything deleted, at any time, by writing to us — see §8.
1. Who is responsible
Stovy is published from Québec, Canada. The person responsible for the protection of personal information is Stovy's founder, reachable at the address below. That address is monitored, and it is also the one to use for reporting content or asking that your data be deleted.
contact@stovyhome.com
We answer within 30 days, and much faster for content reports.
2. What Stovy collects, and why
Stovy collects only what a kitchen inventory needs to work. Each line below corresponds to something the application actually stores.
| Data | Why |
|---|---|
| Email address, first and last name, interface language | Identify your account, sign you in, write to you in your language. |
| Password, stored as a one-way hash | Sign you in. We never store, and cannot read, your actual password. |
| Google account identifier, if you sign in with Google | Recognise you on the next sign-in without a password. |
| Kitchen name, its time zone, and its members | Share one inventory between several people, and compute “today” where you actually live. |
| Your inventory: products, quantities, locations, expiry dates | The service itself. |
| Your movements: every entry and exit, with its date | Predict when you will run out. Without this history there is no prediction. |
| Your shopping list | Suggest what to buy back, and let you tick it off. |
| Scan streak and points | Open access to the Stovy network after a period of regular use. |
| Notification device token | Send the alerts you asked for. It identifies a device, not a person. |
| Subscription status | Know whether your access is active. We never see your payment details — the app stores handle payment entirely. |
Stovy does not collect your location. The application never asks for it and never records it. The time zone kept for your kitchen is read once, when you sign up, and is not a position.
3. The Stovy network
Entering the network is a deliberate act: you choose a nickname, and that nickname is what other members see. Your email address, your real name, your kitchen and your inventory are never shown to other members.
Who sees what
- Friends only, by default. A new post is visible to your friends and to no one else unless you deliberately change it.
- “All Stovy members” never means the open web. There is no public page, no shareable link, no search-engine indexing. Only signed-in Stovy members can see it.
- Members of the same kitchen become friends automatically once they both have access — they already share a home and an inventory.
- Blocking is mutual and silent. Neither of you sees the other any more, posts included. The blocked person is not told.
- Post views are counted, and the author sees the total. We never show who viewed a post.
Moderation
Any post can be reported from the application. Reports are reviewed and we answer within a reasonable time. A post removed by moderation is hidden, not destroyed: it disappears everywhere, but the record is kept so that a dispute can be examined and so that the person concerned can be told what is held against them.
4. Photos
Photos of your dishes are the only files Stovy stores. Two things happen to every one of them, without exception:
- Metadata is removed — including GPS coordinates. A photo taken in your kitchen carries the position of your home. The image is decoded, resized and re-encoded, which leaves no metadata behind. The original file is never kept.
- They are stored outside the public web space. No address leads to them. Every request goes through the application, which checks who is entitled to see the photo.
5. Services we rely on
Your data is hosted in Montréal, Québec. The services below are located outside Québec, and each one receives only what it needs to do its job.
| Service | What it receives |
|---|---|
| Open Food Facts, UPCitemdb | A barcode. Nothing that identifies you. |
| Spoonacular | A list of ingredient names, to suggest recipes. No account, no kitchen. |
| Anthropic | Recipe and ingredient labels, to translate them. No account, no kitchen. |
| Google (sign-in, notifications) | Your Google identity if you choose that sign-in; and the notification text plus your device token when a notification is sent. |
| Apple, Google and RevenueCat (subscriptions) | The stores handle payment and tell us only whether your subscription is active. We never see your card. |
Stovy uses no advertising network, no analytics platform, and no third-party tracking library.
6. How long we keep it
- Your account and its contents: as long as your account exists.
- After deletion: your account, inventory, history, photos, posts, comments and friendships are removed. Photo files are swept from the disk by a nightly task.
- Two exceptions, kept deliberately: subscription records, which we must keep for accounting; and moderation reports, which would otherwise make any dispute impossible to examine. Both are detached from your identity when your account goes.
7. Security
- All traffic between the application and our servers is encrypted (HTTPS).
- Passwords are stored as one-way hashes and cannot be read back.
- Photo files sit outside the public web space and are served only after an access check.
- No security measure is absolute. If an incident affects your data in a way that presents a risk of serious harm, we will notify you and the Commission d'accès à l'information, as the law requires.
8. Your rights
Under Québec law (Act 25) and Canadian federal law, you may ask us to:
- Access the personal information we hold about you.
- Correct anything inaccurate.
- Delete your account and everything attached to it.
- Receive a copy of your data in a structured, commonly used format.
- Withdraw a consent you have given, for example by leaving the Stovy network.
Write to contact@stovyhome.com. We answer within 30 days. If our answer does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec.
9. Children
Stovy is intended for adults running a home. We do not knowingly collect information from children under 14. If you believe a child has created an account, write to us and we will delete it.
10. Changes to this policy
If we change anything material, we will update the date at the top of this page and tell you in the application before the change takes effect. Continuing to use Stovy after that means you accept the new version; if you do not, you may delete your account.