Privacy Policy

Stow (어디뒀지) · Effective 2 September 2026

The short version.

1. What we collect

Data	Email address, display name, profile photo URL
Source	Provided by Google when you sign in with Google, or entered by you for email link sign-in
Purpose	Identify you, and show household members who changed what

Data	Names and notes for your household, places, boxes and items; item photos; quantities; purchase links; categories
Purpose	The core function of the app — remembering where your things are

Data	Which item changed, when, by whom, and how
Purpose	Households share one space, so members can see who moved something

Data	Push notification token
Purpose	Sending notifications (only if you enable them)

Camera	To photograph your items. Only the photo you take is stored.
Photos / media (Android 12 and below)	To pick an existing photo. Only the photo you select is read.
Internet / network state	To sync data between household members.
Vibrate	For notifications.

Permissions are requested the first time the relevant feature is used. Declining them leaves the rest of the app working.

We do not sell your data or share it for advertising. We use the following processors:

Supabase	Database, authentication and photo storage. Hosted in Seoul, South Korea (AWS ap-northeast-2).
Google	Google account sign-in, only if you choose it.
Resend	Sending sign-in link emails. Receives your email address only (routed via AWS Tokyo).

Deleted items, boxes and places stay recoverable in Trash for 30 days, then are permanently removed automatically. Their photo files are removed at the same time.
When you delete your account, if other members remain in your household, ownership transfers to another member and your account data is removed. If nobody remains, the entire household — including all items and photos — is deleted.
Deletion is irreversible.

So that unused data is not kept longer than necessary, a household nobody opens is cleaned up automatically.

Since last visit	What happens
90 days	The household is marked dormant. Nothing is deleted yet.
120 days	We email every owner of that household to say it is scheduled for deletion.
150 days	All of its data — items, photos, places, boxes, member links and history — is deleted.

Opening the app once cancels it. If any member signs in, the dormant and scheduled-for-deletion marks are cleared immediately and the clock restarts. Nothing else is required of you.
The unit is the household, not the person. If you stay away for a while but another family member keeps using the household, it is not deleted.
Deleting a household does not delete your account — you may belong to other households. Use account deletion for that.
This automatic deletion is also irreversible.

Access and correction — everything you stored is visible and editable in the app.
Deletion — delete individual entries, or More → Delete account to remove everything. See Delete your account and data for requesting without the app.
Withdrawing consent — deleting your account withdraws consent.

All traffic is encrypted with HTTPS.
The database enforces row-level security: if you are not a member of a household, the server returns nothing — access is blocked server-side, not just hidden in the app.
Photos live in a private bucket and are served through short-lived signed URLs issued only to authorised members.
Sign-in uses PKCE, so an intercepted sign-in link cannot be used on another device.

This app is not directed at children under 14 and we do not knowingly collect their personal data.

For privacy questions or requests, contact jkinject@gmail.com.

If this policy changes, we will post the update and its effective date on this page, and notify you in the app for significant changes.