Skip to content
Depo

Privacy Policy

Last updated:

In short:

  • There are no ads, no tracking, no analytics and no crash-reporting tools; on Android, Depo does not use the advertising ID, Firebase or Google Analytics.
  • An account is optional. Without one, what you enter stays only on your phone or tablet. If you sign in to an account, your business’s data is synced through Depo’s own server in Germany, in the EU.
  • Document reading and Ask Depo run entirely on your device.
  • You can delete your account in the app at any time.
  • Depo Pro is bought through the App Store on iPhone and Google Play on Android, and RevenueCat confirms the subscription status.

What this policy covers

This policy covers the Depo apps for iPhone and Android, the Depo server at depo-api.sayfa.app that the app syncs with, and the depo.sayfa.app website. “We” means the developer of Depo.

The data you enter in the app

Your items (name, SKU, barcodes, unit, prices, minimum stock, notes, photo), locations, stock movements, counts and suppliers (name, phone, email, notes) are stored on your phone or tablet, in Depo’s own storage. On iPhone, Depo’s widgets read the same data on the device.

Using Depo without an account

You can use Depo without signing in. Then your data stays only on your device, nothing you enter is sent to us, and there is no copy anywhere else: if you lose the phone or delete the app, the data is gone. You can export it as CSV files in More → Export Data (CSV), free on every plan.

Your account

To sync between devices or work with your staff, you create an account with your name, an email address and a password, from the Sign In or Create Account card at the top of More. We send a 6-digit code to the address to verify it. You then sign in with your email address and password. If you forget the password, we send a 6-digit code to the address to set a new one, and we email you a notice when your password or email address changes. Passwords are stored only as Argon2id hashes, a slow one-way hash; we never store or see the password itself. Codes are valid for 10 minutes, and are stored only as a hash.

Once your account exists, you can link passkeys to it in More → My Account → Passkeys, and they then sign in to it too: you confirm with Face ID or Touch ID on iPhone, or with your fingerprint, face or screen lock on Android. You can add passkeys on another device, in another password manager or on a security key. The private part of a passkey stays where you keep it, for example in Apple’s Passwords app or Google Password Manager (or another credential provider), and never reaches us. On a new device you can also sign in with a QR code, without a passkey: a device where you are already signed in scans the code the new device shows, and you approve with the device’s lock. A QR link that is not approved expires after 2 minutes.

For each passkey we keep only its public key and ID, the identifier of its provider (the AAGUID, which gives a name such as “iCloud Keychain”), and the dates it was added and last used. We also record which passkey started each session, so that removing a passkey signs out the sessions started with it. For each signed-in device we keep its name (the one you give it or the one the device reports), its platform, how it signed in, and the dates it was first and last used; they are shown in the “Signed-In Devices” list in My Account. Your account holds your display name, your verified email address and the hash of your password. We use these only to run your account, to send you the codes and security notices described above and the emails described below, to list your passkeys and devices for you in My Account, and to show your name to the other members of your workspaces. We do not use your email address for marketing.

Email delivery

Codes and security notices are sent from no-reply@sayfa.app through Amazon SES (Amazon Web Services), our email processor. SES receives your email address and the text of the message so that it can deliver it. We also send a welcome email once your address is verified and, after a Depo Pro purchase, an email about using the product: how to get help, Depo on your computer and how to send feedback. Every such email has an unsubscribe link. These emails and your support messages go through Yuva (app.useyuva.com), our support tool, which we operate. Yuva receives your verified email address, name, language and plan. Depo sends no newsletters or advertising email.

Workspaces and sync

When you sign in, you create a workspace for your business or join one. The workspace’s records (items, locations, suppliers, stock movements and counts) are then stored on Depo’s server and synced between the devices of its members. Item photos are not synced; they stay on the device where they were added.

The server runs at Hetzner in Germany, in the European Union. The app talks to it over an encrypted connection. As with any network request, the server receives your IP address and technical details such as the app version, to answer the request. We can access the server as its operator; we use the data on it only to provide sync and teams, and never sell it or use it for advertising.

The server’s database is backed up to encrypted object storage. Backups are kept for 30 days, so data deleted from the server disappears from the backups within 30 days.

Teams

The owner of a workspace can invite staff with an invite code. Everyone in a workspace sees all of its records, and the members’ display names. Owners manage the workspace, its members and the Depo Pro subscription; staff work with the stock.

Shared devices

An owner can add a shop-floor tablet to the workspace as a shared device; workers then pick their name on it and enter a PIN. For this we store each person’s name, a slow one-way hash of their PIN (never the PIN itself), a hash of their badge if they have one, the tablet’s name and platform, unlock and lockout events (person, tablet, time), and which person made each stock movement or count. PIN hashes are sent only to that workspace’s shared tablets, so a tablet can unlock offline. Deleting the workspace deletes all of this.

Camera, photos and files

The camera is used to scan barcodes and QR codes and to photograph documents. The image is processed on the device (on Android with CameraX and Google’s ML Kit), not stored and not sent anywhere. When you add a photo to an item or read a document, Depo opens only the photo or file you pick. An item’s photo is stored with the item on your device; a document’s image is not stored, only the lines you confirm are recorded as stock in.

Document reading and Ask Depo

On iPhone, text on a document is recognised with Apple’s Vision framework; splitting it into lines and answering your questions is done by Apple’s on-device language model. On Android, the same work is done with Google’s ML Kit and the on-device Gemini Nano model, on phones that support it. All of it happens on your device. Your documents, questions and answers are not sent to us or to any other service. Only the stock movements you confirm are synced, like any other movement.

Notifications

Low-stock notifications are local notifications created on your device. Permission is asked the first time you set a minimum stock for an item. You can turn them off in Depo’s More tab.

Siri, Shortcuts and Spotlight

On iPhone, your items are added to the Spotlight index on the device so that they show up in search. Actions you run with Siri or Shortcuts work on the device, the same way as in the app.

Purchases

Depo Pro is bought through the App Store on iPhone and Google Play on Android. Apple or Google handles the payment; your card details never reach us. To confirm the subscription status, Depo uses RevenueCat. When you are signed in, the subscription belongs to your workspace, and RevenueCat knows it only by the workspace’s ID; without an account, by a randomly generated anonymous ID. RevenueCat also receives the store’s purchase information (which plan, when it was bought, when it renews) and, as with any network request, your IP address and technical details such as the app and operating system version. Your name and stock data are not sent to RevenueCat. This information is used only to recognise the subscription, never for tracking or advertising.

The website

depo.sayfa.app uses no cookies and no analytics. It is served by Cloudflare; as with any website, your IP address and browser details pass through Cloudflare’s network to deliver the page and to prevent abuse.

Deleting your data

  • Your account. Delete it in the app, in More → My Account → Delete Account. This removes your user, your email address, your password hash, any pending codes, your sessions and your memberships from the server, and every workspace where you are the only owner, with all of its data, for all of its members. Workspaces that have another owner stay. The records of your passkeys are deleted from the server too; you can delete the passkeys themselves in the Passwords app, Google Password Manager or the password manager you use. The data on your device stays there until you delete the app. For the steps, and what to do if you can’t open the app, see Delete your account.
  • A workspace. An owner can delete a workspace in More → Workspace → Delete Workspace. Its members, invites and data are deleted from the server for everyone.
  • On the device. Deleting Depo from your device deletes the data on it.
  • Backups. Deleted data disappears from the server’s backups within 30 days.
  • Purchases. You can cancel your subscription in the App Store or Google Play, and you can ask us in writing to delete the purchase record at RevenueCat.

Changes

If we change this policy, we update this page and the date at the top.

Contact

For questions about privacy: help@sayfa.app