Privacy Policy

Who we are

Prosto and Prosto Business are made and published by Stoqer. You can reach us at support@theprosto.com.

The short version

Your products, invoices, customers, suppliers, stock and prices are stored in a database on your own device. A copy leaves it only if you choose to use cloud backup.

What else leaves your device is limited to crash reports, usage events, the ads shown in the free app, a support recording if you start one, and the things you explicitly ask for — such as signing in, buying a subscription, or using a feature that needs the internet.

What stays on your device

Prosto works offline. The following is held in local storage on your phone and nowhere else unless you use cloud backup or export it yourself:

• Products, categories, barcodes and prices
• Invoices, purchases, returns and payments
• Customers, suppliers and their balances
• Stock levels, adjustments and costs
• Your name, phone number, profile picture and shop details, if you enter them
• Your settings, including any password or PIN you set

What we collect

We use the following services. Each is named so you can read their own policies:

• Firebase Crashlytics — crash reports, so we can fix what broke. These include your IP address, device model, OS version, app configuration, the time of the error and a stack trace.
• Firebase Analytics and PostHog — usage events such as which screens are opened, used to improve the app and decide what to build next. They do not include your business records. PostHog data is sent to its EU region.
• Google AdMob — shows ads in the free app. Google may use identifiers such as your device’s advertising ID and your IP address to serve and measure ads, as its own policy describes.
• Google Play Services — used by the app on Android, under Google’s privacy policy.
• Support screen recording (PostHog) — only if you tap “Record my screen for support”. We never start one without you. It lasts at most 3 minutes and you can stop it at any time. Text and images are masked on your device before anything leaves it. Recordings are stored on servers in the European Union and deleted automatically after 30 days.
• Firebase Storage — only if you use cloud backup. A copy of your database, including your business records, is stored there, linked to your account, and you can restore it on another phone.
• Firebase Remote Config and In-App Messaging — to change settings and show notices without shipping an update.
• Firebase Cloud Messaging — push notifications, if you allow them.
• Firebase App Check — to confirm requests come from the real app and not an impostor.
• Firebase Authentication, Google Sign-In and Sign in with Apple — only if you choose to sign in. We receive your email address, account identifier, and any name or photo the provider shares. Account and subscription status are kept in Firebase Firestore.
• RevenueCat — to check whether your subscription is active. It receives a purchase identifier from Apple or Google, not your payment details.
• Firebase AI (Google) — only when you use an AI feature. What you ask, the figures from your records needed to answer it (such as sales, stock, dues and expenses), and any bill photo you scan are sent to be processed and the answer returned.

Permissions, and why each is asked for

Android and iOS ask before granting any of these. Refusing one disables that feature and nothing else:

• Camera — to scan barcodes and to attach a photo to a product.
• Microphone — for voice search, only while you hold the button.
• Photos and files — to pick a product image, and to save or restore a backup you create.
• Contacts — only if you choose to add a customer from your phone book. We read the contact you pick, nothing else.
• Bluetooth — to connect a receipt printer or a barcode scanner.
• Biometrics — to unlock the app with your fingerprint or face. The biometric itself never leaves your device; the operating system only tells us yes or no.
• Notifications — for reminders and messages, if you allow them.

This website

The guide on this site embeds videos from YouTube. The player itself is only loaded when you press play, and it is loaded from youtube-nocookie.com, so nothing is set in your browser by YouTube until you choose to watch something.

The still image on each video is served by YouTube when the page loads, which means Google can see that a browser requested it. Nothing else on this site tracks you: there is no analytics, no advertising and no cookie set by us.

The partner and early-access forms store nothing on this site. They open WhatsApp or your mail app with your message ready, and we receive it only if you send it.

This site links to other sites, such as the app stores and YouTube. We do not control them and are not responsible for their content or privacy practices.

Payments

Subscriptions are purchased through Apple or Google, never through us. We never see your card number, and we cannot charge you — only the store can.

Turn off renewal or ask for a refund through the App Store or Google Play, the same way as any other subscription. Our Terms of Use give the full subscription terms.

Prosto Business

Prosto Business is not yet released. It is a cloud product, so when it launches your business data will be stored on our servers rather than only on your device — and this page will be updated to say exactly where, how it is protected, and for how long it is kept, before anyone can sign up.

Who we share with

We do not sell your data, and your business records are never shared with advertisers. The free app shows ads through Google AdMob, as described above. The only parties who receive anything are the service providers named above, each only for the purpose listed, and they may not use it for anything else.

We will disclose data if a court or a law validly requires it.

Keeping and deleting

Deleting the app deletes the business data on your device. Make a backup first if you want to keep it. A cloud backup stays in cloud storage until you replace it or delete your account.

Crash reports and analytics events are kept by the providers above on their own schedules. Support recordings are deleted after 30 days.

Deleting your account

In the app, open your profile and choose “Delete account”. This deletes your account and your cloud backup, and it cannot be undone. Without the app, email support@theprosto.com from your account’s address asking us to delete it, and we will.

Security

We use commercially acceptable means to protect your information, but no method of sending or storing data is 100% secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to ask what we hold about you, to correct it, to have it deleted, or to object to its use. Email support@theprosto.com and we will answer.

Children

Prosto is a business tool and is not directed at children. We do not knowingly collect data from anyone under 13, or under 16 where the law requires that age. If we learn we have, we delete it immediately. Parents or guardians can contact us at support@theprosto.com.

Changes to this page

We will change this page when the app changes. The date at the top is when it last changed, and changes take effect once posted here. If a change is significant we will say so in the app rather than hoping you re-read this page.