StockPilot Privacy Policy
Last updated: 14 May 2026
This page explains what StockPilot does with your information. We’ve kept it short and plain, because most privacy policies are neither. If anything below isn’t clear, write to us at support@bluenex.org and we’ll explain.
This policy covers the StockPilot mobile app, distributed under the package name com.stockpilot.stockpilot. StockPilot is built and operated by Bluenex, a sole proprietorship registered with the Philippine Department of Trade and Industry (DTI).
The short version
- StockPilot is an offline-first inventory and small-business operations app. The data you put into it (your shop, products, stock movements, sales) is yours and stays on your device.
- No account is required. There is no sign-in screen. There is no cloud sync.
- Your inventory database lives in your phone’s private app storage. Product photos you add live there too.
- Backups are local: when you tap “Create local backup,” the app writes a JSON file to your phone, in a folder that belongs to the app. You decide what to do with it from there.
- We do not run any servers that hold your data. The app’s network traffic is the ad requests described below — those go to Google, not to us.
- Ads are shown by Google AdMob. AdMob may collect your device’s advertising ID and similar signals to serve and measure ads — see Google’s policies for the details.
- If you’re in the European Economic Area, the United Kingdom, or any region where Google requires it, the app shows a consent form before any personalised ad is requested. You can revisit your choice from Settings → Manage ad privacy options.
- A future Premium tier will hide ads. Premium is not active today, so all users see ads for now.
- We do not use analytics. We do not use crash reporting. We do not use any third-party trackers beyond AdMob.
- No subscriptions, billing, or payment processing are active. We do not collect payment information of any kind.
- Uninstalling the app removes all StockPilot data from your device.
What we collect
The honest answer is: nothing reaches us. Everything the app handles stays on your phone. Below is the full list of what the app touches, and where it puts it.
- Business profile. The name of your shop or business and a currency code. You enter this once during onboarding.
- Products. Name, unit, current quantity, low-stock threshold, optional cost price, optional selling price, optional category, optional photo, and whether the product is active.
- Stock movements. Each adjustment, sale, refund, or correction is recorded as a movement with the type, quantity change, before/after counts, an optional reason, an optional note, and a timestamp.
- Product photos. If you add a photo to a product, the app copies that photo into its own folder inside the app’s private storage. The original photo on your camera roll is not changed.
All of this is written to a local database file (SQLite, via the Drift library) inside the app’s private storage area. Other apps on your phone cannot read it.
- Local timestamps. Created-at and updated-at times for the records above. These are computed on your device.
- A pending-sync queue (currently unused). The database has a table that would hold “things waiting to upload” if a future version added cloud sync. In the current app, nothing is ever written to it.
- Device identifiers (when ads are shown). The Google Mobile Ads SDK and Google’s User Messaging Platform (UMP) receive your device’s advertising ID and similar signals when ads load. See Google’s privacy policy for the details of what Google collects. We do not receive this data ourselves.
- No account, email, phone number, or password. There is no sign-in.
- No location. The app does not request or use your location.
- No contacts, SMS, or call log.
- No analytics or crash reports. The app does not transmit usage, performance, or crash data to us or to any third party.
- No payment information. The app does not have a billing screen wired up.
What stays on your device
Practically everything:
- Inventory database. A SQLite file in the app’s private storage, managed by the Drift library. Holds your business profile, products, stock movements, and the (unused) sync queue.
- Product photos. Copied into a
product_photos folder inside the app’s documents directory.
- Local backups. When you tap “Create local backup,” the app writes a file named
stockpilot-backup-<timestamp>.json to a stockpilot_backups folder inside the app’s documents directory. The file contains the same business, product, and movement records described above, in plain JSON. Restore reads the most recent file from the same folder.
The “app’s documents directory” is the folder your operating system gives the app for its own use. On Android, that’s the app-specific external storage owned by com.stockpilot.stockpilot. Other apps cannot read it. When you uninstall StockPilot, the operating system deletes it.
The backup file is not encrypted. If you copy it off your phone, treat it like any spreadsheet of your business data — anyone who can read the file can read your inventory.
What we store on our servers
Nothing. We do not run a backend for StockPilot. None of your inventory, products, stock movements, sales, photos, or backups are sent anywhere by the app.
The only network calls the app makes are ad requests to Google AdMob, described below. Those go to Google, not to us, and they do not include your inventory data.
If we ever add cloud sync, accounts, or any other server-side feature on our side, we will update this policy first — change the “Last updated” date, surface a notice in the app, and describe what’s stored and where. Until you see that change, assume your inventory data has not left your device.
Permissions the app may ask for
- Network access (
INTERNET). Required so the Google Mobile Ads SDK can load banner ads. The app does not transmit your inventory or any other personal data over this connection.
- Camera and photo library. Only when you tap “Add photo” on a product. The app uses your phone’s standard photo picker to let you take a new picture or pick an existing one. The selected photo is copied into the app’s own folder so that the product still has a photo if you later move or delete the original.
- Storage / files. On older Android versions, the photo picker may go through the system’s storage permission. Newer Android versions use the scoped photo picker, which does not require a broad storage permission.
That is the full list of permissions the app needs to work. The app does not ask for location, microphone, contacts, SMS, calendar, or anything similar.
Subscriptions and payments
There are none. The “Premium later” screen inside the app is a preview of features we are considering. There is no purchase button. No billing library is loaded. We do not collect or receive payment card details, mobile-money details, or any other payment information.
If we add a paid tier in the future, payments would go through your platform’s store (for example, Google Play Billing). We would not see your card details in that case either — the store would handle them — and we would describe the change here before turning it on.
Ads
For all users on the current (free) tier, StockPilot shows a single banner ad along the bottom of the main screens. The banner is supplied by Google AdMob.
- AdMob and Google’s User Messaging Platform (UMP) collect data per Google’s own policies. This typically includes your advertising ID and similar signals. See Google’s privacy policy and how Google uses information from sites or apps that use Google services.
- If you are in the European Economic Area, the United Kingdom, or any region where Google’s UMP decides that consent is required, the app shows a consent form provided by Google before any personalised ad is requested. You can revisit your choice later via Settings → Manage ad privacy options (this entry is visible only when UMP says a decision is required).
- A future Premium tier will hide banner ads. Premium is not active today, so all users see ads. When we activate a paid tier, this policy will be updated.
- You can also opt out of personalised ads at the operating-system level. On Android: Settings → Privacy → Ads → Delete advertising ID (or Opt out of Ads Personalisation on older devices). Doing so does not remove ads — it limits personalisation.
- We do not see the contents of ad requests or responses ourselves. They go between your device and Google.
Third-party services we use
The app is built with the Flutter framework and ships with general-purpose libraries (for the local database, file paths, photo picking, navigation, and ID generation). These libraries run on your device and do not transmit your data.
We do not currently use any third-party analytics, crash reporting, or attribution service. If we add one, we will list it here and call it out in the app.
Your rights and choices
- Edit or delete records. Use the relevant screen in the app — products, stock movements, sales history, and so on.
- Create a local backup. Settings → “Create local backup.” This writes a JSON file you can copy off the phone, attach to an email, or store wherever you like.
- Restore from a local backup. Settings → “Restore backup.” Replaces the current inventory on the device with the most recent local backup file.
- Delete everything. Uninstall the app. The operating system removes the app’s private storage — database, product photos, and local backups all go with it. There is nothing left on our side to delete, because we never received it.
Because we do not hold a copy of your data, we cannot recover it for you if you uninstall without making a backup first. Please export a backup before uninstalling if you want to keep a copy.
Children
StockPilot is a tool for running a small business. It is not directed at children, and we do not knowingly collect data from children. We also do not collect data from adults — see the rest of this page — so this section is mostly a formality.
Security: what we do, and what we don’t claim
What we do:
- Your data is stored in the app’s private storage, which other apps on your phone cannot read.
- The app does not send your data over the internet, so there is no network exchange to protect with TLS — there simply isn’t one.
What we don’t claim:
- The backup file is not encrypted. If you save a backup outside the app, the file is only as private as wherever you save it.
- Your phone itself is the boundary. Anyone who can unlock your phone can open StockPilot and see your inventory. If you want a screen-lock or fingerprint check on the app itself, use your phone’s app-lock feature.
- Perfect security does not exist. If we ever discover an issue affecting your data on our side in a future release, we will update this page and surface a notice in the app.
International users and where data lives
Your StockPilot data lives on your phone, wherever your phone is. We do not transfer it across borders, because we do not transfer it at all.
We do not currently make formal claims about compliance with any specific privacy regulation (such as the EU’s GDPR or California’s CCPA / CPRA). The rights and choices described above are available to all users regardless of location.
Changes to this policy
When we update this policy, we will:
- Change the “Last updated” date at the top.
- For material changes — especially anything that changes whether data leaves your device — surface a notice in the app the next time you open it.
If you continue to use StockPilot after a change, you accept the updated policy. If you don’t agree to a change, you can uninstall the app at any time.
Who we are, and how to reach us
StockPilot is built and operated by:
Bluenex
A sole proprietorship registered with the Philippine Department of Trade and Industry (DTI).
Email: support@bluenex.org
We answer privacy questions at the same address.