Privacy Policy

Last updated May 30, 2026

This Privacy Policy for Stax(“we,” “us,” or “our”) describes how we collect, use, store, and share information when you use the Stax mobile app and this website (together, the “Services”).

1. Information we collect

Account information

When you create a Stax account, we collect information needed to authenticate you and sync your data, such as:

  • Email address (if you sign up with email)
  • Account identifiers provided by Apple Sign-In or Google Sign-In
  • Basic profile information associated with your sign-in method

App data you create

When you use Stax, we store the content you create in the app, including:

  • Habits, tasks, and routine setup
  • Completion history, streaks, and progress data
  • Reminder settings and notification preferences
  • Theme and app preferences
  • Stax Pro subscription status (if applicable)

Device and usage information

We may automatically collect limited technical information when you use the Services, such as:

  • Device type, operating system, and app version
  • IP address and general location derived from IP (country/region level)
  • Crash logs and diagnostic data to help us fix bugs
  • Basic usage events (e.g. feature usage) to improve the app

Website analytics

This marketing website may use privacy-focused analytics (such as Vercel Analytics) to understand page visits and improve the site. This does not include the detailed habit or task data stored in your Stax account.

Support communications

If you contact us by email, we collect the information you provide (such as your email address, message content, and any attachments) so we can respond to your request.

2. How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Stax app and website
  • Sync your habits, tasks, and progress across your devices
  • Send habit reminder push notifications you configure
  • Process and manage Stax Pro subscriptions through Apple or Google
  • Respond to support requests and communicate with you about the Services
  • Monitor performance, diagnose issues, and improve reliability
  • Protect against fraud, abuse, and unauthorized access
  • Comply with legal obligations

We do not sell your personal information.

3. Legal bases for processing (EEA, UK, and similar regions)

If you are in the EEA, UK, or a similar jurisdiction, we process your personal information based on:

  • Contract: to provide the Services you request when you create an account and use Stax
  • Legitimate interests: to improve, secure, and support the Services
  • Consent: where required, such as for push notifications or optional communications
  • Legal obligation: where we must comply with applicable law

4. How we share your information

We may share information in the following situations:

  • Service providers: with vendors who help us host, sync, secure, and operate the Services (such as cloud infrastructure and authentication providers). These providers may only use your data to perform services for us.
  • Apple and Google: when you sign in with Apple or Google, or purchase Stax Pro through the App Store or Google Play. Those companies process payment and account data under their own privacy policies.
  • Push notification services: Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) deliver reminders you enable in the app.
  • Legal requirements: if required by law, regulation, legal process, or to protect the rights, safety, and security of users and the public.
  • Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data retention

We keep your account and app data for as long as your account is active. If you delete your account in the app (Me tab → Delete Account), we delete your account, habits, tasks, completion history, and associated data, subject to any limited retention required for legal, security, or backup purposes.

Support emails and website analytics data are retained only as long as needed for their purpose or as required by law.

6. How we keep your information safe

We use organizational and technical measures designed to protect your information, including encryption in transit, access controls, and secure cloud infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border data transfers.

8. Your privacy rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your information
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent
  • Request a copy of your data in a portable format
  • Lodge a complaint with your local data protection authority

You can delete your account and associated app data directly in Stax. For other requests, contact us at brinz.ratta@gmail.com.

9. Push notifications

Stax can send push notifications for habit reminders you configure. You can disable notifications for Stax in your device settings at any time. On iOS: Settings → Stax → Notifications. On Android: App info → Notifications.

10. Children's privacy

Stax is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at brinz.ratta@gmail.com and we will take steps to delete it.

You must be at least 13 years old to use Stax, consistent with our Terms of Service.

11. Do-not-track signals

Some browsers offer a Do-Not-Track (DNT) signal. Because there is no common industry standard for responding to DNT signals, we do not currently respond to them.

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.

13. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at brinz.ratta@gmail.com.