Our Commitment: Your privacy is important to us. StampScan is designed with privacy in mind - your collection data is stored locally on your device, and we only collect what's necessary to provide our service.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address and display name when you create an account
- Stamp Images: Photos you upload for identification (processed and not permanently stored on our servers)
- Support Requests: Information you provide when contacting customer support
1.2 Automatically Collected Information
- Device Information: Device type, operating system, and app version
- Usage Data: Features used, scan frequency, and app performance metrics
- Crash Reports: Technical data when the app encounters errors
1.3 Information We Do NOT Collect
- Your location data
- Contacts or address book
- Financial information (payments processed by App Store/Google Play)
- Your collection data (stored locally on your device)
2. How We Use Your Information
| Data Type | Purpose | Retention |
|---|---|---|
| Account Email | Account management, important notifications | Until account deletion |
| Stamp Images | AI identification processing | Deleted after processing (< 24 hours) |
| Usage Analytics | Improve app features and performance | Aggregated, 12 months |
| Crash Reports | Bug fixes and stability improvements | 90 days |
3. Data Storage & Security
Local Storage: Your stamp collection, including images, identification results, and valuations, is stored locally on your device. This data never leaves your device unless you explicitly choose to export it.
Cloud Processing: When you scan a stamp, the image is securely transmitted to our servers for AI processing, then immediately deleted after results are returned.
Security Measures:
- All data transmissions are encrypted using TLS 1.3
- Server infrastructure hosted on secure cloud providers
- Regular security audits and penetration testing
- No permanent storage of your stamp images
4. Third-Party Services
We use the following third-party services:
- OpenAI: AI image processing for stamp identification
- RevenueCat: Subscription management
- Firebase: Authentication and crash reporting
- Apple/Google: App distribution and payment processing
Each service has its own privacy policy. We only share the minimum data necessary for these services to function.
5. Your Rights & Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your account information
- Deletion: Delete your account and associated data
- Export: Export your collection data in standard formats
- Opt-out: Disable analytics in app settings
To exercise your rights: Go to Profile → Settings → Privacy, or email us at privacy@stampscan.app
6. Children's Privacy
StampScan is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately.
7. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses for EU data transfers
- Compliance with applicable data protection laws
- Data processing agreements with all third-party providers
8. Cookie Policy
Our mobile app does not use cookies. Our website uses minimal cookies for:
- Essential functionality (session management)
- Analytics (can be disabled)
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through:
- In-app notification
- Email (for registered users)
- Updated "Last modified" date on this page
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices:
Email: privacy@stampscan.app
Support: support@stampscan.app
Response Time: We aim to respond to all privacy-related inquiries within 48 hours.
11. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising privacy rights
12. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have additional rights:
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your data is: (1) your consent, (2) performance of our contract with you, and (3) our legitimate business interests.