Last updated: 12 August 2026 · Applies to the Stocka Android app (pe.stocka.app) and to the free Odoo connector.
The short version: the phone talks straight to your company's Odoo. No inventory figure —no products, quantities, locations, prices or customers— passes through our servers, not even in transit. The only thing that reaches us is the minimum needed to check the device's licence.
Jhon Jairo Rojas Ortiz, trading as Aski, from Peru. For anything about privacy: contacto@aski.dev.
Stocka connects to two different places, and they should not be confused:
| Destination | What is sent |
|---|---|
| Your company's Odoo (the server you point it at when pairing) |
All the work: transfers, products, locations, quantities counted or picked. It goes straight from the phone to your server, using the API key of the Odoo user who scanned the QR code. We take no part in that connection and cannot see it. |
api.aski.dev(our licensing server) |
Only to know whether that device has an active licence: a device identifier, your Odoo address and the database name. Those last two identify the instance that pays. Nothing else. |
If your Odoo is on-premise and never goes online, the app works just the same: only the licence check needs a connection, and it tolerates up to three days without one.
The camera permission is used for two things: reading the pairing QR code that Odoo shows, and reading product and shelf barcodes. The reading happens inside the phone. No photos or video are stored, nothing is uploaded to any server, and the app never touches your gallery.
All of that lives on the device alone and disappears when you unpair the app or uninstall it. You can also revoke any phone's access from Odoo, under Stocka → Connected devices.
| Third party | What for |
|---|---|
| Lemon Squeezy (United States) | Charging the subscription, only if you subscribe. Payment happens on the website, not inside the app. They handle the email and payment details; we never see or store your card. |
| Google Play (United States) | Distributing and installing the app, and giving us aggregated install and crash reports. |
| Google Play Integrity (United States) | When enabled, the phone asks Google for a verdict on whether the app is genuine, to keep modified copies out. It returns a verdict, not your data. |
We sell data to nobody. The app carries no usage analytics, no advertising trackers and no ads.
An instance's licence record (address, database and devices) is kept while the licence is alive. A device that goes 30 days without connecting frees its slot on its own. If you cancel, you can ask us to delete it by writing to contacto@aski.dev and we do so within 30 days at most.
This is the section Google Play links to from the Stocka listing as the data deletion method.
What gets deleted: the whole licence record for that instance — your Odoo address, the database name, the identifiers of the paired devices, and the contact email if you subscribed.
What does not, because we never had it: your inventory data. It does not pass through our servers. What sits on the phone (the pairing key and the pending queue) disappears when you unpair or uninstall the app, and you can revoke any device yourself from Odoo.
What is kept, and for how long: if there were payments, the payment provider and we keep the transaction record for as long as tax and accounting rules require, even after the rest is deleted. It is the only data that outlives the request.
You can also ask us for access to, correction of or a copy of whatever we hold through that same channel.
Stocka is a work tool for businesses. It is not directed at children under 13 and we do not knowingly collect data from children.
All communication with our licensing server travels over HTTPS. The connection to your Odoo uses whatever scheme your server is configured with: if you publish your Odoo over HTTPS, the app travels encrypted end to end with it.
The app connects as the Odoo user who scanned the QR and sees exactly what that user would see inside Odoo. It is not a back door: your Odoo's permissions and record rules apply just the same.
If anything relevant changes we will update this page and the date above. Changes affecting data you had already given us are additionally announced by email to the address you subscribed with.
Aski