Privacy Policy

• Photos, videos, stamps and reports are created and stored on your iPhone. Stampzy has no server of its own and no account; we never receive your photos or your location.
• Location is used only to print the address and coordinates on the stamp. Commune/ward and province are worked out on the device from boundary data bundled with the app.
• When online, coordinates may be sent to Apple's location services for the house number and street, and the app reads the time from a few public web servers to check the clock. The time requests carry none of your data.
• Stampzy has no advertising, no crash-reporting SDK, no advertising ID and does not track you across other apps.
• Anonymous usage statistics (which screens and features are used) go to Google Analytics for Firebase to help us improve the app. They never include your photos, location coordinates, addresses or anything you type, and you can turn them off in Settings › Privacy.
• Third parties that receive data from the app: RevenueCat, which handles Stampzy Pro purchases with an anonymous ID, and Google (Firebase), which processes the usage statistics.

• Camera: to take photos and record video. Camera frames are processed on the device and sent nowhere.
• Microphone: only to record sound for stamped videos. Audio stays on the device.
• Location (while using the app): to print the address, coordinates, altitude and GPS accuracy on the stamp. Stampzy does not track your location when the app is not in use and keeps no history of your movements.
• Photos (add only): to save stamped photos and videos to the Photos app if you turn that option on. This permission only allows adding; it does not let Stampzy read your photo library.

To stamp existing photos, you choose them in the iOS photo picker and Stampzy receives only the photos you pick. You can revoke any permission in Settings › Stampzy; the parts of the app that do not need it keep working.

Photos, videos, reports, templates, the text you type (such as your name, project or order code) and settings are stored in Stampzy's private storage on your iPhone. If you turn on saving to Photos, a copy is added to your library and from then on follows your iOS settings (including iCloud Photos, if you use it).

We run no servers of our own and hold no copy of your photos, location or anything you type.

In Vietnam, the commune/ward and province/city are worked out on your iPhone by matching the GPS coordinates against administrative boundary data bundled with the app, with no connection needed.

When online, Stampzy may use Apple's reverse geocoding service to add the house number and street, and to get the address when you are outside Vietnam. The coordinates are then sent to Apple under Apple's privacy policy. We do not receive these requests.

To show the “Verified time” label, Stampzy sends HEAD requests to a few large public web servers (currently apple.com, google.com and cloudflare.com) and reads the time in the response. These requests contain no photos, no location and nothing you type; like any network connection, the server sees the device's IP address.

The photo code is computed on the device from the time, coordinates and image content, and printed on the photo itself. It is not sent anywhere.

Stampzy uses RevenueCat, Inc. to manage Stampzy Pro purchases. When the app starts and when you buy or restore a purchase, the RevenueCat SDK sends to its servers:

• An anonymous app user ID generated by RevenueCat — not your name, email or Apple ID.
• Your Stampzy Pro purchase history and subscription status, from the App Store receipt.
• Technical details needed to validate the purchase, such as the app version, iOS version and App Store country.

This is used only to determine whether you have unlocked Pro. RevenueCat receives no photos, location or anything you type. Payment is handled by Apple; we never see your card details.

From version 1.0.1, Stampzy uses Google Analytics for Firebase, a service of Google LLC / Google Ireland Limited, to count how the app is used so we can improve it — for example how many people finish onboarding, which templates and features are used, and how often the Pro screen is opened and a purchase succeeds. Google processes this data on our behalf under the Google Analytics for Firebase terms. Google's privacy policy: https://policies.google.com/privacy

What is collected: app interactions (screens opened and features used, such as “photo taken with the Construction template”, “report created with 2–5 photos”, “paywall opened”), the built-in template key in use (any template you made or imported is recorded only as “custom”), whether Pro is active and the app language, sessions and first launch, purchases made through the App Store (product and price), device model, iOS and app version, a coarse location (country/region) that Google derives from the masked IP address, and a random app-instance ID generated by the SDK for this installation.

What is never collected: your photos, videos or reports, GPS coordinates, addresses, commune/province, the notes, names, project names or template names you type, photo codes, file names, contacts, your IP address as such, and the advertising identifier (IDFA). Stampzy does not link this data to your identity, does not use it for advertising and does not track you across other companies' apps or websites; Google signals and advertising features are turned off.

Retention: event data is kept for 2 months (the Google Analytics default), then deleted.

Turning it off: Settings › Privacy › “Share anonymous usage statistics” in the app. When it is off, the app stops sending these statistics.

Stampzy embeds no crash-reporting or advertising SDK, never reads the advertising identifier (IDFA), shows no App Tracking Transparency prompt because it does not track you, and does not track you across other apps or websites. The only analytics is the anonymous usage statistics described above. This website does not use analytics or tracking cookies.

Apple may provide developers with aggregated, anonymous statistics (such as download counts) through App Store Connect, and crash reports only if you have turned on “Share With App Developers” in iOS settings. These reports contain none of your photos or locations.

If this changes, this policy and the App Store privacy label will be updated before that build ships.

When you share a photo, video or report through the iOS share sheet (for example to Zalo, Mail or AirDrop), the file goes straight to the app you choose and is subject to that app's policy. The stamp shows the time, address, coordinates and text lines you enabled — check it before sending it to anyone.

When you email support, the email goes through your Mail app.

You are responsible for what you photograph. Respect other people's privacy and image rights, and follow the rules of the place where you work.

Stampzy is a work tool for adults, not directed to children and not in the App Store's Kids category. We do not knowingly collect personal information from children under 13 (or the equivalent age where you live), and in practice receive no user data beyond what is described in the RevenueCat and usage-statistics sections.

Usage statistics are kept by Google Analytics for 2 months. Everything else stays on the device until you delete it. You can delete individual photos in the app, and deleting the app removes everything in Stampzy's private storage. Copies already added to Photos or shared elsewhere are not removed; manage those in the Photos app.

Because there is no account and we hold none of your data, there is no record on our side to access, correct or delete — you have full control directly on your device. Usage statistics are tied only to a random app-instance ID; turn them off in Settings, and deleting the app resets that ID. If you would like RevenueCat to delete the anonymous ID associated with your purchase, or have a question about the statistics, email us.

When this policy changes, the date at the top of the page changes with it. Material changes will be mentioned in the App Store release notes.