Privacy policy

Who is responsible

Kaspar David Muth and Matthias Binte, Siegstraße 45, 53721 Siegburg, Germany. Email: kdmuth@stmpify.com

This policy applies to the website stmpify.com and to the apps Stmpify and Stmpify Biz.

Website

The website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit it, Cloudflare processes technically necessary data such as your IP address, the time, the page you open and details about your browser, in order to deliver the site and protect it against attacks. The legal basis is our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR).

The website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers. The font comes from your own device.

Your account in the app

To use the apps you need an account. You sign in with Apple, with Google or with a code by email. We store your email address, an identifier for your account and the username you choose. If you sign in with Apple or Google, we receive an identifier and your email address from them. With Apple, this can be a forwarding address.

The legal basis is providing the app you want to use (Art. 6(1)(b) GDPR).

Cards, stamps and rewards

We store which businesses you have a card with, your stamp count and the history with the time of every booking and every redeemed reward. A business you have a card with sees your username, your count and your history there. Other businesses see none of this.

If you work for a business, we store your role there and the stamps and redemptions you make.

Camera, location and storage on your device

The app uses the camera only to scan QR codes. No images are stored or transmitted.

The app only asks for your location if you allow it. It is used on your device to sort businesses by distance and is not transmitted to us. You can withdraw the permission at any time in your device settings (Art. 6(1)(a) GDPR).

The app stores settings and a profile picture, if you choose one, only on your device.

Service providers

Accounts and app data are held by Supabase, Inc. (USA). The data is stored in a data center in Frankfurt am Main. Supabase also sends the emails with the sign-in code. The app itself is delivered via Cloudflare.

Data processing agreements are in place with both providers. Where data may reach the USA in the process, this is covered by the standard contractual clauses of the European Commission.

How long we keep data

We keep your data as long as you have your account. If you delete it, we remove account, profile, cards, stamps and history immediately. Stamps you gave as staff for a business stay in its bookings without your name. How to delete your account is explained in Support.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing based on our legitimate interest. You can withdraw consent at any time with effect for the future. To do so, write to kdmuth@stmpify.com.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.