Legal

Privacy Policy

Effective September 26, 2026

Restock apps and tryrestock.com are operated by KOVA LABS PTE. LTD. (UEN 202621376C), Singapore. We are responsible for the personal data described in this policy. Contact our privacy contact at support@tryrestock.com.

We do not sell personal data, run third-party advertising SDKs, or use household content for ad targeting. Product analytics can be linked to your Restock account; it is not anonymous simply because we use an account ID instead of your email.

1. Information we collect

  • Account: email address, display name, optional profile photo, sign-in provider, account status and activity timestamps.
  • Lists and items: list names and photos, memberships and roles, item names, categories, prices, notes, buy links, schedules, reminder preferences, purchase history, Saved items and spending calculations.
  • Group collaboration: messages and replies, message edits, list activity, last-active information, invitations, short-lived recovery snapshots, hidden or blocked users/messages, and reports of inappropriate content.
  • Notifications: device push tokens and notification preferences. Notification providers process delivery information and the content needed to display your reminders.
  • Subscriptions: account/customer identifiers, products, transactions, purchase and renewal dates, subscription status and entitlements from your purchase platform (Apple or Google Play) and RevenueCat. We do not receive your full payment-card details.
  • Usage and diagnostics: feature actions such as app opens, onboarding, item actions and subscription-screen interactions, linked to account/device identifiers; app and operating-system versions, device characteristics, timestamps, and error messages or stack traces. Error text can contain context from the action that failed. We do not intentionally include shopping-item names, notes or chat messages in routine product-usage events.
  • Support and website security: information you send us, optional screenshots, correspondence, browser/user-agent information and a hashed IP address in support-form records. Cloudflare also processes connecting IP addresses and device/security signals to serve the website and check for abuse. Hashing a stored IP address does not make all website processing anonymous.

2. Why we use information

We use account and content data to provide Restock, authenticate you, sync devices, operate group features, calculate spending insights, send reminders, manage subscriptions and answer requests. We use limited analytics to understand feature use and diagnostics to investigate failures. We use security and report data to prevent abuse, moderate reported content and protect users.

Where applicable data-protection law requires a legal basis, we rely on performing our contract with you for the requested service, legitimate interests in maintaining a reliable and secure service and understanding its use where permitted, legal obligations for required records or disclosures, and consent where required. You may withdraw consent or object to processing as explained below. Optional analytics is not required to maintain your lists or subscription.

3. Group lists and public share links

Group lists: other members can see shared list content and chat, member names and profile photos, roles, and relevant activity or last-active information. Owners and editors can manage content according to their permissions, including exporting or sharing it. Joining an ongoing group does not give its content a 72-hour expiry. Leaving a group ends your membership but does not by itself delete your previous contributions.

Public share links: creating a link stores a snapshot of the selected list's items. Anyone who receives or is forwarded that link can view it until it expires after 72 hours. The snapshot can include item names, categories, prices and scheduling/purchase timing, but does not include account IDs, email addresses, profile photos, chat or private account details. Share only content you are comfortable making available to link recipients.

Link expiry prevents further access through Restock. It cannot remove screenshots, exports or other copies that recipients have already saved. Group invitations and short-lived recovery snapshots are separate from public share links.

4. Support and moderation

Support-form submissions and optional attachments are stored and may be delivered to our support mailbox. Direct emails and replies also form part of our support correspondence. Do not include passwords, verification codes, payment-card details or unrelated personal information.

When a group message is reported, our support team may receive the reported message, reason and details, relevant group and message identifiers, and sender/reporter names, email addresses and account IDs. This allows us to investigate and act on abuse. Hiding a message on your device is different from deleting it or submitting a report.

5. Storage and security

We use encrypted transport, access controls and database/storage permissions to protect information. Main app data is hosted in Supabase's Singapore region. Devices also keep account-session information, preferences and cached app data needed to operate Restock. Public share access is limited to the specific unexpired link. No service can guarantee absolute security.

6. Service providers and other disclosures

  • Supabase: authentication, database, uploaded photos, server functions and essential diagnostic records.
  • RevenueCat and app stores: subscription and entitlement administration; Apple handles App Store payments and Google handles Google Play payments and their respective transaction records, depending on your purchase platform.
  • Expo, Apple Push Notification Service and Google Firebase Cloud Messaging: notification delivery, depending on your device and the notification services enabled for that version.
  • Cloudflare: website hosting, image validation and processing, security checks including Turnstile, support-form storage/processing and transactional email delivery.
  • PostHog: optional product analytics and crash/error reporting. We disable session replay, discard IP data and disable GeoIP enrichment in our PostHog project. Older records may include approximate IP-derived location collected before these controls were applied. We do not request GPS location for analytics. We do not use it for advertising or cross-app advertising tracking.
  • Support email services: transport and storage of messages sent to or from our support address, including attachments and moderation reports.

These services may process information outside Singapore, including the United States for our PostHog service. Data-protection rules in those countries may differ. We are responsible for meeting applicable transfer-protection requirements and can provide information about the safeguards relevant to your request. Contact us before sending sensitive material if you need details about where it will be processed.

We may also disclose information where legally required, to protect rights and safety, or in a business transfer subject to applicable data-protection requirements. Access by group members and link recipients is described above.

7. Your rights and choices

You can edit your profile and list content, manage notifications, export account data and delete your account in Settings. Where available, the Usage analytics setting controls optional PostHog usage and crash reporting on that device. Set your preference on each device. If your version does not have this setting, contact us to request that optional account-linked analytics stop or that previously collected data be erased. Turning it off stops future optional collection; it does not automatically erase previously submitted reports or disable essential service/security records.

Email support@tryrestock.com to request access, correction or deletion, withdraw consent, object to processing, or raise a privacy complaint. We may ask for proportionate information to verify that the account is yours. We explain any necessary service consequences, legal exceptions or retained records and respond within applicable legal time limits. Withdrawing consent does not affect processing already lawfully carried out.

Depending on your location, you may also have rights to restrict processing, receive portable data, or complain to a data-protection authority. In Singapore you can contact the Personal Data Protection Commission; in the EEA or UK you can contact your local supervisory authority. Our privacy contact handles requests concerning KOVA LABS and Restock.

8. Retention and account deletion

  • Active account and list data: kept to provide the service while your account is active, unless you delete it sooner.
  • Public share snapshots: access expires after 72 hours; scheduled database cleanup removes expired snapshots. Cleanup runs every 15 minutes, so physical deletion may follow access expiry by that interval during normal operation.
  • Group recovery snapshots: kept for a three-hour recovery window, followed by scheduled cleanup. Group activity, database diagnostics and database moderation reports are removed after 180 days, subject to the same cleanup interval, or earlier when relevant deletion rules apply.
  • Support-form records: the website's stored ticket copy expires 180 days after submission. Email correspondence and attachments are separate copies, retained while needed to resolve a request, investigate abuse, address a dispute or meet a legal obligation. We remove them when those purposes no longer require retention; you can request deletion.
  • PostHog usage and diagnostic data: retained while needed to understand feature use and investigate reliability, subject to the provider's retention arrangements. The 180-day database limit does not apply to these copies. Account deletion initiates a request to erase linked PostHog profiles and historical events; the provider processes that request asynchronously. You may also request erasure through support.
  • Subscription and required records: Your app store and RevenueCat may retain transaction, entitlement, refund and related records for subscription administration, fraud prevention, reconciliation or legal obligations. Account deletion does not cancel a store subscription. Manage or cancel it through the Apple or Google account used to subscribe.

Successful account deletion removes your Restock account, owned lists and associated items, memberships, authored chat messages, known account/list photos, account-linked database diagnostics and authored group activity. It also removes relevant short-lived recovery snapshots. If you own a group, deleting your account can remove that group and its content for other members. Contributions or copies independently retained by others, support correspondence and records described above may remain for their stated purposes.

Backups and infrastructure logs may follow their own operational rotation rather than disappearing immediately. They are restricted to recovery, security and other legitimate operational purposes. If a legal obligation requires keeping particular information, we retain only what is necessary for that obligation. An aggregate that no longer identifies anyone may be retained for business reporting.

9. Children

Restock is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal data, contact us so we can investigate and remove it as appropriate. Store content ratings do not replace this policy.

10. Changes to this policy

We update this page and its effective date when our practices change. Where required, we provide additional notice or obtain consent before a material change applies. This policy does not waive rights available under applicable law.

11. Contact

KOVA LABS PTE. LTD. (UEN 202621376C), Singapore. For privacy requests and complaints: support@tryrestock.com. Please use the subject “Restock privacy request” so we can route it appropriately.