Stoik — Privacy Policy

Privacy Policy

Last Updated: July 2, 2026

1. Introduction

Stoik (“Stoik,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use the Stoik mobile application (“the App”). The App is available exclusively on Apple iOS devices and all services are provided in English. By using the App, you agree to the practices described here.

2. Information We Collect

2.1 Account Information

By default, Stoik creates an anonymous account for you — a randomly generated account identifier. You do not need to provide an email or name to use the App.

• Sign in with Apple (optional): If you sign in with Apple, we receive the name and email you authorize, or Apple’s private relay email if you choose to hide your email.

2.2 Profile Information

You may optionally provide a display name, username (handle), short bio, Instagram username, and profile photo. This profile information is visible to other users through the leaderboard, user search, and chat.

2.3 Activity & Progress Data

• Focus sessions, XP, ranks, and streaks

• Tasks and to-dos, reading progress, and notes

• General in-app interaction needed to operate features and enforce subscription limits

Your tasks, notes, and book library are stored locally on your device. Your profile, XP, and leaderboard standing are stored on our servers.

2.4 Messages (End-to-End Encrypted)

Stoik chat is end-to-end encrypted. Messages are encrypted on your device before being sent. We store only encrypted ciphertext and never have access to your keys or the readable content of your messages. Keys are generated and stored on your device.

2.5 AI Features (Book Scanning & Roadmap)

• Book scanning: When you scan a book cover, the photo is sent through our backend to OpenAI to read the title and author, and we query Google Books and Open Library for a cover image and page count. The photo is processed transiently and is not retained on our servers after the scan completes.

• AI Roadmap: When you ask Stoik to generate a roadmap for a goal, the goal text you enter is sent through our backend to OpenAI to produce a suggested set of steps. This text is processed transiently to generate your roadmap and is not used to train third-party models. AI-generated roadmaps are suggestions only and may be inaccurate.

2.6 Notifications

If you enable notifications, we store a device push token to deliver message and reminder notifications.

2.7 Subscription Information

Subscription status (Stoik+) is managed through RevenueCat and Apple. We do not collect or store payment-card details; payments are processed by Apple.

2.8 Device Information

Basic technical information such as device type, OS version, and app version, used to operate and secure the App.

2.9 Screen Time & App Blocking (Apple Family Controls)

Stoik can block distracting apps during focus sessions using Apple’s Screen Time (Family Controls, Managed Settings, and Device Activity) framework. When you choose which apps or categories to block, that selection is represented by opaque tokens managed privately by Apple on your device. Stoik does not receive, see, or transmit the identities of the specific apps you select, your usage of them, or your Screen Time history — that data never leaves your device and is not accessible to us. We only store, in a private on-device app group, the settings needed to run the feature (such as your blocked selection and unlock state).

2.10 Motion Data

If you enable the focus “motion alarm,” Stoik reads your device’s motion sensors (accelerometer/gyroscope via Apple’s Core Motion) only while a focus session is active, to detect whether the phone is being moved. This motion data is used transiently on your device in real time and is never collected, stored, or transmitted off the device.

2.11 Background Activity

To keep the focus timer and motion alarm running while you switch to another app, Stoik may play a silent audio stream in the background (the “audio” background mode). This is used solely to keep the focus feature active and does not collect any data.

3. How We Use Your Information

• To provide the App’s features (focus timer, tasks, reading tracker, streaks, leaderboard, messaging, app blocking, and roadmaps)

• To block distracting apps you select during focus sessions (processed on-device via Apple Screen Time)

• To run the focus motion alarm using on-device motion data while a session is active

• To generate AI roadmap suggestions from goals you enter

• To maintain your profile, progress, and ranking

• To deliver notifications you enable

• To process subscriptions and enforce entitlements

• To operate, secure, maintain, and improve the App

• To respond to support requests

4. Third-Party Services

Service

Purpose

Data Shared

Supabase

Authentication, database, storage

Account ID, profile, XP, encrypted message ciphertext, device push token

OpenAI

Reading title/author from a cover photo; generating AI roadmap steps

Book cover photo and goal text (transient, not stored)

Apple Screen Time (Family Controls)

Blocking distracting apps during focus

On-device only — app selections are opaque tokens; nothing about which apps you block is sent to us

Google Books & Open Library

Book cover & page-count lookup

Book title/author text

RevenueCat

Subscription management

Anonymous ID, purchase/subscription status

Apple

App Store, payments, Sign in with Apple, push delivery

As per Apple’s privacy policy

We do not use third-party analytics, advertising, or tracking SDKs, and we do not track you across other apps or websites.

5. Data Storage and Security

• Data in transit is protected with TLS/SSL.

• Account and profile data is stored on Supabase and encrypted at rest.

• Chat messages are end-to-end encrypted; keys are stored in the device Keychain.

• No system is perfectly secure; we cannot guarantee absolute security.

6. Data Retention

• Account & profile data: retained until you delete your account.

• Account deletion: deleting your account in the App removes your profile, XP, leaderboard entry, encrypted messages, and device tokens from our servers.

• On-device data (tasks, notes, library): removed when you delete it or uninstall the App.

• Book-scan photos: not retained on our servers after analysis.

7. Your Rights

You have the right to access, delete (available in-app), and correct your data, and to opt out of notifications. Contact us at shavitsappscompany@gmail.com.

8. Data Sharing

We do NOT sell your personal data, share the readable content of your messages (we cannot — they are end-to-end encrypted), use your content for advertising, or share data with data brokers. Your display name, username, profile photo, and XP are visible to other users through the leaderboard, search, and chat.

9. Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. International Data Transfers

Your data may be processed in countries other than your own, including the United States (Supabase, OpenAI, RevenueCat, Apple). By using the App, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the App after changes constitutes acceptance.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected and to request deletion.

13. European Privacy Rights (GDPR)

If you are in the EEA or UK, you have rights under the GDPR/UK GDPR including access, rectification, erasure, restriction, portability, and objection. Our legal bases are performance of our contract with you and our legitimate interests.

14. Contact

Email: shavitsappscompany@gmail.com

15. Governing Law

This Privacy Policy is governed by the laws of the State of Israel.