Privacy Policy

Last updated: 23 August 2025

1) Who we are

StampGram (“we”, “our”, “us”) is a mobile app that helps collectors build digital stamp albums and share them with others. The data controller is Collectorium (sole proprietor in Ukraine).
Registered office: Sumy, Levanevskogo 16, apt. 179, 40004, Ukraine
Contact: stampsgram@gmail.com

2) What this policy covers

This notice explains what personal information we collect when you use StampGram, how we use it, and the choices you have. It applies to current features: albums, feed, likes, follows, chat, optional price display, stamp recognition, PDF export, ads, and the Pro subscription. We do not process in-app payments for sales between users.

3) Information we collect

Account data – display name, email address, password hash, country/locale, app language.
User-generated content – stamp photos you upload, album names/descriptions, and any price you decide to show for a stamp. (You can hide your stamps in Settings.)
Social activity – followers/following, likes, and chat messages you send/receive.
Purchases & subscriptions – purchase tokens/receipts from Apple App Store / Google Play and resulting entitlement status (product ID, active/expired, expiration). We do not store full card details.
Device & usage data – device model, OS/app version, time zone, diagnostic events/crash logs.
Advertising/analytics identifiers – e.g., Google Advertising ID, ATT status, performance metrics.
Support communications – messages you send us and related metadata.

4) How we use your information

Provide and secure the app (sign-in, albums, feed, PDF export).
Run social features (likes, follows, chat) and surface content in the feed.
Perform on-device and/or cloud-assisted stamp recognition and create thumbnails.
Show ads and measure their performance; offer an ad-free subscription.
Verify and honor your subscription (enable Pro features).
Send transactional notifications (account, security, subscription, system).
Detect abuse/fraud and enforce our Terms.
Comply with legal obligations.

5) Legal bases (GDPR)

Performance of a contract – to run the core app features.
Legitimate interests – safety, anti-abuse, analytics, service improvement, and limited personalisation that respects your platform settings.
Consent – where required for ads/analytics (e.g., Google UMP in the EEA, iOS ATT). You can withdraw consent in app/system settings.

6) Sharing & processors

We share data only with service providers that help us operate StampGram:

Google Firebase & Google Cloud (Auth, Firestore/Storage/Functions, Messaging, Analytics, Crashlytics, Remote Config).
Google Mobile Ads/AdMob to serve ads. On iOS, if you grant tracking permission, the SDK may access the Apple Advertising Identifier (IDFA) to deliver and measure personalised ads; if you deny, only contextual ads are shown and measurement uses Apple’s SKAdNetwork.
Apple App Store / Google Play for subscription and receipt validation.

We may disclose data when required by law or to protect users/our service. We do not sell personal data.

7) Cookies/SDKs & consent

We use essential cookies/SDKs for authentication and security. Analytics and advertising SDKs operate based on your consent or device settings. On iOS we respect App Tracking Transparency; on Android we use Google’s User Messaging Platform (UMP) in regions where consent is required. You can change consent in the app (where available) or in device settings.

7a) iOS App Tracking Transparency (ATT)

Our iOS app includes the NSUserTrackingUsageDescription string and may ask for your permission to “allow tracking”. If you consent, we access the device’s Apple Advertising Identifier (IDFA) and share it with Google Mobile Ads (AdMob) to (i) deliver more relevant ads and (ii) measure ad performance across apps and websites (“tracking” as defined by Apple). You can change your choice any time in Settings → Privacy & Security → Tracking and by toggling Allow Apps to Request to Track or the switch for StampGram.

If you decline tracking, we do not access the IDFA. You will still see contextual ads and measurement will rely on aggregated methods such as Apple’s SKAdNetwork. Your core experience is not affected.

App Store Privacy ‘Nutrition Label’ summary (iOS)

Data Used to Track You: Identifiers (Advertising Identifier/IDFA) for Third‑Party Advertising and ad measurement via Google Mobile Ads/AdMob.
Data Linked to You (account‑based): Contact Info (email, display name), User Content (stamp photos, album names/descriptions, chat messages), Identifiers (user ID, device identifiers), Purchases (subscription status/receipts), Usage Data (product interactions such as screen views and feature usage), Diagnostics (crash logs and performance).
Data Not Linked to You: Some diagnostics and de‑identified analytics may be collected in a way that does not identify you directly.

We do not collect precise location, health, financial or other sensitive categories.

8) Price display & chat (no in-app payments)

Users may display a price and contact each other via chat. StampGram does not provide payment processing, escrow or delivery services. Any off-platform transaction is strictly between the users involved.

9) Data retention

Account & album content: kept while your account is active; you can delete content anytime.
Chat: kept while your account is active, subject to space and abuse controls.
Purchase records & receipts: kept for tax/audit and entitlement history (typically up to 6 years, or longer if required).
Diagnostic logs: typically up to 90 days.

If you request deletion, we erase or anonymise data unless we must keep some to comply with law or resolve disputes.

10) Your choices & rights

Toggle stamp visibility in Settings.
Control notifications in device/app settings.
Request access, correction, deletion, export, restriction or objection to processing.

An in-app Delete account control is being finalised. Until it’s available, request deletion by emailing stampsgram@gmail.com from your account email.

11) Children

StampGram isn’t intended for children under 13, or under your country’s digital consent age (16 in the EEA). We don’t knowingly collect data from those age groups.

12) International transfers

We operate from Ukraine and use Google Cloud regions. Where data is transferred internationally, we rely on safeguards such as standard contractual clauses with our processors.

13) Security

We use reasonable technical and organisational measures (encryption in transit, access controls, backups). No method is 100% secure.

14) Contact & complaints

Controller: Collectorium (StampGram)
Email: stampsgram@gmail.com
Postal: Sumy, Levanevskogo 16, apt. 179, 40004, Ukraine
EEA/UK users can also contact their local data protection authority.

15) Changes to this notice

We’ll post updates here and, for material changes, notify you in-app or by email in advance.