What we collect
and why.
Stack is a tool, not a platform. We collect what's necessary to make the app work and nothing else.
Last updated: 31 March 2025
Who we are
Stack is an independent app. When this policy says "we", "us", or "our", it means Stack. Questions about this policy can be sent to support@getstackapp.xyz.
What we collect
We collect only what's needed to provide the service.
| Data | Source | Why |
|---|---|---|
| User ID | Apple Sign In | Identifies your account. Never exposed to third parties. |
| Email address | Apple Sign In (may be a relay address if you chose to hide it) | Account recovery and support communication only. |
| Protocol data | Created by you in the app | Your blocks, steps, schedules, and notes. This is the product. |
| Completion logs | Your check-ins in the app | Powers the Insights view and log history. Stored server-side so it persists across devices. |
We do not collect device identifiers, location, contacts, health data, or any information beyond what is listed above. We do not use analytics SDKs or crash reporting services.
How we use it
- To provide and sync your protocols across your devices
- To show you your completion history in the Insights view
- To respond to support requests you initiate
- To maintain and improve the app
We do not use your data to serve ads. We do not build profiles. We do not sell or share your data with any third party for marketing purposes.
Where it's stored
Your data is stored on Supabase, a managed database platform hosted on AWS infrastructure. Supabase is SOC 2 Type II compliant. Data is encrypted in transit (TLS) and at rest.
Supabase may store data in the United States or other regions depending on infrastructure configuration. By using Stack, you consent to this transfer.
Supabase's privacy policy is available at supabase.com/privacy.
Third-party sign-in
Stack uses Sign in with Apple for authentication. When you sign in, Apple shares a user identifier and optionally your name and email with us. You may choose to hide your email, in which case Apple provides a relay address instead.
We are adding Sign in with Google. When available, Google will share your name and email address upon sign-in. This policy will be updated when Google login launches.
We do not receive your Apple or Google passwords. Authentication tokens are managed by Supabase Auth and are not accessible to us in plaintext.
Your rights
You can:
- Access your data — email support@getstackapp.xyz and we'll provide a full export
- Delete your account — go to Settings in the app and tap Delete Account. This permanently and irreversibly removes your account and all associated data from our servers
- Correct your data — protocols and steps can be edited directly in the app. For account-level corrections, email us
Requests are handled within 30 days. Deletion requests are typically processed within 7 days.
Children
Stack is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal information, contact us at support@getstackapp.xyz and we will delete it promptly.
Changes to this policy
If we make material changes, we will update the date at the top of this page. For significant changes affecting how we use your data, we will notify you through the app.