Privacy Policy

• Photos, videos, stamps and reports are created and stored on your iPhone. Stampzy has no account, and no server of ours receives your photos or your location — the only thing that reaches us is feedback you choose to send (see “Feedback you send us”).
• Location is used only to print the address and coordinates on the stamp. Commune/ward and province are worked out on the device from boundary data bundled with the app.
• When online, coordinates may be sent to Apple's location services for the house number and street, and the app reads the time from a few public web servers to check the clock. The time requests carry none of your data.
• Stampzy has no advertising, no advertising ID and does not track you across other apps.
• Anonymous usage statistics (which screens and features are used) go to Google Analytics for Firebase, and anonymous crash reports go to Firebase Crashlytics, to help us improve the app. They are part of how the app works and are sent automatically; there is no setting to turn them off. They never include your photos, location coordinates, addresses or anything you type, and are not linked to your identity.
• Third parties that receive data from the app: RevenueCat, which handles Stampzy Pro purchases with an anonymous ID, and Google (Firebase), which processes the usage statistics and crash reports. Feedback you choose to send is stored with Supabase and forwarded to the developer's Telegram.

• Camera: to take photos and record video. Camera frames are processed on the device and sent nowhere.
• Microphone: only to record sound for stamped videos. Audio stays on the device.
• Location (while using the app): to print the address, coordinates, altitude and GPS accuracy on the stamp. Stampzy does not track your location when the app is not in use and keeps no history of your movements.
• Photos (add only): to save stamped photos and videos to the Photos app if you turn that option on. This permission only allows adding; it does not let Stampzy read your photo library.

To stamp existing photos, you choose them in the iOS photo picker and Stampzy receives only the photos you pick. You can revoke any permission in Settings › Stampzy; the parts of the app that do not need it keep working.

Photos, videos, reports, templates, the text you type (such as your name, project or order code) and settings are stored in Stampzy's private storage on your iPhone. If you turn on saving to Photos, a copy is added to your library and from then on follows your iOS settings (including iCloud Photos, if you use it).

We hold no copy of your photos, your location or the text you enter for stamps and reports. Our only backend receives feedback you choose to send (see “Feedback you send us”).

In Vietnam, the commune/ward and province/city are worked out on your iPhone by matching the GPS coordinates against administrative boundary data bundled with the app, with no connection needed.

When online, Stampzy may use Apple's reverse geocoding service to add the house number and street, and to get the address when you are outside Vietnam. The coordinates are then sent to Apple under Apple's privacy policy. We do not receive these requests.

To show the “Verified time” label, Stampzy sends HEAD requests to a few large public web servers (currently apple.com, google.com and cloudflare.com) and reads the time in the response. These requests contain no photos, no location and nothing you type; like any network connection, the server sees the device's IP address.

The photo code is computed on the device from the time, coordinates and image content, and printed on the photo itself. It is not sent anywhere.

Stampzy uses RevenueCat, Inc. to manage Stampzy Pro purchases. When the app starts and when you buy or restore a purchase, the RevenueCat SDK sends to its servers:

• An anonymous app user ID generated by RevenueCat — not your name, email or Apple ID.
• Your Stampzy Pro purchase history and subscription status, from the App Store receipt.
• Technical details needed to validate the purchase, such as the app version, iOS version and App Store country.

This is used only to determine whether you have unlocked Pro. RevenueCat receives no photos, location or anything you type. Payment is handled by Apple; we never see your card details.

From version 1.0.1, Stampzy uses Google Analytics for Firebase, a service of Google LLC / Google Ireland Limited, to count how the app is used so we can improve it — for example how many people finish onboarding, which templates and features are used, and how often the Pro screen is opened and a purchase succeeds. Google processes this data on our behalf under the Google Analytics for Firebase terms. Google's privacy policy: https://policies.google.com/privacy

What is collected: app interactions (screens opened and features used, such as “photo taken with the Construction template”, “report created with 2–5 photos”, “paywall opened”), the built-in template key in use (any template you made or imported is recorded only as “custom”), whether Pro is active and the app language, sessions and first launch, purchases made through the App Store (product and price), device model, iOS and app version, a coarse location (country/region) that Google derives from the masked IP address, and a random app-instance ID generated by the SDK for this installation.

What is never collected: your photos, videos or reports, GPS coordinates, addresses, commune/province, the notes, names, project names or template names you type, photo codes, file names, contacts, your IP address as such, and the advertising identifier (IDFA). Stampzy does not link this data to your identity, does not use it for advertising and does not track you across other companies' apps or websites; Google signals and advertising features are turned off.

Retention: event data is kept for 2 months (the Google Analytics default), then deleted.

These statistics are sent automatically whenever the app is used; the app has no setting to turn them off. Earlier builds had a “Share anonymous usage statistics” switch in Settings — it has been removed, and a choice made with it no longer applies.

Stampzy uses Firebase Crashlytics, a service of Google LLC / Google Ireland Limited, so that when the app crashes we learn where in the code it happened and can fix it. Google processes this data on our behalf under the Firebase terms. Google's privacy policy: https://policies.google.com/privacy

What a crash report contains: the stack trace (where in Stampzy's code the crash happened), for a crash in the app's JavaScript its error message, the time of the crash, device model, iOS and app version, free memory and disk space, device orientation, and a random installation ID generated by Crashlytics.

What is never in a crash report: your photos, videos or reports, GPS coordinates, addresses, the notes, names or anything else you type, photo codes, file names, contacts and the advertising identifier (IDFA). Stampzy attaches no user ID, no custom data and no logs to crash reports, and does not link them to your identity.

Retention: crash reports are kept for 90 days, then deleted.

Crash reports are sent automatically; like the usage statistics, there is no setting to turn them off.

Stampzy embeds no advertising SDK, never reads the advertising identifier (IDFA), shows no App Tracking Transparency prompt because it does not track you, and does not track you across other apps or websites. The only analytics are the anonymous usage statistics and crash reports described above. This website does not use analytics or tracking cookies.

Apple may provide developers with aggregated, anonymous statistics (such as download counts) through App Store Connect, and crash reports only if you have turned on “Share With App Developers” in iOS settings. These reports contain none of your photos or locations.

If this changes, this policy and the App Store privacy label will be updated before that build ships.

When you share a photo, video or report through the iOS share sheet (for example to Zalo, Mail or AirDrop), the file goes straight to the app you choose and is subject to that app's policy. The stamp shows the time, address, coordinates and text lines you enabled — check it before sending it to anyone.

When you email support, the email goes through your Mail app.

You are responsible for what you photograph. Respect other people's privacy and image rights, and follow the rules of the place where you work.

Stampzy has an optional “Feedback & bug report” form. Nothing is sent unless you open it and tap Send — the app never sends feedback on its own.

When you tap Send, we receive:

• The message you type.
• Your email address, only if you enter one — used only to reply to you.
• A screenshot, only if you attach one.
• Your app version, iOS version, device type (iPhone or iPad) and app language.
• A random install identifier generated by the app. It is not linked to your Apple ID or any account, and is used only to limit spam.

Feedback is stored on our own backend, hosted by Supabase in Singapore (ap-southeast-1), and a notification with your message is forwarded to the developer's private Telegram chat. Your network IP address is kept only as a one-way hash, for at most one hour, to rate-limit submissions.

Feedback is never used for tracking, advertising or analytics, never sold or shared, and not linked to your identity.

We keep feedback until the issue is handled, then delete it; any screenshot is deleted along with the message. To have anything you sent deleted, email vanthuong.dao2004@gmail.com with roughly when you sent it and what it said (or the email address you used).

Stampzy is a work tool for adults, not directed to children and not in the App Store's Kids category. We do not knowingly collect personal information from children under 13 (or the equivalent age where you live), and in practice receive no user data beyond what is described in the RevenueCat, usage-statistics, crash-report and feedback sections.

Usage statistics are kept by Google Analytics for 2 months, crash reports by Firebase Crashlytics for 90 days. Feedback you send is kept until the issue is handled, then deleted. Everything else stays on the device until you delete it. You can delete individual photos in the app, and deleting the app removes everything in Stampzy's private storage. Copies already added to Photos or shared elsewhere are not removed; manage those in the Photos app.

Because there is no account and we hold none of your photos or app data, there is no record of them on our side to access, correct or delete — you have full control directly on your device. Usage statistics and crash reports are tied only to random IDs generated for this installation; deleting the app resets them. If you would like RevenueCat to delete the anonymous ID associated with your purchase, or have a question about the statistics or crash reports, email us. The only thing we may hold is feedback you chose to send; email vanthuong.dao2004@gmail.com to have it deleted.

When this policy changes, the date at the top of the page changes with it. Material changes will be mentioned in the App Store release notes.

This website, not the app, uses Google Analytics 4 to count visits and to see which pages and links are used, so the site can be improved. Google processes this data on our behalf as a service provider.

What is collected: the pages you open, the site you came from, clicks on links that leave this site (such as the App Store button), and coarse device, browser, language and country or region information. Google Analytics sets first-party cookies in your browser to tell one visit from another.

What is never collected: your name, your email address, or anything you type on this site. This data is not used for advertising and is not shared with data brokers.

The photo and template link pages (/p and /t) are not measured at all: their content sits in the part of the link after the #, which never reaches us or Google.

Google Analytics keeps this event data for 2 months (its default retention) and then deletes it. To opt out, block Google Analytics with a browser extension or turn off cookies for this site; the website and the app keep working. This section covers the website only; the app is covered in the sections above.

Google's own privacy policy: https://policies.google.com/privacy