Privacy Policy
Stuffly helps you remember where you put things. This policy explains what we collect to do that, what we do with it, and the choices you have. We have tried to say it plainly.
What we collect
- Your account: your name, your phone number (it is how you sign in), and your password (stored only as a one-way hash; we cannot read it).
- What you add: the places, items, notes, tags, categories, prices, warranty dates and serial numbers you enter, and the photos you upload for them.
- Where things were: the history of each item's moves between places.
- Sign-in details: for each signed-in device, the time, the device type reported by the app, and the network address, so that sessions can be listed and ended.
- What you ask the assistant: the questions you type and the photos you ask it to look at, while you use those features.
We do not collect your contacts, your location, your advertising identifier, or anything from other apps. The camera is used only when you choose to take or scan something, and your photo library only when you choose a photo.
What we use it for
- To run the app: to show you your things and where they are, to search them, and to keep you signed in.
- To message you when you need it: a one-time code to confirm your phone number or to reset your password, sent over WhatsApp. Data rates from your carrier may apply.
- To keep the service safe: limiting repeated attempts and investigating abuse.
We do not use your data for advertising. We do not sell it or share it with data brokers.
Who else handles it
- Our hosting and database providers store your data on our behalf.
- Our messaging provider (Wevlix, which delivers the message over WhatsApp, a Meta service) receives your phone number and the one-time code so that it can deliver it to you.
- An AI provider receives a question or photo only when you use the assistant or photo suggestions, and only to produce the answer. It is not sent your account details.
These providers may only use the data to provide their service to us. We may also disclose data if the law requires it.
How long we keep it
We keep your data while your account exists. When you delete your account, your places, items, notes, history, tags, labels, sign-in sessions and photos are deleted. Backups are overwritten on their normal schedule.
Your choices
- You can edit or remove anything you added, at any time.
- You can export everything we hold about you from Settings → Account → Export my data.
- You can delete your account from Settings → Account → Delete account. It cannot be undone.
- You can change your name, phone number and password in the same place.
Depending on where you live, you may have further rights, such as to ask us to correct, restrict or hand over your data, or to complain to a data-protection authority. Write to us and we will help.
Security
Connections are encrypted. Passwords are stored as salted Argon2id hashes. Sign-in codes are short-lived and limited to a few tries. No system is perfectly secure, but we take care to protect yours.
Children
Stuffly is not directed at children under 13, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top shows when the words last changed.
Contact
Questions, or want to use one of your rights? Write to support@easykrd.com.