Privacy Policy

1. Who we are

stamprr. (the "app") is made by Ramin Udash, Bildungscampus 11, 74076 Heilbronn, Germany ("we", "us"). We are the controller of the personal data described here. You can reach us at airpostapp@gmail.com.

This policy covers the stamprr. app for iPhone and the services that back it up. It applies whether or not you create an account.

2. Data that stays on your phone

Everything you make in stamprr. is saved on your phone first, inside the app's private storage:

• the photos you take or choose, cropped to the stamp, and the finished stamp images;
• each stamp's name, date, album, style and, if location tagging is on, where it was made;
• your scrapbook pages, machine designs, saved posts and settings.

We cannot see this data. It is removed when you delete a stamp or delete the app. When you save a stamp, post or print sheet to Photos or share it, the copy goes where you send it and is no longer controlled by stamprr.

To show a place name on a stamp, the app sends the stamp's coordinates to Apple's location service, and the Map tab loads map tiles from Apple Maps. Apple handles those requests under Apple's privacy policy.

3. Your account and backup

An account is optional. When you are signed in, the app backs up your stamps automatically so you can restore them on another phone; you can turn this off with the Save to cloud switch in Profile. When you create an account, we collect:

Saved posts are not backed up yet; they stay on your phone. We do not look at your photos or stamps, use them to train any model, or share them with anyone except the storage providers listed in section 9.

4. Usage analytics

We use Mixpanel to understand how the app is used, for example which features are opened, where people get stuck, and how many people start a free trial. This helps us fix problems and decide what to improve. Analytics are optional and off until you agree.

When we ask

The app asks once, after you save your first stamp. Until you answer, the events of that first visit are kept in a small file on your phone and nothing is sent. If you choose Share usage data, they are sent with the times they happened. If you choose Not now, they are deleted. You can change your answer at any time with the Share usage data switch in Profile.

What is sent

• the action, such as "stamp saved", "paywall viewed" or "purchase completed", with details like the screen, plan or album count, and the time;
• a few facts about how you use the app: free or Premium, signed in or not, number of stamps, whether backup is on, and when you made your first stamp;
• your app version, device model, iOS version, language, and an approximate country and city that Mixpanel works out from your IP address (the IP address itself is not stored);
• a random ID created by the app, and, if you are signed in, your stamprr. account ID, so your use is counted once across your phones.

Analytics never include your photos, stamps, stamp names, precise location, name or email. We do not combine them with data from other companies, use them for advertising, or track you across other apps and websites. Mixpanel stores the data in its EU data centre.

5. Subscriptions and purchases

Payments for stamprr. Premium (subscriptions and the one-time lifetime purchase) are handled by Apple through your Apple ID. We never see your card details. We use RevenueCat to check whether Premium is active on each of your devices; it receives your purchase receipts, the products you bought, and an anonymous app ID, or your stamprr. user ID, name and email if you are signed in, so Premium follows your account to your other phones.

6. Help and support

When you send a request from Profile, Help & feedback (to ask for help, report a problem, give feedback or suggest a feature), we receive:

• your message, the topic you chose and any replies in the thread;
• your email address, if you are signed out and give one so we can answer, or your account's email and user ID if you are signed in;
• app and device details, unless you switch them off before sending: app version and build, iOS version, language and region, App Store country and currency, backup status, whether you have Premium and your free uses, and your RevenueCat ID with your purchases and their status.

We use this only to answer you and fix the problem. Requests are stored with Supabase, and we may reply by email. For abuse protection the app sends at most five requests an hour from one account or email.

7. Phone permissions

The app asks for each permission only when you use the feature that needs it, and works without them.

• Camera: to take photos for stamps. Photos are processed on your phone.
• Photos: to turn photos from your library into stamps, read when and where they were taken, and save stamps and posts back to your library when you ask.
• Location, while using the app: to tag new stamps with where you made them. You can turn this off in Profile; the app never tracks your location in the background.

8. How and why we use data

We use personal data only for the purposes above. If you are in the European Economic Area, the UK or Switzerland, our legal bases are:

• Performing our contract with you (Art. 6(1)(b) GDPR): running your account, backup and restore, Premium, and answering your support requests.
• Your consent (Art. 6(1)(a) GDPR, and § 25(1) TDDDG for reading and storing information on your phone): usage analytics. You can withdraw consent at any time in Profile; this does not affect what was sent before.
• Our legitimate interests (Art. 6(1)(f) GDPR): keeping the service secure, preventing abuse, and including app and device details in support requests so we can find the cause of a problem. You can object at any time, and you can leave the details out of a request.
• Legal obligations (Art. 6(1)(c) GDPR): for example keeping records of purchases where the law requires it.

We do not sell or "share" personal information as those words are defined in California law, and we do not use it for targeted advertising or automated decisions that affect you.

9. Service providers

We use these companies to run stamprr. Each may process data only on our instructions and for the purpose listed.

We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of stamprr., in which case this policy continues to apply to your data.

10. Where data is stored

Account and backup details are stored by Supabase in the European Union (Ireland). Backed-up images are stored by Cloudflare, which may keep them in data centres outside your country. Mixpanel stores analytics in the EU. Some providers, such as RevenueCat and Mixpanel, are companies based in the United States and may access data from there. Where data leaves the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.

11. How long we keep it

• Data on your phone: until you delete it or the app.
• Backed-up stamps: until you delete them, or delete your account. Deleting a stamp on one phone removes it from the backup at the next sync.
• Your account: until you delete it. Deleting your account removes your profile, backup details and images straight away; copies in our providers' encrypted backups are erased within 30 days.
• Analytics: up to 24 months, then deleted or fully aggregated. Events waiting on your phone for your answer are deleted if you say no.
• Support requests: up to 2 years after the last message, so we can help if a problem comes back. They are kept, without the link to your account, if you delete your account; ask us and we delete them sooner.
• Purchase records: as long as the law requires.

12. Your rights and choices

Depending on where you live, you have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to how we use it, and withdraw consent. In the app you can:

• delete your account and its backup: Profile, Delete account;
• change your name in Profile;
• turn off location tagging, backup (Save to cloud) and analytics (Share usage data) in Profile;
• change camera, photos and location access in your iPhone's Settings.

For anything else, such as a copy of your data, email us at airpostapp@gmail.com. We reply within 30 days. You may also complain to a data protection authority, for example where you live or, for us, the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

13. Children

stamprr. is not directed at children under 13, and accounts are not available to anyone under 13, or under 16 where local law sets that age. If you believe a child has given us personal data, contact us and we will delete it.

14. Security

Data travels over encrypted connections (HTTPS). Each account can read only its own backup: the database checks every request against the signed-in user, and images are reached only through a service that verifies your sign-in. No system is perfectly secure, so we also keep the data we hold to the minimum the app needs.

15. Changes to this policy

If we change this policy, we will update the effective date above. If a change is significant, we will tell you in the app before it takes effect.

16. Contact

Questions or requests about your privacy: airpostapp@gmail.com, or write to Ramin Udash, Bildungscampus 11, 74076 Heilbronn, Germany.