Privacy Policy

1. Information We Collect

We collect: email address, display name, @username, and profile photo; photos, videos, captions, and comments you post; habits you create and track; device type, OS, and IP address; app usage data and session information; push notification tokens if you grant permission.

2. How We Use Your Information

We use your information to: create and manage your account; operate the Service and display your posts to followers; send transactional emails like account confirmation and password reset via Resend; send push notifications for boosts, comments, mentions, and follows; maintain and improve the Service; detect abuse and policy violations; respond to support requests. We do not sell your personal information. We do not use your information for advertising.

3. How We Share Your Information

Public accounts: your profile and posts are visible to all users and may appear in Discover. Private accounts: your content is only visible to approved followers. Your display name, @handle, profile photo, and follower/following counts are always visible to other users. We share data only with: Supabase (database and authentication, United States), OpenAI (automated content-safety analysis of photos and video thumbnails you post, United States), Resend (transactional email, United States), Cloudflare (content delivery and DDoS protection, United States), and Lovable Cloud (application hosting, United States). When you download Stack43 from the Apple App Store, Apple may collect certain information governed by Apple's privacy policy. We may disclose information if required by law.

4. Data Retention

We retain your data while your account is active. When you delete your account, we immediately delete your profile, habits, rest day records, comments, follows, and personal data. Your posts are anonymized (author replaced with "Deleted User," captions cleared) and remain visible to preserve other users' experiences and the integrity of conversation threads. Server backups containing your data are retained for up to 30 days for disaster recovery purposes, after which they are permanently deleted.

5. Children's Privacy

The Service is for users 13 and older. We do not knowingly collect data from children under 13. If you believe we have such data, contact us at support@stack43.com.

6. Security

We use industry-standard security measures via Supabase infrastructure. No method of internet transmission is 100% secure.

7. Your Rights

You can view and edit your account info in app settings; delete posts or your account at any time; disable push notifications through your device settings; contact us to exercise any additional data rights.

8. Cookies and Tracking

We use standard session tokens to keep you logged in. We do not use advertising cookies or third-party tracking.

9. Changes

We may update this policy and will notify you of material changes via email or in-app notification.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell your information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@stack43.com. We will respond within 45 days.

11. European Users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

The legal bases for processing your data are: (a) your consent, (b) performance of our contract with you, and (c) our legitimate interests in operating and improving the Service. Data is transferred to and processed in the United States; we rely on Standard Contractual Clauses for these transfers.

To exercise your rights, contact us at support@stack43.com.

12. Contact

Stack43 LLC | support@stack43.com | stack43.com