Purchase History - Privacy Policy

Introduction

Purchase History is a cloud multi-tenant purchase and visit memory service published by StoicSoft Inc. (stoicsoft.net). Unlike some StoicSoft apps that keep data only on-device, Purchase History stores account and content data on our servers so you can use the app in your browser, household sharing, billing, and the Codex MCP plugin. This Privacy Policy explains what we collect, why we collect it, who processes it, and how you can control it.

Information We Collect

Depending on how you use the service, we may collect and store:

Google account identity: identifiers and profile details provided via Google OAuth when you sign in (such as Google subject ID, email, and display name).
Purchase and visit records: items you save (products and dishes), visit place details, ratings, reviews, and notes.
Photos: images you upload of products or dishes, stored as normalized, metadata-free JPEGs for recognition, review, and lookup.
Approximate location (transient): device coordinates used only to look up nearby places when you log a restaurant or shop visit. Coordinates are not stored; place details you confirm (name, address, provider place ID, and related visit data) may be saved with the visit.
Billing identifiers: Stripe customer and subscription identifiers needed to manage Personal and Household plans. We do not store full payment card numbers on StoicSoft servers.
Account membership: household invites, membership roles, and related account linkage so shared plans work.
Technical logs: limited operational logs (for example request timing, error diagnostics, and security signals) needed to run and protect the service.

Glasses beta signup requests

If you request access to the glasses beta, we store your Meta account email, Google Play account email, optional name and glasses model, signup time, request status, and consent version. We use these details to review your request, arrange beta access, and contact you about testing and feedback, not for unrelated marketing. Signup does not send invitations automatically. We keep requests that are still pending for up to 90 days, rejected or withdrawn requests for up to 30 days after that decision, and accepted requests until 30 days after your beta access ends, after which they are deleted automatically. You can ask us to correct or remove your signup details at any time by emailing contact@stoicsoft.net from the address you signed up with; an account deletion request also removes your signup record. To limit abuse, we briefly keep a salted, one-way hash of the submitting IP address for rate limiting and delete it within 2 days.

Purchase History for Meta AI Glasses (Android)

The Purchase History Android companion app lets you ask “have I bought this before?” hands-free using Meta AI glasses. It uses the following device capabilities only while you are using the feature:

Glasses camera: when you start a check, the app captures a still photo from the glasses camera through the Meta Wearables Device Access Toolkit. The photo is uploaded to our servers as a metadata-free JPEG for recognition and lookup, and is handled like other photos described in this policy. The app does not record or upload video.
Microphone and speech recognition: if you turn on voice replies, the app listens through the glasses’ microphone only while it is waiting for a short spoken reply (for example, to confirm a match or give a rating). The audio is converted to text by the speech recognition service on your phone, which on most Android phones is provided by Google. Depending on your phone and its settings, that provider may process the audio on its own servers under its own privacy policy, so recognition is not guaranteed to happen only on your device. We do not receive, store or upload audio recordings on our servers; only the resulting answer (such as a confirmation or rating) is sent to us. The app tells you this before voice replies are turned on, and you can always reply by tapping on screen instead.
Spoken responses: the app reads results aloud through your glasses using your phone’s text-to-speech engine. Depending on the voice you selected in Android settings, that engine may process the text on its provider’s servers.
“Hey Meta” voice commands: where available, if you start a check by asking Meta AI on your glasses, that voice command is handled by Meta under Meta’s privacy policy, and Meta then opens the app. We do not receive that audio.
Bluetooth: used to connect to and communicate with your paired Meta AI glasses. We do not collect a list of nearby devices or use Bluetooth for location.
Foreground service and notifications: a foreground service with a visible notification keeps the glasses session connected while the screen is off. It does not collect additional data.
On-device storage: the app stores your sign-in session token, signed-in email, and app settings in private app storage on your phone. App data is excluded from device backups.

The connection to your glasses is provided by Meta Platforms, Inc. through the Meta AI app and the Meta Wearables Device Access Toolkit. We disable the toolkit’s optional analytics and crash reporting. Meta’s handling of data in its own apps and devices is governed by Meta’s privacy policy. Photos uploaded by the app may be processed by our AI processors (see below) to generate descriptions and embeddings. The app contains no advertising and no third-party analytics SDKs.

You can revoke camera, microphone, Bluetooth, or notification access at any time in Android settings, or disconnect the app from the Meta AI app. Deleting purchases, photos, or your account works the same as for the rest of Purchase History (see “Your Controls”). You can delete your account in the app under Settings, or follow the steps on our account deletion page, which also lets you request deletion without the app.

How We Use Information

We use this information to:

Provide purchase recognition, storage, search, ratings/reviews, and visit logging
Generate AI descriptions and embeddings that power recognition and “have I bought this before?” lookup
Bill subscriptions and manage plan limits (analyses, storage, members)
Support household invites and shared account access
Authenticate the Codex MCP plugin under your Google account
Maintain security, prevent abuse, and improve reliability

Processors and Infrastructure

We rely on reputable processors to operate the service. Categories include:

Google: OAuth sign-in, Places (nearby place lookup), and possibly generative AI (for example Gemini) for description/recognition features
Meta: the connection between the glasses app and your Meta AI glasses, and “Hey Meta” voice commands, through the Meta AI app (governed by Meta’s privacy policy)
Your phone’s speech services: speech recognition and text-to-speech for the glasses app, provided by your phone’s speech service provider (often Google) under its own privacy policy
Stripe: subscription billing and Customer Portal
Neon / Postgres: primary application database
Google Cloud Storage (GCS): photo and object storage
Google Cloud Run: application hosting

Processors act on our instructions to provide the service. We do not sell your personal information.

Data Retention

At a high level, we retain account, purchase, visit, photo, and membership data while your account is active and as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Billing identifiers and related Stripe records may be retained as required for tax, accounting, and fraud prevention. If you delete content or close your account, we remove or anonymize associated application data within a reasonable period, except where retention is required by law or for legitimate security and billing records.

Your Controls

In-app account and data controls: manage or delete purchase/visit records and photos through the Purchase History application where those controls are available.
Billing: cancel or change your subscription through the Stripe Customer Portal linked from the app.
Household: leave a household or revoke invites using account membership controls in the app.
Delete your account: in the app, or using the steps and request form on our account deletion page.
Contact us: email contact@stoicsoft.net for access, correction, or deletion requests we cannot complete in-app.

Children's Privacy

Purchase History is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it.

Security

We use industry-standard safeguards appropriate for a cloud multi-tenant service, including encrypted transport (HTTPS), access controls, and least-privilege credentials for processors. No method of transmission or storage is perfectly secure; please use a strong Google account and report suspected abuse promptly.

Changes to This Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. We will revise the “Last updated” date above when we do. Material changes may also be called out in the app or by email when appropriate. Continued use after an update means you accept the revised policy.