Last updated: March 31, 2026
Summary: We collect only what's needed to run Stacko. Your scanned documents and financial data are encrypted and never sold. You can export or delete your data anytime.
Stacko is an AI-powered document vault and expense tracking application developed by XORIK ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Stacko mobile application.
Contact: hello@revolisapp.com
When you create an account, we collect:
When you use Stacko's expense tracking features:
Important: Stacko does NOT connect to your bank account. All financial data is entered by you through manual input or receipt scanning. We never access your bank, credit card, or payment accounts.
When you scan documents or receipts:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide core app features | Account, financial, scanned data | Contract performance |
| AI receipt scanning & classification | Scanned images | Contract performance |
| AI spending insights & coaching | Aggregated expense data | Contract performance |
| Send notifications | Budget, expiry, streak data | Consent |
| Improve app quality | Anonymous usage analytics | Legitimate interest |
| Prevent fraud & abuse | API usage patterns | Legitimate interest |
| Process payments | Subscription status (via RevenueCat) | Contract performance |
Stacko uses artificial intelligence to enhance your experience:
AI Transparency: We never send your full name, email, or personal identifiers to AI services. Only anonymous financial summaries and document images are processed.
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, file storage | All app data (encrypted) |
| Google Gemini API | Receipt/document scanning | Scanned images |
| OpenAI API | Spending insights | Anonymous spending summaries |
| RevenueCat | Subscription management | Purchase status, user ID |
| PostHog | Anonymous analytics | Usage events (no PII) |
| Google Sign-In | Authentication | Email, name, profile photo |
| Apple Sign-In | Authentication | Email (optional), name |
| Frankfurter API | Currency exchange rates | No user data |
Under GDPR, CCPA, KVKK, and other applicable privacy laws, you have the right to:
| Right | How to Exercise |
|---|---|
| Access your data | Settings → Data → Export Data (JSON) |
| Correct your data | Edit within the app |
| Delete your data | Settings → Danger Zone → Delete Account |
| Export your data | Settings → Data → Export (CSV/JSON) |
| Restrict processing | Contact hello@revolisapp.com |
| Withdraw consent | Disable notifications, delete account |
| Object to processing | Contact hello@revolisapp.com |
Data Deletion: When you delete your account, all your data is permanently removed from our servers within 30 days. This includes all expenses, documents, scans, settings, and analytics data.
Stacko is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@revolisapp.com.
The Stacko mobile app does not use cookies. We use PostHog for anonymous, privacy-focused analytics. No advertising trackers or third-party tracking SDKs are included in the app.
Your data may be processed in the European Union (Supabase), United States (AI APIs), and other countries where our service providers operate. We ensure appropriate safeguards are in place through Standard Contractual Clauses and adequacy decisions.
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top indicates when this policy was last revised.
For privacy-related questions, data requests, or concerns:
© 2026 XORIK. Stacko is a product of XORIK. All rights reserved.