Privacy Policy

Last Updated: October 1, 2026

This Privacy Policy explains how Kunatic, the sole proprietorship of Kunal Biswas, operating the TheStampO mobile application (Android and iOS) (collectively, the "Platform"), collects, uses, discloses, and protects your information. This Policy applies equally to users on Android and iOS.

By using the Platform, you consent to the practices described in this Policy.

1. Information We Collect

1.1 Information from Your Sign-In Provider

New TheStampO accounts are created only through Sign in with Google or Sign in with Apple (Apple sign-in is available on iOS). The app does not offer a separate sign-up form, and we do not offer phone-number sign-in. We never see or store your Google or Apple password. Depending on the provider you choose, we receive:

• Google — your name, email address, and profile photo, as shared by your Google account
• Apple — your name (Apple shares it only the first time you sign in, and only if you choose to) and your email address. If you use Apple's "Hide My Email" option, we receive an Apple private relay address instead of your real email address
• An account identifier — a unique ID linking your TheStampO account to your Google or Apple sign-in

1.2 Email and Password (Optional)

Once your account exists, you can choose to set a password in the app (Account → Change password). You can then also log in with your account email address and that password. If you do:

• Your password is stored by our authentication provider (Supabase) only in a securely hashed form. We never see or store it in plain text
• You can change your account email address (Account → Change email). We may send a confirmation link to the new address before the change takes effect
• We use your email address to send account messages you request, such as password-reset and email-confirmation links

1.3 Information You Create in the App

• Your stamps — photos you capture with your camera or select from your photo gallery, which TheStampO converts into stamps
• Stamp details — notes you add, the collections you create and their names, favourites, and the date each stamp was made
• Location tag (optional) — your approximate location (coordinates and a place name such as "Chennai, Tamil Nadu"), only when you explicitly tap the location button on a stamp
• Communications you send to us, including support requests and feedback

1.4 Information Collected Automatically

• Temporary session — when you first open the app, a temporary, anonymous session identifier is created with our backend provider so the app can work before you sign in. It contains no name, email, or contact details
• Sign-in and session data — sign-in timestamps and session tokens needed to keep you signed in securely
• Server logs — like most online services, our backend provider may record your IP address and basic request details (such as time and device type) when the app connects to our servers, for security and reliability
• Notification data — streak and reminder notifications are scheduled on your device. Your device may generate a push notification token through Expo, Apple, or Google; it is currently stored only on your device and is not sent to our servers

We do not use analytics, advertising, or crash-reporting SDKs, and we do not track you across other apps or websites.

1.5 Data Stored on Your Device and in the Cloud

Your stamps, collections, and app preferences are stored on your device. While you are signed in, your stamps — including a compressed copy of each photo, notes, location tags, favourites, and collections — are automatically backed up in the background to our cloud database and private file storage (provided by Supabase, see Section 3). This lets you restore your collection when you reinstall the app or sign in on another device. Each account's backups are private and can only be accessed with that account's sign-in.

2. How We Use Your Information

We use the information we collect to:

• Create, sign in to, and manage your account, including sending password-reset and email-confirmation messages
• Show your name and profile photo in the app
• Let you capture, convert, organise, and export your stamps
• Back up your stamps and collections so they can be restored on reinstall or a new device
• Deliver streak and reminder notifications
• Tag a stamp with its location, only when you explicitly ask
• Keep the Platform secure, and prevent fraud, abuse, and violations of our Terms and Conditions
• Respond to your requests and comply with legal obligations

We do not use your photos or personal information for advertising, and we do not use them to train artificial intelligence models.

3. How We Share Your Information

We do not sell or rent your personal information. We share information only with:

• Supabase — our backend provider for account authentication (including hashed passwords, if you set one), database, private file storage, and server functions. It stores your account details and your backed-up stamps on our behalf, and sends account emails such as password-reset links
• Google — if you use Sign in with Google, to authenticate you. On Android, when you tap the location button, your coordinates may be sent to your device's built-in location service to turn them into a place name
• Apple — if you use Sign in with Apple, to authenticate you. On iOS, when you tap the location button, your coordinates are sent to Apple's location service to turn them into a place name
• Expo — our app platform provider, which helps deliver notifications to your device
• Legal or regulatory authorities, where required by law, to protect our rights, or to ensure user safety
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Policy

Each provider processes information only as needed to provide its service to us, under its own privacy and data-processing terms.

Advertising and purchases: The app does not currently display advertisements or offer in-app purchases. If either is introduced in a future version, we will update this Policy before it takes effect.

4. Data Storage and Security

Data sent between the app and our servers is encrypted in transit. Your backed-up photos are kept in private storage, and access controls ensure that each account can read and change only its own stamps and collections. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Your data may be stored on servers located in India or in other countries where our service providers operate.

5. Your Rights and Choices

Depending on applicable law, including the Digital Personal Data Protection Act, 2023, you may have the right to:

• Access the personal information we hold about you, and request a copy of it by writing to us
• Correct your information. You can change your account email address and password in the app (Account). Your name and profile photo come from your Google or Apple account, so you can update them there, or contact us for help
• Delete your account at any time, directly in the app: Account → Delete account (see Section 8)
• Delete individual stamps and collections in the app, which also removes them from the cloud backup
• Disconnect TheStampO from your Google account (Google Account → Security → Third-party connections) or Apple ID (Settings → your name → Sign in with Apple)
• Withdraw permissions for camera, photos, location, or notifications at any time in your device settings
• Raise a grievance with our Grievance Officer (Section 11)

To exercise any of these rights, contact us at thestampoapp@gmail.com.

6. Device Permissions

• Camera — used only to capture a photo for a new stamp
• Photos / Media — used only to pick an existing photo to turn into a stamp, and to save a finished stamp to your gallery when you choose to export it
• Location (approximate, while using the app) — used only when you tap the location button on a stamp; never used in the background. On Android, the app cannot access precise location
• Notifications — used to deliver streak and reminder notifications
• Vibration — used for haptic feedback

The app never requests access to your microphone, contacts, or SMS messages. Denying any permission may limit the corresponding feature, but the rest of the app remains usable.

7. Children's Privacy

The Platform is intended for users aged 13 and above. We do not knowingly collect information from anyone under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

8. Data Retention and Deletion

We keep your account information and backed-up stamps for as long as your account is active. When you delete a stamp or collection in the app, it is also removed from our cloud backup.

When you delete your account (Account → Delete account), we permanently delete your account, your backed-up photos, and your stamp and collection records from our systems. Stamps already stored on your device, or saved to your photo gallery, are not removed by account deletion; you can remove them by deleting them in the app or uninstalling it. Residual copies in our providers' routine backups may persist for a limited period before being overwritten. We may keep limited information longer where required by law.

9. International Users

If you access the Platform from outside India, your information will be transferred to and processed in India and in other countries where our service providers operate, where data protection laws may differ from those in your country.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the app or by email. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

11. Grievance Officer / Contact Us

In accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and related regulations:

• Grievance Officer: Kunal Biswas
• Entity: Kunatic (operating TheStampO)
• Email: thestampoapp@gmail.com
• Location: Chennai, India (fully remote organisation)