Privacy Policy

Last updated: September 4, 2026

1. Introduction and data controller

Stikrr is an iOS app that lets you create stickers from photos or import them from TikTok, organize them into packs, share them with the Discovery community, and export them to WhatsApp. This policy describes what personal data we collect through the app and the stikrr.app website, how we use it, who we share it with, and what your rights are. By using Stikrr you agree to the practices described here.

Data controller: Angelo Pruscino (Stikrr) — contact: angelprs.dev@icloud.com.

Italian version: stikrr.app/privacy.

2. Data we collect

  • Account data: email address (sign-up via email and password, or Sign in with Apple); if you sign in with Sign in with Apple, also the name you chose to share; a username chosen by you or automatically generated from your email (max 30 characters); a technical account identifier generated by our authentication provider.
  • User content: when you are signed in, the stickers you create are stored on our cloud storage together with related metadata: content source (e.g. TikTok link), original content identifier, file size, visibility setting (public or private), assigned categories/tags and the outcome of automatic content classification. Packs you create (name and visibility) and pack-to-sticker associations are also stored.
  • Usage data: daily counters tied to the free plan limits (e.g. number of TikTok downloads per day, bonuses earned by watching ads).
  • Reports and contributions: if you report inappropriate content we store the report along with an optional free-text reason; if you suggest a tag for a sticker, we store the suggestion text.
  • Advertising data: users on the free plan see ads served via Google AdMob. Only if you grant permission through Apple's App Tracking Transparency prompt may Google use the device advertising identifier (IDFA) to show more relevant ads and measure their performance.
  • Purchase data: Pro subscription purchases are processed exclusively by Apple on the App Store and verified via RevenueCat, which links the subscription status to your account identifier so Pro features unlock across your devices. We do not collect or store any payment details (cards, bank information).
  • Technical data: when the app communicates with our services, providers process technical data necessary to deliver the service, such as IP address and request timestamps.
  • Diagnostic data (crash & performance): via Sentry (Functional Software, Inc.) we collect anonymized stability data: device type and iOS version, anonymized user ID, timestamp, crash stack trace, navigation breadcrumbs and performance metrics (e.g. slow startup, hangs). No photo, sticker or message content is included; emails and identifiers are filtered or anonymized before sending. IP is only used for routing and not stored in clear text.

3. Data processed only on your device

Some data stays exclusively on your iPhone and is never sent to us or to third parties:

  • Photos: photos you select (via the system picker) are processed in memory to produce the sticker; they are uploaded online only if you choose to save or share the sticker.
  • On-device analysis: detection of inappropriate content, tag classification and background removal happen locally on the device using Apple technologies (Vision): no image is sent to third parties for analysis.
  • System logs: the app keeps a local log of technical entries (max 300) that can be viewed and deleted from Profile → Support → System logs; it is never uploaded automatically.
  • TikTok web session: importing from TikTok uses an embedded web window: your TikTok login information stays in the device's local browser storage and is handled by TikTok under its own privacy policy.
  • WhatsApp export: to open a pack in WhatsApp the app temporarily copies pack data to the system pasteboard; this data is automatically cleared after about 60 seconds.

4. How we use data

  • To provide the service: create, save, sync and organize stickers and packs; operate Discovery.
  • To manage registration, authentication and account security.
  • To moderate content (automatic on-device classification, review of community reports).
  • To enforce free plan limits and verify Pro subscription status.
  • To show ads to free users and, with your consent, make them relevant.
  • To prevent abuse, spam and misuse of the service.
  • To improve stability and performance: diagnose crashes, errors and slowdowns via Sentry.
  • To comply with legal obligations where applicable.

We do not sell your personal data and do not use it for our own profiling purposes.

5. Sharing with third parties

We only share data with the following providers, to the extent necessary to deliver the service:

  • Supabase (supabase.com/privacy) — authentication, database and content storage.
  • RevenueCat (revenuecat.com/privacy) — management and verification of App Store subscriptions.
  • Apple (apple.com/legal/privacy) — in-app payments, Sign in with Apple, system services.
  • Google AdMob (policies.google.com/privacy) — serving interstitial and rewarded ads to free users.
  • Sentry (sentry.io/privacy) — crash & performance diagnostics; data processed on EU infrastructure (ingest.de.sentry.io) under a Data Processing Agreement and Standard Contractual Clauses.
  • TikTok (tiktok.com/legal/page/global/privacy-policy) — login and content import take place within TikTok's web pages.
  • WhatsApp (whatsapp.com/legal/privacy-policy) — receives pack data only when you choose to export it.

Each provider processes data as an independent controller under its own policy, which we encourage you to review. We commit to selecting providers that guarantee a level of protection at least equivalent to that described in this policy.

6. Advertising, tracking and consent

  • On first launch the app shows Apple's tracking permission prompt (ATT). If you consent, Google AdMob may use the IDFA; if you decline, the app remains fully functional and ads will be served without cross-app tracking.
  • For users in the European Economic Area and the United Kingdom, advertising consent is managed through Google's User Messaging Platform; you can change your choices at any time from the ad settings reachable within the app.
  • Rewarded ads (watch an ad, get a bonus) are always triggered only by your voluntary action.

7. Legal basis (GDPR)

We process your data on the basis of: contract performance (Art. 6.1.b — providing the service); consent (Art. 6.1.a — advertising tracking, photo access); legitimate interest (Art. 6.1.f — service security, moderation, abuse prevention, stability/performance diagnostics via Sentry); legal obligation (Art. 6.1.c) where applicable. You may withdraw consent at any time without affecting your use of the app. Anonymized diagnostics does not require consent as it is necessary for service stability; you can object by writing to angelprs.dev@icloud.com.

8. Retention and account deletion

  • We keep your data for as long as your account is active or as needed to provide the service.
  • You can delete your account directly in the app (Profile → Delete Account). Deletion permanently removes your profile, email/name, stickers, packs, usage counters and associated data within 30 days; content you had made public in the community is anonymized or removed.
  • You can also request deletion or a copy of your data by writing to angelprs.dev@icloud.com.
  • Local logs on your device can be deleted immediately from the app.
  • Diagnostic data sent to Sentry is retained for 90 days and then automatically deleted; it does not contain photos or sticker content.
  • Unless longer retention is required by law.

9. Your rights

  • Access your data and obtain a copy (portability).
  • Rectify or update your data.
  • Obtain erasure of your data.
  • Restrict or object to processing.
  • Withdraw tracking consent at any time via iOS Settings → Privacy → Tracking.
  • Lodge a complaint with your competent supervisory authority (in Italy: Garante per la Protezione dei Dati Personali, garanteprivacy.it).

To exercise your rights write to angelprs.dev@icloud.com; we will respond within 30 days.

10. Minors

Stikrr is not directed at children under 14 (the minimum age set by the Italian Privacy Code) and we do not knowingly collect their data. If you believe a minor has provided us with personal data, contact us for immediate removal.

11. International transfers

Some of the listed providers process data on servers located outside the European Economic Area (for example the United States). In such cases we ensure adequate safeguards through European Commission adequacy decisions (including the EU-U.S. Data Privacy Framework, where applicable) or standard contractual clauses. Sentry diagnostic data is primarily processed on EU infrastructure (ingest.de.sentry.io, region de.sentry.io) for organization angelo-pruscino.

12. Security

Communications use HTTPS; database access is protected by row-level security rules (each user can access only their own data); sticker files are identified by content hash. No system is 100% secure: please protect your Apple ID credentials and do not share your account.

13. Changes to this policy

We may update this policy, for example when adding new features or providers. The updated version will be published here with a new "last updated" date; substantial changes will also be announced in-app.

14. Contact

For questions, access/deletion requests or reports:
Angelo Pruscino (Stikrr)
angelprs.dev@icloud.com

← Back to home · Terms of Service · Versione italiana