The short version
- We sell an app, not your data. Stackd is paid for by the people who use it. There are no ads and no trackers in the app, and we never sell or share your personal information.
- You enter your own figures. Stackd doesn't connect to your bank. You decide what goes in.
- Your data is stored in the EU and encrypted on the way to our servers and while it's stored.
- You're in control. Export everything as a file, or delete your account and all your data, at any time from Your data in the app.
1. Who is responsible
Stackd is run by Theo Colman, trading as Stackd, Wezelsebaan 104, 2900 Schoten, Belgium, enterprise number 0758.865.048 ("we", "us"). We are the controller of your personal data: we decide why and how it's used.
For any privacy question, email privacy@stackdmoney.com. We have not appointed a data protection officer, because the law doesn't require one for a service like ours. Your email reaches the person responsible for privacy at Stackd directly.
2. What we collect
On this website. If you join the waitlist, we keep your email address, when you joined and confirmed it, and the wording you agreed to. If you write to us with the contact form, your message reaches us by email (see "When you contact us" below). Nothing else: the website has no analytics, no advertising tools and no cookies (see Device storage).
Your account. Your email address, how you sign in (a code by email, or Apple or Google sign-in) and, if you give one, the name Bud calls you.
What you enter in the app. Accounts and balances, spending and income, categories, budgets, bills and other recurring items, debts, savings goals and goal photos you upload, things you own and their value, and the names of people you split costs with. You decide what to enter. For other people, a first name or nickname is enough.
Your onboarding answers. Your age group, why you came to Stackd, a few questions about your money habits and how you feel about money, your money style and how you heard about Stackd. Most of these are optional and marked so. We use them only to set up your plan and choose which tips to show.
Settings. Currency, number and date format, language, time zone, theme, Bud's tone, your check-in moment, reminders and which tips you've seen.
Your subscription. Whether you're on the free trial or a paid plan, which plan and until when. We don't receive your card details: the seller of your subscription handles payment (see section 5).
Technical data. Basic logs our providers keep to run and secure the service, such as IP address, device and browser type, and error reports. We remove amounts and email addresses from error reports.
When you contact us. Your email, your name if you give it, what you write and any screenshot you add, so we can help.
3. Why we use it, and on what legal basis
| What we do | Legal basis (GDPR) |
|---|---|
| Create your account, sign you in, store and show your figures, build your plan, sync across your devices | Our contract with you (Art. 6(1)(b)) |
| Use your onboarding answers to set up your plan and pick your tips | Our contract with you (Art. 6(1)(b)) |
| Send the reminders and check-ins you choose | Our contract with you, and your choice in Settings and on your device |
| Send service emails: sign-in codes, trial ending, receipts, renewal reminders, security and important changes | Our contract with you, or a legal obligation (Art. 6(1)(b) and (c)) |
| Send launch news to the waitlist | Your consent when you join (Art. 6(1)(a)). Unsubscribe any time |
| Answer your messages and help you | Our legitimate interest in helping you, or our contract with you if you have an account (Art. 6(1)(f) and (b)) |
| Keep Stackd secure and working, fix errors, prevent abuse; ask how you heard about us | Our legitimate interest (Art. 6(1)(f)) |
| Keep accounting and tax records | A legal obligation (Art. 6(1)(c)) |
We don't use your figures for advertising, we don't profile you, and we make no automated decisions about you with legal or similarly significant effects. Your answers about how money feels are about attitude only (for example "calm" or "a bit uneasy"); please don't share health information with us.
4. Who can see it
Only you can see what you enter. Each account can only read its own data. We don't look at your figures, except when you ask us to help with something and give us permission, or when the law requires it.
5. Service providers we use
A small number of providers help us run Stackd. They may only use your data to provide their service to us, under a data processing agreement.
| Provider | What for | Where |
|---|---|---|
| Supabase | The app's database, sign-in and file storage, and the waitlist | EU (Frankfurt, Germany) |
| Cloudflare | Hosting of this website and the app, and protecting them from attacks | Worldwide network (Cloudflare, Inc., United States) |
| Lettermint | Sign-in codes and service emails, waitlist emails, and the emails the contact form sends us | EU: the Netherlands, with backups in Germany. Every sub-processor that handles the emails is in the EU |
| RevenueCat | Keeping your subscription status in sync between the web and the apps. It only receives an anonymous app user ID | United States |
| Apple Push Notification service and Firebase Cloud Messaging | Delivering the reminders you choose, in the iPhone and Android apps | United States |
Who is responsible for their own processing. Some companies decide for themselves how they handle your data, under their own privacy policies:
- Paddle (Paddle.com Market Ltd) sells Stackd subscriptions on the web as the merchant of record. It handles payment, tax and invoices.
- Apple and Google sell subscriptions in their app stores and run "Sign in with Apple" and "Sign in with Google" if you use them.
6. Where your data is stored
Your account and the figures you enter are stored in the EU (Frankfurt, Germany). Some of our providers are US companies, or may access data from outside the European Economic Area for support or security. Where personal data goes outside the EEA, the transfer is covered by the EU-US Data Privacy Framework (for certified providers) or by the European Commission's Standard Contractual Clauses.
7. How long we keep it
| Data | How long |
|---|---|
| Your account and everything you entered | Until you delete your account. Deletion from the live database is immediate |
| Started signing up but didn't finish setup | Deleted after 7 days, together with the email address that came with it |
| Backups | Overwritten within 30 days |
| Technical logs and error reports | Up to 90 days |
| Waitlist email | Until Stackd opens and we've told you, or until you unsubscribe, whichever comes first, and at most 12 months after launch. If you don't confirm your email within 7 days, we delete it. When you unsubscribe, we delete it within 30 days |
| Support emails and contact form messages | 2 years after our last contact |
| Accounting records | 10 years, as Belgian law requires |
8. Your rights
You can at any time:
- see and take your data with you: use "Export your data" in the app, under You › Your data;
- correct it: edit it directly in the app;
- delete it: use "Delete account" in the app, under You › Your data. This removes your data for good;
- object to or ask us to restrict some uses of your data;
- withdraw your consent, for example unsubscribe from the waitlist with the link in every email, or turn off reminders in the app.
For anything you can't do in the app, email privacy@stackdmoney.com. We reply within one month.
You can also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be, or to the authority in the country where you live. We'd appreciate the chance to sort it out with you first.
9. Security
Your data travels over encrypted connections and is encrypted where it's stored. Every account can only read its own data, and our providers are chosen for their security standards. No system is perfectly secure; if something ever goes wrong, we'll tell the authority and, where your data is at risk, you, as the law requires.
10. Device storage and cookies
Stackd uses no cookies for advertising or analytics, and no trackers. We only store what's strictly needed for the service you asked for, so no cookie banner is needed.
| Where | What's stored on your device | Why | How long |
|---|---|---|---|
| Website | Nothing | ||
| App | Your sign-in session | Keeps you signed in | Until you sign out, or the session expires |
| App | A copy of your latest figures | So Stackd opens at once, even on a slow connection | At most 7 days. Signing out removes it |
| App | Your theme | Shows Stackd in light or dark the way you chose | Until you change it or clear your browser data |
| App | Your onboarding answers, before you have an account | So you can continue where you left off. Cleared once your account is created | Until your account is created, or you clear your browser data |
The fonts are part of Stackd itself, so your device doesn't contact a font service. If we ever add something that needs your consent, we'll ask first.
11. Age
Stackd is for adults only, aged 18 and over. If you tell us you're under 18, onboarding stops and nothing you answered is kept.
12. Changes to this policy
If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect. The date at the top shows the latest version.
13. If you live outside the EU
United Kingdom. The UK GDPR applies. You can complain to the Information Commissioner's Office (ico.org.uk).
United States, including California. We do not sell or share your personal information, as those words are defined in the California Consumer Privacy Act, and we don't use it for targeted advertising. Wherever you live, you can ask to know, correct or delete your personal information by emailing privacy@stackdmoney.com. We won't treat you differently for asking.
Canada, including Quebec. The person responsible for protecting personal information at Stackd is Theo Colman, reachable at privacy@stackdmoney.com. Your data is stored outside Quebec and Canada, in the EU, with the protections described in section 6.
Australia and New Zealand. We follow the Australian Privacy Principles and the New Zealand Information Privacy Principles. You can complain to the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner.
Switzerland. The Swiss Federal Act on Data Protection applies. You can complain to the Federal Data Protection and Information Commissioner (FDPIC).
14. Contact
Email privacy@stackdmoney.com, or write to us at the address in section 1.