Stæw privacy policy

Last updated: 8 October 2026

Stæw is a home inventory and meal planner for a household: where things are kept, what is running out or expiring, what was lent or borrowed, and what to cook. It is free to use, with optional paid subscriptions bought through Google Play. This policy covers the Stæw app (Android, iOS, web, desktop) and the Stæw server it talks to.

Who is responsible

Stæw, Slovenia. Contact: [email protected].

The app stores your data on the Stæw server at api.staew.eu, which Stæw runs.

What is stored

• Your account: your name, e-mail address and password. The password is stored only as a salted hash, never in readable form. Your language, your theme preference and when you last signed in are stored with it.
• Your household: its name, which everyone in the household sees. When you create an account, your household is named "<your name>'s household"; an owner can rename it at any time. Deleting an account does not remove the household's name, except that this automatic name becomes "Household" when its founder's account is deleted, if it still has that automatic name. A household that was renamed, or whose founder's name was changed since, keeps the name it has.
• Your household's records: the places, products, units, shopping list, recipes, projects and stock targets you enter; the names (and optional phone numbers and notes) of people you lend to or borrow from; purchase details, serial numbers and warranty dates you add; and documents you attach, such as receipts, manuals and photos.
• History: what was added, moved, used, lent or returned, when, and by which member of the household, so the app can show a unit's history.
• One-time codes and invitations: when you create an account, reset a password, delete an account from the web or are invited into a household, a 6-digit code is e-mailed to you. Only a keyed hash of the code is stored. It is deleted when it is used, or within a day of expiring (a code expires after 30 minutes, an invitation's code after 7 days). An invitation keeps the invited address and role until it is used, revoked or has expired, and is then deleted: at once when used or revoked, at most 15 days after it was last sent otherwise. An account that is never confirmed is deleted within 8 days of the last sign-up attempt.
• Security records: counts of failed sign-ins and of requests for sign-up, reset, deletion and invitation codes and of invitations sent, kept per e-mail address, per IP address (for IPv6, per network) and per household, to slow down password guessing and to stop the mail from being misused. Each count is deleted once a day has passed without it being added to, within two days at most. The web server keeps ordinary access logs (IP address, time, the address requested), and the server logs each request (its method, the address requested with the ids in it, and the result; never what was sent or received). Both are kept in size-limited log rotation on the server, so how long depends on traffic.
• Your household's plan: which features and size it has, from when to when, and their history (each grant and every change to it, with a note the administrator may type), so the app knows what to unlock.
• Purchases: if your household buys an optional subscription (a pack or a size), Google Play handles the payment and Stæw never sees your card or payment details. The server keeps, for the household, the purchase token Google gives for the subscription, who in the household bought it, the product bought, its state, its expiry date, the order number and when it was last checked with Google, plus an account number derived from the household (not your name or e-mail) that Google attaches to the purchase. Of Google's latest answer about the subscription it keeps only its state, order number, expiry, whether it renews, the product, the base plan (monthly or yearly), whether it was acknowledged and whether it was a test purchase. It is used to switch the subscription's features on and off, and is deleted with the household. Google also tells the server about renewals, cancellations and refunds; the identifiers of those notifications are deleted within 8 days.

Everything a household enters is visible to the members of that household and to Stæw as the server's administrator. Stæw does not sell or share your data: it uses Cloudflare to deliver the service and Google Play for payments, as described below.

What the app does on your device

• Camera: used only while you scan a barcode or a shelf label, or take a photo to attach. Scanning happens on the device; only the barcode number is sent to the server. Photos are sent only when you attach them.
• Photos and files: read only when you pick one to attach.
• Notifications: reminders (things to return, what expires, tools to charge, warranties ending) are scheduled on your device from data the app already has. The app asks to start when the phone starts, only so that it can schedule these reminders again after a restart.
• The app keeps your sign-in token and a few settings on the device, so you stay signed in.
• Opened documents: when you open an attached document, a temporary copy is saved on the device for the app that shows it. Copies are removed when you sign out, and swept after a day.

Stæw contains no advertising, no analytics, no tracking and no crash-reporting services.

Services the server contacts

• Cloudflare: Cloudflare is the network in front of the server that delivers the web app and the API and provides their encryption (HTTPS). Everything sent to and from the server passes through it, including passwords, your household's records and documents, and Cloudflare keeps its own logs of that traffic under its own privacy policy.
• E-mail: the server sends the codes and invitations above by e-mail, through the server's own mail server. They contain the code and, for an invitation, the names of the household and of the person who invited you.
• Google Play: to check a purchase, the server asks Google for the state of the subscription, sending the purchase token and the app's package name, never anything about you.
• Product look-ups: when you scan a barcode the server does not know yet, it asks the public Open Food Facts family of databases and UPCitemdb for that barcode's product name. Only the barcode number is sent, never anything about you.
• Meal ideas (optional): the server can be connected to an AI service for the "Surprise me" button. Only then, and only when you press it, the names of the ingredients at home (marked if expiring or opened), the dishes made recently and the kind of meal wanted are sent to that service, never your name or account. It is not enabled at present.
• Home Assistant (optional): if your household connects its own Home Assistant, the data you choose to expose goes to that Home Assistant, which your household runs.

Why, and on what basis

The data is processed only to provide the app's features to you and your household (performing the service you asked for, including a subscription you bought), and the security records to protect accounts (legitimate interest).

How long it is kept

For as long as your account or household exists. Deleting a household deletes everything in it, including its purchase records here; this does not cancel a subscription, which you manage in Google Play, and Google keeps its own payment records. Removing a member deletes their account; the household's history keeps the records they made, with their name removed. The household's name stays as it is, except that the automatic name "<name>'s household" becomes "Household" when that person's account is deleted, if the household still has that automatic name (not when it was renamed, or the person's name was changed since).

Your rights and deleting your account

You can see and correct your household's data in the app. You can delete your account, or your whole household, yourself: in the app under Settings → Delete my account, or with the form on the account deletion page. To get a copy of your data, or if you cannot sign in, e-mail [email protected] from the address you sign in with; it is done within 30 days. A household owner can also remove members in the app. If you are in the EU you may also complain to your data protection authority (in Slovenia, the Information Commissioner).

Security

All traffic is encrypted (HTTPS). Passwords are hashed, sign-in attempts are throttled, sessions end when a password changes, and each household's data is kept separate from every other household's.

Children

Stæw is not directed at children under 13 and does not knowingly collect their data.

Changes

Changes are posted on this page with a new date.

Pravilnik o zasebnosti Stæw

Zadnja sprememba: 8. oktober 2026

Stæw je aplikacija za domači inventar in načrtovanje obrokov za gospodinjstvo: kje so stvari shranjene, kaj zmanjkuje ali bo poteklo, kaj je posojeno ali izposojeno in kaj skuhati. Je brezplačna, z neobveznimi plačljivimi naročninami prek Google Play. Ta pravilnik velja za aplikacijo Stæw (Android, iOS, splet, namizje) in strežnik Stæw, s katerim se povezuje.

Kdo je odgovoren

Stæw, Slovenija. Stik: [email protected].

Aplikacija vaše podatke hrani na strežniku Stæw na naslovu api.staew.eu, ki ga upravlja Stæw.

Kaj se hrani

• Vaš račun: ime, e-poštni naslov in geslo. Geslo se hrani le kot zgoščena vrednost s soljo, nikoli berljivo. Z računom se hranijo tudi vaš jezik, izbrana tema in čas zadnje prijave.
• Vaše gospodinjstvo: njegovo ime, ki ga vidijo vsi v gospodinjstvu. Ko ustvarite račun, se vaše gospodinjstvo imenuje »<vaše ime>'s household«; lastnik ga lahko kadar koli preimenuje. Izbris računa imena gospodinjstva ne odstrani, le to samodejno ime se ob izbrisu računa ustanovitelja spremeni v »Household«, če ga gospodinjstvo še nosi. Gospodinjstvo, ki je bilo preimenovano ali katerega ustanovitelju je bilo ime medtem spremenjeno, obdrži svoje ime.
• Zapisi gospodinjstva: prostori, izdelki, kosi, nakupovalni seznam, recepti, projekti in ciljne zaloge, ki jih vnesete; imena (in neobvezne telefonske številke ter opombe) oseb, ki jim posojate ali od njih izposojate; podatki o nakupu, serijske številke in datumi garancije, ki jih dodate; ter dokumenti, ki jih priložite, na primer računi, navodila in fotografije.
• Zgodovina: kaj je bilo dodano, premaknjeno, porabljeno, posojeno ali vrnjeno, kdaj in kateri član gospodinjstva je to storil, da aplikacija lahko prikaže zgodovino posameznega kosa.
• Enkratne kode in povabila: ko ustvarite račun, ponastavite geslo, izbrišete račun prek spleta ali ste povabljeni v gospodinjstvo, vam po e-pošti pošljemo 6-mestno kodo. Hrani se le zgoščena vrednost kode s ključem. Izbriše se, ko je koda uporabljena, ali v enem dnevu po izteku (koda poteče po 30 minutah, koda povabila po 7 dneh). Povabilo hrani povabljeni naslov in vlogo, dokler ni uporabljeno, preklicano ali ne poteče, nato se izbriše: takoj, ko je uporabljeno ali preklicano, sicer najpozneje 15 dni po zadnjem pošiljanju. Račun, ki ni nikoli potrjen, se izbriše v 8 dneh po zadnjem poskusu registracije.
• Varnostni zapisi: števci neuspešnih prijav in zahtev za kode za registracijo, ponastavitev in izbris ter poslanih povabil, vodeni po e-poštnem naslovu, po IP-naslovu (pri IPv6 po omrežju) in po gospodinjstvu, da se upočasni ugibanje gesel in prepreči zloraba e-pošte. Vsak števec se izbriše, ko en dan ni povečan, najpozneje v dveh dneh. Spletni strežnik vodi običajne dnevnike dostopa (IP-naslov, čas, zahtevani naslov), strežnik pa beleži vsako zahtevo (njeno metodo, zahtevani naslov z identifikatorji v njem in izid; nikoli tega, kar je bilo poslano ali prejeto). Oboje se hrani v dnevnikih, ki se na strežniku izmenjujejo po velikosti, zato je čas hrambe odvisen od prometa.
• Paket gospodinjstva: katere funkcije in velikost ima, od kdaj do kdaj, ter njihova zgodovina (vsaka dodelitev in vsaka njena sprememba, z opombo, ki jo lahko vpiše skrbnik), da aplikacija ve, kaj odklene.
• Nakupi: če vaše gospodinjstvo kupi neobvezno naročnino (paket ali velikost), plačilo obravnava Google Play, Stæw pa nikoli ne vidi vaše kartice ali plačilnih podatkov. Strežnik za gospodinjstvo hrani žeton nakupa, ki ga Google izda za naročnino, kdo v gospodinjstvu jo je kupil, kupljeni izdelek, njegovo stanje, datum izteka, številko naročila in čas zadnjega preverjanja pri Googlu, poleg tega pa številko računa, izpeljano iz gospodinjstva (ne iz vašega imena ali e-poštnega naslova), ki jo Google pripne nakupu. Od Googlovega zadnjega odgovora o naročnini hrani le njeno stanje, številko naročila, datum izteka, ali se podaljšuje, izdelek, osnovni paket (mesečni ali letni), ali je bila potrjena in ali je šlo za preizkusni nakup. Uporablja se za vklop in izklop funkcij naročnine, izbriše pa se z gospodinjstvom. Google strežniku sporoča tudi podaljšanja, odpovedi in vračila; identifikatorji teh obvestil se izbrišejo v 8 dneh.

Vse, kar gospodinjstvo vnese, vidijo člani tega gospodinjstva in Stæw kot skrbnik strežnika. Stæw vaših podatkov ne prodaja ali deli: za delovanje storitve uporablja Cloudflare, za plačila pa Google Play, kot je opisano spodaj.

Kaj aplikacija počne na vaši napravi

• Kamera: uporablja se samo, ko skenirate črtno kodo ali oznako police ali fotografirate prilogo. Skeniranje poteka na napravi; strežniku se pošlje le številka črtne kode. Fotografije se pošljejo samo, ko jih priložite.
• Fotografije in datoteke: berejo se le, ko jih izberete za prilogo.
• Obvestila: opomniki (kaj vrniti, kaj poteče, katero orodje napolniti, katera garancija se izteka) se načrtujejo na napravi iz podatkov, ki jih aplikacija že ima. Aplikacija se zažene ob zagonu telefona samo zato, da po ponovnem zagonu spet načrtuje te opomnike.
• Aplikacija na napravi hrani žeton za prijavo in nekaj nastavitev, da ostanete prijavljeni.
• Odprti dokumenti: ko odprete priložen dokument, se na napravi shrani začasna kopija za aplikacijo, ki ga prikaže. Kopije se odstranijo ob odjavi, sicer pa po enem dnevu.

Stæw ne vsebuje oglasov, analitike, sledenja ali storitev za poročanje o napakah.

Storitve, ki jih strežnik kliče

• Cloudflare: Cloudflare je omrežje pred strežnikom, ki dostavlja spletno aplikacijo in API ter skrbi za njuno šifriranje (HTTPS). Skozenj gre vse, kar se pošlje strežniku in od njega, tudi gesla, zapisi vašega gospodinjstva in dokumenti, Cloudflare pa o tem prometu vodi svoje dnevnike po svojem pravilniku o zasebnosti.
• E-pošta: strežnik zgoraj omenjene kode in povabila pošilja po e-pošti prek lastnega poštnega strežnika. Vsebujejo kodo, povabilo pa tudi ime gospodinjstva in osebe, ki vas je povabila.
• Google Play: za preverjanje nakupa strežnik pri Googlu vpraša za stanje naročnine in pošlje žeton nakupa ter ime paketa aplikacije, nikoli nič o vas.
• Iskanje izdelkov: ko skenirate črtno kodo, ki je strežnik še ne pozna, javne zbirke Open Food Facts in UPCitemdb vpraša za ime izdelka. Pošlje se le številka črtne kode, nikoli nič o vas.
• Predlogi jedi (neobvezno): strežnik je mogoče za gumb »Presenetite me« povezati s storitvijo umetne inteligence. Le takrat in le ko pritisnete gumb, se tej storitvi pošljejo imena sestavin, ki jih imate (z oznako, če bodo potekle ali so odprte), nedavno pripravljene jedi in želena vrsta obroka, nikoli vaše ime ali račun. Trenutno ni vklopljeno.
• Home Assistant (neobvezno): če gospodinjstvo poveže svoj Home Assistant, gredo podatki, ki jih izberete, v ta Home Assistant, ki ga upravlja vaše gospodinjstvo.

Zakaj in na kateri podlagi

Podatki se obdelujejo le za delovanje funkcij aplikacije za vas in vaše gospodinjstvo (izvajanje storitve, ki ste jo zahtevali, vključno z naročnino, ki ste jo kupili), varnostni zapisi pa za zaščito računov (zakoniti interes).

Kako dolgo se hranijo

Dokler obstaja vaš račun ali gospodinjstvo. Izbris gospodinjstva izbriše vse v njem, tudi zapise o nakupih tukaj; to ne odpove naročnine, ki jo upravljate v Google Play, Google pa hrani svoje evidence plačil. Odstranitev člana izbriše njegov račun; zgodovina gospodinjstva obdrži zapise, ki jih je naredil, brez njegovega imena. Ime gospodinjstva ostane, kakršno je, le samodejno ime »<ime>'s household« se ob izbrisu računa te osebe spremeni v »Household«, če ga gospodinjstvo še nosi (ne pa, če je bilo preimenovano ali je bilo ime te osebe medtem spremenjeno).

Vaše pravice in izbris računa

Podatke svojega gospodinjstva lahko pregledate in popravite v aplikaciji. Svoj račun ali celotno gospodinjstvo lahko izbrišete sami: v aplikaciji pod Nastavitve → Izbriši moj račun ali z obrazcem na strani za izbris računa. Za kopijo podatkov ali če se ne morete prijaviti, pišite na [email protected] z naslova, s katerim se prijavljate; zahteva se izvede v 30 dneh. Lastnik gospodinjstva lahko člane odstrani tudi v aplikaciji. Če ste v EU, se lahko pritožite tudi pri nadzornem organu (v Sloveniji pri Informacijskem pooblaščencu).

Varnost

Ves promet je šifriran (HTTPS). Gesla so zgoščena, prijave so omejene, seje se končajo ob spremembi gesla, podatki vsakega gospodinjstva pa so ločeni od podatkov drugih gospodinjstev.

Otroci

Stæw ni namenjen otrokom, mlajšim od 13 let, in njihovih podatkov zavestno ne zbira.

Spremembe

Spremembe so objavljene na tej strani z novim datumom.