Qiksy Shelf: Privacy Policy

Last updated: 1 October 2026

In one line: your stock lives on your phone, and if you put it in our cloud, it is encrypted on the phone before it leaves, with a key we never receive. We cannot see what you sell, what it costs or who bought it. What we do see is the e-mail address you sign in with and who is in which shop.

Who we are

Qiksy Shelf is a phone app for small shops: stock by expiry date, receiving by barcode, a till, and reports. It is operated by Dmytro Liesniak, sole proprietor (ФОП), Ukraine, registered in the Ukrainian state register (ЄДР) as Liesniak Dmytro Volodymyrovych, D-U-N-S 66-768-5166, trading as Qiksy. Contact: [email protected], in any language the app speaks.

This policy covers the Qiksy Shelf app for Android and iPhone and its web version at qiksy.app/shelf/.

What stays on your phone

Your stock, sales and settings. Products, batches, expiry dates, prices, sales, write-offs and reports are kept in the app’s own storage on the phone and work with no internet. Uninstalling the app, or Settings → Your data → Erase everything on this phone, removes them.
Barcodes. The camera picture is decoded on the phone. A barcode scan sends nothing anywhere.
Expiry reminders. They are scheduled on the phone itself. There is no push server.

The cloud, if you turn it on

The cloud is optional. It keeps the stock safe if the phone is lost and lets several sellers work in one shop. Every product, batch, sale, the shop’s name and any register or bank keys are encrypted on the phone with AES-GCM before they are sent. The key stays with you (the recovery key, or a passkey on your devices) and never reaches our server, so what we store is unreadable to us.

What our server does know, and keeps while your account exists:

your e-mail address, and the date you first signed in;
which shop you belong to, your role in it (owner or seller), and the e-mail addresses of its members;
how many encrypted records the shop holds and when they changed;
for Face ID or fingerprint sign-in: the passkey’s public key, and the shop key wrapped by a secret only your passkey can produce, which we cannot open;
the shop’s subscription: the plan and the date it is paid until.

Sign-in codes are sent by e-mail through Resend and stop working after 10 minutes. To stop abuse we count sign-in requests per address and per network for one hour, using one-way hashes, not the addresses themselves. An invitation link for a seller works for 7 days.

Reading a package with AI

When you ask the app to read a package, the photos you take or choose are sent through our server to Google’s Gemini API, which returns the name, brand, size and expiry date it sees. We do not store the photos or the answer. We use Gemini as a paid service, under Google’s terms for which the content is not used to improve Google’s products; Google may keep it for a limited time to detect abuse. To keep the service within its daily limit, we keep a one-way hash of the sending network for 24 hours.

Fiscal receipts and card payments

If you connect a fiscal register (Checkbox in Ukraine, Webkassa in Kazakhstan) or a bank for QR payments (monobank in Ukraine, Halyk Bank in Kazakhstan), the keys you enter stay on your phone, encrypted in the cloud like the rest of the shop. For each sale the app sends the receipt lines and the amount to that provider through our server, which passes the call on and keeps nothing. From then on the provider handles the receipt and the payment under its own privacy policy.

Buying the subscription

The subscription is bought on qiksy.app, not inside the app. The payment is taken by monobank (plata by mono); we never see the card. We keep the e-mail address, the plan, the amount and the invoice, as Ukrainian accounting law requires.

Analytics and advertising

The installed app contains no analytics, no advertising and no tracking. The web version at qiksy.app/shelf/ is counted like the rest of the site, with cookieless Google Analytics and Cloudflare Web Analytics: pages and visits, no profile of you.

Where it runs

Our server is a Cloudflare Worker, and the cloud is stored in Cloudflare Durable Objects. Cloudflare, Resend and Google process data for us only to provide these services. We sell nothing to anyone.

Deleting your account

In the app: Settings → Stock in the cloud → Delete account. The same button is in the web version after you sign in. If you are the owner, the shop is deleted from the cloud for good, with its records, its sellers and its subscription. If you are a seller, you leave the shop and your address is deleted. Nobody, us included, can restore a deleted shop. You can also write to [email protected] from the address you sign in with, and we delete the account within 30 days. Payment records stay for as long as the law requires.

Children

Qiksy Shelf is a tool for shops and is not meant for children.

Changes to this policy

A change moves the date at the top. If the app ever starts sending something new, this page says so before the update ships.