Privacy Policy

Last updated: December 13, 2025

This Privacy Policy describes how Stckzy ("we", "us", or "our") collects, uses, and shares information about you when you use our mobile application ("App").

Data Controller

Stckzy is the data controller responsible for your personal data. For privacy inquiries, contact us at: support@stckzy.app

We do not currently have a Data Protection Officer (DPO) as we are a small business that does not process large-scale sensitive data.

Information We Collect

Information You Provide:

• Photos and Images: When you use our App to create stickers, you may upload photos or images. These images are processed by our AI system to generate stickers.
• Text Prompts: Descriptions you provide to guide sticker generation.

Automatically Collected Information:

• Device Information: We collect information about your device, including device type, operating system version, and unique device identifiers.
• Usage Data: Information about how you use the App, including features used and actions taken.
• Anonymous User ID: We create an anonymous identifier to associate your sticker packs with your device. This ID does not contain any personal information.

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the App services you requested (generating stickers, storing packs)
• Legitimate Interest: Analytics and service improvement, fraud prevention, and security
• Legal Obligation: Compliance with applicable laws and regulations

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Process your images to generate AI stickers
• Store your sticker packs for access across sessions
• Process payments for subscription services
• Respond to your requests and support inquiries
• Analyze usage patterns to improve user experience

Data Storage and Retention

Your uploaded images are processed by our AI system and stored temporarily during generation. Generated sticker packs are stored in our cloud infrastructure (Supabase) and associated with your anonymous user ID.

Retention Periods:

• Uploaded images: Deleted within 24 hours after sticker generation is complete
• Generated sticker packs: Retained until you delete them or delete your account
• Account data: Retained while your account is active; deleted upon account deletion request
• Payment records: Retained as required by law (typically 7 years for tax purposes)

You can delete your sticker packs at any time through the App. When you delete a pack, all associated images are permanently removed from our servers.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers (Supabase, OpenAI, RevenueCat) operate. These transfers are necessary to provide our services.

For transfers from the European Economic Area (EEA), we rely on:

• Standard Contractual Clauses approved by the European Commission
• Service providers' compliance with applicable data protection frameworks

Third-Party Services

We use the following third-party services:

• Supabase: For user authentication and data storage
• RevenueCat: For subscription and payment processing
• Apple App Store: For app distribution and in-app purchases
• OpenAI: For AI-powered sticker generation

Each of these services has their own privacy policies governing their use of your data.

Data Sharing

We do not sell your personal information. We may share information:

• With service providers who assist in operating our App
• To comply with legal obligations
• To protect our rights and prevent fraud
• With your consent or at your direction

Your Rights

For All Users:

• Access your data stored in the App
• Delete your sticker packs and associated data
• Request information about what data we have collected

Additional Rights for EEA Residents (GDPR):

• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

California Residents (CCPA/CPRA):

• Right to Know: Request disclosure of personal information collected about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Do Not Sell My Personal Information: We do not sell, rent, or trade your personal information to third parties for monetary consideration. We do not share your personal information for cross-context behavioral advertising.

To exercise any of these rights, contact us at: support@stckzy.app

Children's Privacy

Our App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet is 100% secure.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Stckzy
Email: support@stckzy.app

We will respond to your request within 30 days (or sooner as required by applicable law).