Privacy Policy

Stuckie (“we”) makes and runs the Stuckie app and stuckie.app. Send any question about your data to support@stuckie.app.

• An anonymous device key. The first time you open the app, your phone creates a random key and keeps it in the Keychain. Our server stores only a hash of that key to recognise you when you sign in, along with your sign-in sessions.
• Moving phones and recovery (from version 1.3.0): the list of phones on your account (model such as “iPhone 17 Pro”, iOS or Android, when it was added and last used) and a log of account changes — moving to a new phone, making a recovery key, pending requests, cancelling, taking the account back — with the time and a shortened IP address (only the first part, for example 203.0.113.0/24: enough for you to spot “that wasn’t me”, not enough to locate you), kept for about a year. The recovery key you keep and the recovery secret the app keeps in your iCloud Keychain or Google backup are stored only as hashes. When your partner confirms a new phone for you, we record who confirmed and when.
• Your shared xu (from version 1.3.0): you two’s shared xu balance and every change — who earned it (solving the daily puzzle, finishing a game, a milestone) or what it was traded for, and when — and every chest open: who opened it, which item came out, whether it was a duplicate, the guarantee counter, whether your couple was on the free plan or Stuckie Pro, and when. Xu can only be earned in the app; they can’t be bought with money or cashed out.
• Referral code (from version 1.3.0, only if you enter one): the code of whoever introduced you to Stuckie — for example a creator we work with — how you entered it (typed in the app or by opening their link) and when. If you two pair up, we credit your couple to that person along with when you paired, and after a week we note whether you're both still using the app. Opens of the stuckie.app/r/… page are only counted per day; nothing is stored about the person opening them.
• An anonymous account ID. Our server gives you a random account ID, separate from your device key. Everything you create, and any purchase, is linked to it. We also store when your account was created and when you last signed in, plus the platform (iOS or Android) and app version each time you sign in — so we know when an old version can stop being supported.
• Your in-app profile: display name (up to 20 characters), the character you picked (Stu or Kie) and its look (hairstyle or headscarf, skin tone), the app language, your birthday if you add it (day, month and year — the year is only used to show you the age you're turning and to check you're 13 or older), whether your partner has asked you to add it, and whether holiday decorations are on.
• Your couple: the day you got together, invite codes, and when you paired and unpaired.
• What you two create: photos you send (including anything you draw on them), the text on them (up to 40 characters), which photo they reply to and their size; when they were sent, seen and loved; your Miss you taps and when they were seen; shopping asks (item, quantity, category, urgency, note, a photo and its size if you attach one, price if you enter one, status and when each step happened); your bucket lists (list names, each item, its note and when you'd like to do it, who added it, who ticked it off and when, memory photos); Stu & Kie's wardrobe (items you've received, who opened each holiday gift and when, what each of your characters is wearing).
• How you arrange the app: the order and size of the tiles on Home and Together. Only you see this.
• A widget key: on iPhone the app creates a separate key for the widget and keeps it on your phone; our server stores only a hash of it and when it was last used. It can only read what the widgets show (your two latest photos, your two names, your start date and upcoming dates, your bucket list, open shopping asks) and send up the widget’s push token; it can’t change anything else.
• For notifications (if you allow them): your device push tokens (one for the app, one so widgets can update themselves), time zone and language (so notifications arrive at the right time, in the right language), the region set on your phone (so holiday notices match where you are, like Lunar New Year) and the app version, which kinds you turned on or off and your quiet hours, and a record of notifications and celebrations already sent so you don’t get duplicates.
• If you buy Stuckie Pro or a holiday pack: the purchase is linked to your anonymous account ID (not your device key); we store what you bought, and for Stuckie Pro also its expiry date, whether it's a free trial and whether it renews. Apple handles the payment: Stuckie never sees your card or Apple ID.
• Survey answers (if you answer): the features you pick and anything you write. Only the Stuckie team reads them, to decide what to build next; your partner doesn’t see them.
• How you use the app (from version 1.2.1, through PostHog): what you do in the app, as labels and counts — for example which onboarding steps you've finished, whether you've paired, which screens you open, tapping Miss you, sending a photo, starting a game, answering the invitation to turn on notifications — with the time, your anonymous account and couple IDs, whether you have Stuckie Pro and notifications on, the referral code you entered (if any), a random ID PostHog creates for this install, your phone model, iOS and app version, and your phone's language and time zone. It never includes your photos, what you two write, names, invite codes or shopping item names, and nothing records your screen.
• Feedback you send (Settings › Send feedback): its kind (bug, idea or other), your message, your email if you leave one, when you sent it, and details the app attaches — app version, iOS version, device model and app language (not your device's name). We also record whether it has been handled, who on the team handled it, when, and their note. Only the Stuckie team reads it; your partner doesn't see it. An email you leave is only used to reply to that feedback.

What you type in Search is only used to search your couple's data at that moment; we don't keep it.

Cloudflare (which carries connections to Stuckie’s server), Vercel (which hosts stuckie.app), RevenueCat, PostHog and Apple see your IP address when your phone connects to them, and may record IP addresses and request times in operational logs to keep the service secure and to find bugs. stuckie.app sets a single cookie to remember the language you picked.

Email, phone number, contacts, GPS location, your device's advertising identifier, or data from the Health app. We do store your phone's time zone and region, as described above; medicine you ask your partner to buy is stored like any other shopping ask; and if you leave your email in feedback or email us, we get that address and use it only to reply to you. Stuckie currently uses no third-party advertising tools, and doesn't track you across other apps or websites. To understand how the app is used, Stuckie uses one analytics tool, PostHog (see “How you use the app” above). If that changes, we'll update this page first.

The camera turns on only when you tap Take a photo. Picking from your library uses the iOS photo picker: Stuckie receives only the photo you choose and can't read your library.

Before a photo is sent, it’s re-saved as a new JPEG (at most 1600 px on the long side), so any location data in it is removed. If you choose “Save Image” when sharing your invite card, iOS asks for permission to add photos: that only lets Stuckie add images to your library, not read anything in it.

• To run the app: show photos, count days, sync between your two phones.
• To send the notifications you've turned on.
• To keep things safe, for example by limiting how often Miss you can be tapped and stopping misuse.
• To find and fix bugs. If you let your iPhone share analytics with app developers, Apple sends us anonymous crash reports.
• To read and answer the feedback you send, and fix the bugs you report. We reply by email if you left one, and may also reply with a push notification to the phone you sent it from (if notifications are on).
• To decide what to build next and make the app easier to use: aggregate counts of which features are used (for example how many people turn holiday decorations off), the survey answers, and PostHog to see how far people get (for example how many pair up after installing).
• To pay the people who introduce Stuckie (from version 1.3.0): each month we count how many people entered their code, how many couples paired, and how many were still using the app after their first week. They only get these totals.

We do not sell your data, and we do not use your photos to train AI.

• The person you're paired with sees your name, your character and its look, birthday day and month (if you add it — not the year), what your character is wearing, photos and the text on them, Miss you taps, shopping asks (including any price you enter), your bucket lists, whether and when you've seen or loved what they sent, who opened each holiday gift, and that you bought Stuckie Pro for you both. They can also change the day you got together, and edit, delete or tick off bucket list items you added. Their widget shows your name and your latest photo. Nobody else in the app sees any of this.
• Infrastructure providers process data on our behalf, only to run the service: Cloudflare (protects and carries every connection to Stuckie's server, so what you send passes through it, and keeps photos in private R2 storage); Vercel (hosts stuckie.app and the Stuckie team's internal admin tool); Apple Push Notification service (delivers notifications to your phone — they include the sender's name, photo text, shopping or bucket list item names, and messages the Stuckie team writes to you, such as a reply to your feedback); Apple and RevenueCat (process and verify Stuckie Pro and holiday pack purchases); PostHog (analytics: receives what's listed under “How you use the app”, only so we can see how the app is used); Resend (delivers the team's email replies to the address you leave in feedback, and notifies the team of new feedback — the notice includes the start of your message and the details the app attaches, but not your email). Each time you open the app on iPhone, even if you've never bought anything, it checks your purchases with RevenueCat, sending your anonymous account ID, the app-specific device ID iOS provides (IDFV), your phone model, iOS and app version, language and App Store country. Stuckie's server also sends RevenueCat the name you set in the app, so the Stuckie team can recognise your account when helping with a purchase or gifting Stuckie Pro. Our database runs on a server Stuckie operates itself.
• The Stuckie team: your data isn't end-to-end encrypted, so we can technically access it. We only look when we need to fix a problem you report, help with a purchase, handle a report of misuse, or when the law requires it. Our internal admin tool shows account details only (name, character, who you're paired with, your pending pairing code, your Pro plan and purchase history, app version, your phone's language and time zone, and how many photos, shopping asks and bucket list items you've created), never your photos or what you two write. Feedback you send does show there in full, with your email if you left one, so the team can read and answer it.
• Whoever referred you (if you entered their code): only gets monthly totals — how many people entered the code, how many couples paired and are still using the app — never who you are.
• When the law requires it, limited to what is strictly necessary.

Every connection uses HTTPS. Photos sit in non-public storage and open only through signed links that expire within hours. Device keys are stored only as hashes. Data may be stored and processed outside the country you live in — for example in the United States (Apple, RevenueCat, Resend, PostHog) and in Cloudflare’s data centres — with the same protections.

• We keep your data until it's deleted in one of the ways below; it isn't deleted just because you stop using the app.
• Take a photo back: it's deleted from storage straight away and disappears from the app on your partner's phone. A notification that already reached their phone (which may show the photo's text) stays until they clear it.
• Cancel a shopping ask: its photo (if it has one) is deleted from storage straight away.
• Delete something from a bucket list: you can undo it for 1 day; after that it's deleted for good in the nightly cleanup. Deleting a whole list deletes its items straight away; memory photos stay in Moments.
• Widget: what your widgets show (your partner's latest photo and its text, the photo you sent today, your two names, your start date and upcoming dates, your bucket list, shopping asks) is cached on your phone to show on your Home Screen and Lock Screen. A photo is removed from your phone when it's taken back; everything is removed when you unpair or either of you deletes everything (the next time the widget refreshes).
• Unpair: your shared data (photos, Miss yous, shopping asks, bucket lists, wardrobe) is locked right away — neither of you can open it — and deleted for good after 30 days. We keep it for those 30 days in case we need to handle a complaint or a report of misuse. Your profile stays with your account.
• Feedback: kept until you use Delete everything of mine — marking feedback as handled doesn't delete it. Emails already sent (our replies to you, notices to the team) stay in the recipients' mailboxes, and Resend keeps its delivery logs for its own retention period.
• App usage data in PostHog: kept for PostHog's retention period. After Delete everything of mine, the app uses a new anonymous ID, so anything PostHog receives afterwards isn't linked to the deleted account; to delete the earlier data too, email support@stuckie.app.
• Referral code: the code you entered is deleted when you use Delete everything of mine. What's kept for checking payments — which couple was credited to which referrer, when it paired, whether it was still active after its first week, and the monthly totals — is no longer linked to you.
• Delete everything of mine (Settings › Your data): immediately deletes the photos you sent, your profile (name, character, birthday), the Miss you taps and shopping asks you made (with their photos), the bucket list items and lists you added, your survey answers, the feedback you sent (including any email you left in it), notification settings, push tokens (the app's and the widget's), layouts, sign-in sessions and widget key, your phone list, account change log and recovery keys, then unpairs you; on your phone, the device key is removed from the Keychain. Any remaining shared data is deleted for good after 30 days. Your name is removed from RevenueCat too. Apple and RevenueCat keep their own purchase records (needed for billing, refunds and Restore Purchases), and a Stuckie Pro subscription isn't cancelled.
• Invite codes expire after 7 days and work only once. Records of invite codes, sign-in sessions, your push token and notifications already sent are kept until you use Delete everything of mine (the push token is also removed when Apple tells us it no longer works).

You can view and edit your name, character and start date; turn off each kind of notification; take photos back; and delete everything of yours right in the app. You can also email support@stuckie.app to ask what we hold about you, get a copy, or have it deleted.

We respect your rights under the GDPR (EU), the CCPA (California) and Vietnam's Decree 13/2023/ND-CP on personal data protection, depending on where you live. Deleting the app doesn't delete your data on our server, and iOS usually keeps your device key in the Keychain, so reinstalling brings you back to the same account: use Delete everything of mine before you uninstall.

Stuckie is for people aged 13 and over (or older, if the law where you live requires it). We don't knowingly collect data from children under 13. If you believe we have, tell us and we'll delete it.

We'll update this page and the date at the top. For significant changes, we'll also say so in the “What’s New” notes of the App Store update.

Email support@stuckie.app. We read every message.