Privacy Policy

Stocked & Stacked (“Stocked”, “we”, “us”) is a United Kingdom–based service, and the data controller for the data described here. This policy explains what personal data we collect, why, and your rights over it. For any privacy question, email hello@stockedandstacked.com.

What we collect

• Account details — your name and email address, provided when you sign in with Google or Apple.
• What you log — the meal descriptions, voice recordings, and photos you submit, and the nutrition, ingredients and targets derived from them.
• Subscription details — your subscription status and billing dates. Card details are handled by Stripe; we never see or store them.
• Technical data — basic logs (e.g. IP address, timestamps) needed to run and secure the service, and an essential cookie to keep you signed in.

How we use it, and our legal basis

• To provide the app — parse your logs, estimate nutrition, and show your history (performance of our contract with you).
• To take payment and manage your subscription (contract).
• To keep the service secure, prevent abuse, and fix problems (our legitimate interests).
• To reply when you contact us (legitimate interests).

Food and nutrition information can relate to your health. We only process it to provide the tracking features you ask for, and we do not use it for advertising or profiling.

Who we share it with

We don't sell your data. We use a small number of trusted service providers who process data on our behalf:

• Anthropic — the AI that reads your meal text and photos to estimate nutrition.
• Groq — transcribes your voice recordings to text when you use the mic.
• Open Food Facts — a public food database we query to look up branded products.
• Stripe — processes payments and manages subscriptions.
• Amazon Web Services (hosting, London region) and Neon (database) — store and run the service.
• Google / Apple — provide sign-in.
• PostHog (EU region) — privacy-friendly product analytics, used only if you accept analytics cookies.

International transfers

Some providers (such as our AI provider and Stripe) may process data outside the UK, including in the United States. Where they do, the transfer is protected by appropriate safeguards such as the UK's International Data Transfer Agreement / Addendum or Standard Contractual Clauses.

How long we keep it

We keep your account and logs while your account is active. If you delete your account or ask us to erase your data, we remove it (except anything we must retain by law, e.g. payment records). Email hello@stockedandstacked.com to request deletion.

Your rights

Under UK data protection law you can ask to access, correct, delete, or receive a copy of your data, and to object to or restrict certain processing. To exercise any of these, email us. You also have the right to complain to the UK's Information Commissioner's Office (ico.org.uk).

Cookies and analytics

We use one essential cookie to keep you signed in. We also use PostHog, a privacy-friendly analytics tool, to understand how the app is used — but only if you accept analytics cookies when we ask. You can decline and we won't set them. We don't use advertising or cross-site tracking cookies.

Children

Stocked isn't intended for anyone under 16. We don't knowingly collect data from children.

Changes

We'll update this page if our practices change and revise the date at the top.