Last updated: May 6, 2026

1. Introduction

Stampway ("the Application") is a mobile application that allows users to create, manage, and store digital travel stamps. We are committed to protecting your personal data and ensuring transparency regarding how your information is collected, used, and safeguarded in accordance with applicable laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data Controller

Stampway is operated by Ana Borda, an individual based in Colombia.

Contact email: ana.borda.29+stampwaysupport@gmail.com

3. Data We Collect

We may collect the following categories of personal data:

• Identification data: name, email address
• Profile data: profile photo, nationality, date of birth (optional)
• Travel data: stamps, country, dates, transportation mode, notes
• Technical data: IP address, device type, OS version
• Usage data: interactions within the app via analytics tools
• Authentication data: login sessions and tokens

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance
• User consent (analytics, marketing)
• Legitimate interest (security, fraud prevention)
• Legal obligations

5. How We Use Your Data

We use your data to:

• Provide and maintain the application
• Manage accounts and authentication
• Improve features and user experience
• Communicate with users
• Ensure security and prevent fraud
• Comply with legal obligations

6. Payments and Subscriptions

The Application may offer paid subscriptions. All payments are processed through Apple App Store and Google Play. We do not collect or store payment details such as credit card numbers. We only receive limited data such as subscription status and transaction identifiers.

7. Analytics

We use Amplitude to analyze how users interact with the Application. This may include identifiers such as device ID or user ID. Where required by law, we obtain user consent before collecting analytics data.

8. Marketing Communications

We may send marketing communications via email or push notifications only with your consent. You can opt out at any time by:

• Clicking the unsubscribe link in emails
• Disabling notifications in your device settings

9. Third-Party Services

We use third-party providers including:

• Firebase (Google) for storage and authentication
• Cloudinary for image storage
• Amplitude for analytics
• RevenueCat for subscription management

These providers process data only for specified purposes and under data protection agreements.

10. International Data Transfers

Your data may be transferred and stored outside your country, including the United States. We rely on safeguards such as Standard Contractual Clauses (SCCs) to ensure adequate protection.

11. Data Security

We implement security measures including encryption, access control, and monitoring. However, no system is completely secure.

12. Data Retention

We retain personal data while your account is active. After account deletion, data is removed within 30 days, subject to backup retention policies.

13. Your Rights

You have rights including access, correction, deletion, portability, restriction, and objection. To exercise these rights, contact us via email.

14. Children's Privacy

The Application is not intended for users under 13 (or 16 in the EU). We do not knowingly collect data from children.

15. Tracking Disclosure (Apple ATT)

We do not track users across third-party apps or websites for advertising purposes. If this changes, we will request permission in accordance with Apple's App Tracking Transparency framework.

16. Data Breach Notification

In the event of a data breach, we will notify affected users and authorities as required by applicable law.

17. Changes to This Policy

We may update this policy from time to time. Continued use of the Application implies acceptance of changes.

18. Contact

For any privacy or support inquiries: ana.borda.29+stampwaysupport@gmail.com

 ·