1. Scope

This policy applies to SnapStockKing, provided by BLACKNIU Studio. It describes how the current version handles account, warehouse, OCR, PDF, and AI-related data.

2. Account and cloud warehouse data

• Email addresses and Firebase user IDs are processed by Firebase Authentication to create accounts, sign users in, and separate each user's data.
• Passwords are verified by Firebase Authentication and are not written to the App's inventory database.
• Item codes, names, quantities, storage locations, inventory thresholds, lead times, and inbound or outbound records are stored under the account's Firebase Firestore path for inventory management, search, reports, and activity records.
• Account and warehouse data are linked to the Firebase user ID, but are not used for advertising or tracking.

3. On-device OCR, PDFs, and settings

• Receipt images are currently recognized on device with Apple Vision. Original images are not sent to Firebase or OpenAI.
• Inventory PDFs are created on device. Copies saved or shared by the user are managed by the selected app, file location, or service.
• The user's OpenAI API Key is kept in the device Keychain and is not synced to Firebase.
• Up to 200 recent AI feedback records, including the question, answer, and rating, remain on device and are not uploaded by the App.

4. OpenAI sharing and explicit consent

Cloud OCR parsing and the AI Warehouse Advisor have separate permissions, both off by default. Users can enable or revoke either permission in AI Settings.

• Cloud OCR parsing: Recognized text is sent to OpenAI for field structuring only after the user enables OCR sharing. Otherwise, the App uses local rules.
• AI Warehouse Advisor: After separate advisor consent, each question sends the prompt, recent conversation, and relevant item codes, names, quantities, thresholds, lead times, and activity records to OpenAI.
• The App does not add the Firebase user ID, email address, or storage locations to advisor requests. Item names, prompts, or OCR text entered by the user may still contain personal or confidential information.

5. Third-party services and diagnostics

The App uses Firebase Authentication, Firebase Firestore, and the OpenAI API with credentials supplied by the user. These providers process received data under their respective terms and privacy policies. Third-party services are expected to provide protection equivalent to this policy and applicable requirements.

The bundled Firebase Authentication and Firestore privacy manifests declare collection of other diagnostic data that is not linked to identity, for analytics and service reliability, and not for tracking.

• Firebase Privacy and Security
• OpenAI Privacy Policy

6. Retention, deletion, and withdrawal

• Warehouse data remains until the user deletes individual content or permanently deletes the account.
• Permanent account deletion removes the current account's inventory, activity records, user document, and Firebase Authentication account, plus the App-managed activity cache and on-device AI feedback. Firebase may require a recent sign-in.
• Provider backups, security records, and requests already delivered are handled under the provider's current policy and applicable law.
• The OpenAI API Key can be removed separately in AI Settings. The App cannot delete PDFs already saved or shared elsewhere by the user.
• System or Firebase SDK cache data may remain in the App sandbox according to system and SDK lifecycles. Deleting the App removes its sandbox. Device backups are governed by Apple system settings.

7. User choices and contact

Users can export an inventory PDF, turn off AI sharing, clear the API Key, or permanently delete the account and warehouse data from Account Management. For access, correction, deletion, or other privacy requests, email good1men1@gmail.com.

8. Security, children, and changes

The App uses Firebase account separation, iOS Keychain, the App sandbox, and data minimization. No network service can guarantee absolute security, and users should protect their account and API Key.

The App is not designed specifically for children, and we do not knowingly collect children's personal data. If data practices change, we will update this policy, the App Store privacy information, and the update date, and request consent again when required.