Privacy Policy

Last updated: 6 November 2026

Stackd is an app for sharing photos with friends, swiping through them, and saving the ones you want. This policy explains what information Stackd collects, why, how long it's kept, and the choices you have.

Stackd is run by Stackd Social Ltd ("we", "us"). We are the data controller for your information under UK data protection law (UK GDPR and the Data Protection Act 2018). You can contact us at mail.stackd@gmail.com.

The short version

• We only collect what we need to run Stackd.
• Your photos are end-to-end encrypted. Only you and the people you share them with can see them. Not even Stackd can, unless someone reports them to us.
• Photos you share are deleted automatically when a stack expires: 7 days after it's sent by default, and never later than 30 days.
• We don't sell your information, show you ads, or track you across other apps and websites.
• You can delete your account at any time in Settings.

What we collect

Your account. Your email address, name, username, and profile photo if you add one. If you sign in with Apple or Google, we receive the email address and name they share with us, which may be a private relay address.

Your friends. Who you've added as a friend, friend requests you've sent or received, the groups you're in, and anyone you've blocked.

Photos and videos you share. When you send a stack, we store a small preview of each photo and the original file, so the people you send it to can swipe and save it. They're encrypted on your phone before they're uploaded, with keys only the people in the stack hold, so we store them but can't see them. Originals are sent exactly as they are on your phone, so inside the encryption they may include information saved with the photo, such as the date, camera details and, if your camera recorded it, where the photo was taken.

Stack details. Stack and group names, who a stack was sent to and when, how many photos it has, and when it expires.

How you use stacks. Which photos you keep or discard while swiping and how far through a stack you are, so you can pick up where you left off, and whether you've started or finished, which the sender can see. The sender can't see which photos you kept or how many.

Your timeline. When you save photos from a stack, we keep the stack's name, who sent it, how many photos you saved and the date, so you can look back on it in the You tab after the stack has gone. We don't keep the photos themselves. This is visible only to you, and is deleted when you delete your account.

Notifications and sending progress. If you allow notifications, an address for your phone from Apple, so we can tell you when someone sends you a stack, adds you as a friend, or similar. While you're sending a stack, we also receive an address for its progress in the Dynamic Island and on your Lock Screen, so it can keep updating when Stackd is closed; it's deleted once the stack has sent. You can turn notifications and Live Activities off at any time in your iPhone's Settings.

Reports and feedback. If you report a photo, stack or person, the report and a readable copy of what you reported. If you send us a problem or an idea, what you write, plus the information shown on the report screen to help us fix it: your app version, iPhone model, iOS version, type of connection (Wi-Fi or mobile data), and a log of recent upload speeds and errors. The log doesn't include your photos or who you sent them to.

Basic technical information. Information needed to deliver the service reliably, such as upload errors and how long uploads take. We use this only to keep Stackd fast and working.

We do not collect your contacts, your location (other than any location already saved inside a photo you choose to share), or any photos you haven't chosen to share. We don't use advertising or analytics trackers.

Access to your photo library

Stackd asks for permission to read your photo library so you can pick photos to share, and permission to add photos so you can save the ones you keep. Stackd only uploads the photos you choose. You can change these permissions at any time in your iPhone's Settings.

Who can see your information

• People you share with. When you send a stack, the people you choose can see those photos, your name, username and profile photo. When you post to a group, everyone in the group can.
• Your friends and other users. Friends can see your name, username and profile photo, and anyone can find you by your exact username.
• Service providers. Our database and sign-in are provided by Supabase. Your photos and videos are stored by Cloudflare, on servers in Western Europe. Notifications are delivered by Apple, and sign-in with Apple or Google is handled by them. These providers process information only on our instructions and must keep it secure. Because your photos are end-to-end encrypted before they leave your phone, none of them can see your photos either.
• Legal reasons. We may share information if the law requires it, or to protect the safety of our users or others. We can only share photos that were reported to us, because we can't unlock any others.

We never sell your personal information.

Information sent outside the UK

Our providers may store or process information outside the UK, including in the European Union and the United States. When they do, we make sure it's protected by the safeguards UK law requires, such as adequacy regulations or the UK International Data Transfer Agreement.

How long we keep it

• Shared photos and videos are deleted when a stack expires: 7 days after it's sent, unless the sender extends it (never beyond 30 days). The sender can also delete it sooner. Photos you've saved to your own phone are yours to keep.
• Your account information and timeline are kept while your account exists, and deleted when you delete your account.
• Sending progress for the Dynamic Island is deleted once the stack has sent, or after a few minutes if sending stops.
• Problem reports are kept for as long as we need them to fix the problem, and no longer than a year.
• Reports and the copies sent with them are kept for as long as we need them to review the report and keep Stackd safe, and no longer than a year unless the law requires us to keep them.
• Backups may hold deleted information for up to 30 days before it's permanently erased.

Our legal basis

We use your information to provide the service you've asked for (performing our contract with you), and where it's in our legitimate interests to keep Stackd secure, safe and working well. Where the law requires, we'll ask for your consent first, and you can withdraw it at any time.

Your rights

Under UK data protection law you have the right to access your information, correct it, delete it, restrict or object to how we use it, and receive a copy of it. To use any of these rights, contact us at mail.stackd@gmail.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

Deleting your account

You can delete your account at any time in Settings → Privacy & legal → Delete account. This deletes your profile, your friends list, and stacks you've sent. Photos other people sent you are removed from your account, but remain with the sender and anyone else they shared them with until their stack expires.

Children

Stackd is not for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, contact us and we'll delete it.

Security

Photos and videos are end-to-end encrypted: they're scrambled on your phone before they leave it, and only the phones of the people in the stack hold the keys to unscramble them. We store them, but we can't see them.

The one exception is reporting. If someone reports a photo or a stack to us, their phone sends us a readable copy of what they reported, so we can review it.

Some information isn't end-to-end encrypted, because Stackd needs it to work: your account details, who sent a stack to whom and when, stack and group names, how many photos a stack has, and your timeline. It's sent over encrypted connections and stored securely. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes to this policy

If we make important changes, we'll tell you in the app before they take effect.

Contact

Stackd Social Ltd · mail.stackd@gmail.com