Privacy Policy
Effective date: June 16, 2026 · Last updated: June 16, 2026
StoreKaro ("we," "our," or "the service") is a self-hosted personal media storage app. This Privacy Policy explains what information we collect, how we use it, and your choices.
1. What we collect and why
| Data | Why we collect it | Where it is stored |
|---|---|---|
| Email address | Account creation, login, and account recovery | Our cloud server (api.storekaro.cloud) |
| Profile names | Multiple profiles on one account | Our cloud server |
| Firebase Cloud Messaging (FCM) token | Push notifications (e.g. upload complete, box status) | Our cloud server; processed by Google Firebase |
| WebRTC / TURN signaling metadata | Establishing a peer-to-peer connection between your phone and your box | Held transiently during an active session; not persisted |
| Analytics events (Firebase Analytics, Google Analytics 4) | Understanding how the app is used; measuring feature demand | Google Firebase / Google Analytics servers |
| Subscription status | Knowing whether your account has an active subscription | Our cloud server; payment processing by Razorpay (website only) |
We never store your photos or videos on our cloud server. Your media stays exclusively on your personal box (the device running the StoreKaro box software). The cloud serves only as an account and signaling layer; it never sees your media content.
2. Relay (TURN) traffic
When your phone cannot connect directly to your box (e.g. over a mobile network with
carrier-grade NAT), media bytes may be forwarded through a TURN relay server we operate at
turn.storekaro.cloud. The relay forwards encrypted bytes between your phone and
your box only during an active session; it does not inspect, store, or log your media.
Once the session ends, no data is retained on the relay.
3. Third-party services
- Firebase (Google) — push notifications (FCM) and product analytics. Google's Privacy Policy applies.
- Google Analytics 4 — web analytics on the StoreKaro marketing site.
- Razorpay — payment processing for subscriptions purchased on the website. Razorpay's Privacy Policy applies. No payment data is processed within the Android app.
- Google STUN servers — used as fallback ICE candidates for peer-to-peer connectivity.
4. Data retention and deletion
Your account data (email, profiles, FCM token) is retained until you delete your account. To delete your account and all associated cloud data, contact us at gqliptv@gmail.com.
Unpairing your box removes the box–account link on the cloud. Your media files on the box are under your full control and are never modified or deleted by us.
5. Security
Account passwords are stored as bcrypt hashes (never in plaintext). Communications between the mobile app and the cloud use HTTPS/TLS. Media transferred over the peer-to-peer relay is encrypted in transit.
6. Children's privacy
StoreKaro is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.
7. Changes to this policy
We may update this policy as the service evolves. We will post the updated policy here and, where appropriate, notify you through the app. Your continued use after changes constitutes acceptance.
8. Contact us
MCBS Pvt. Ltd.Ahmedabad, India
Email: gqliptv@gmail.com