privacy ยท effective 26 July 2026
How Staplicht handles guest use, local recovery data, optional accounts, Google Play purchases and deletion in the current Android release.
You can use Staplicht's free core experience as a guest. Check-ins, cravings, mood, triggers, notes and reflections are stored in a SQLCipher-encrypted local database. The personal plan, support contact and audio preferences stay in app-private local preferences.
Staplicht excludes both the recovery database and local preferences from Android cloud backup and device transfer. You control local export and deletion in Settings.
If you create an account with email and password, Staplicht stores the email address, display name, a one-way password hash and hashed session records. The plain password is not stored.
Email registration requires a short-lived, single-use verification code. Password recovery also uses a short-lived, single-use code and revokes existing sessions after a successful reset. Only hashes of active codes are stored. Staplicht uses Resend as an email-delivery service provider, which receives the destination address and verification or recovery message solely to deliver that account email.
If Google sign-in is available and you choose it, Staplicht receives the Google account identifier, verified email address and display name needed to create and sign in to the account. Staplicht does not retain the Google profile image. Google sign-in is optional.
An account is required to securely link and restore a Google Play purchase. Staplicht stores the product, entitlement state, purchase status, expiry where applicable and a hash of the Google Play purchase token for verification and replay prevention.
If Google Play reports a pending refund, Staplicht temporarily keeps the purchase token, order reference and any obfuscated account or profile identifiers encrypted at rest so an authorized operator can review the request within Google's review window. It also records the notification reason, event time, review status and outcome. The encrypted secrets are erased after a confirmed submission. When an unreviewed request expires, its configured erasure grace is capped at one hour and cleanup is scheduled at least hourly. Non-secret review and outcome metadata is retained for up to 400 days for dispute, audit and anti-fraud records.
Google Play processes the payment. Staplicht does not receive or store card numbers or Google payment credentials.
The current release does not expose community publishing or external AI reflection in its navigation, and the server keeps both capabilities disabled by default. They are not active data-collection routes in this release.
If either capability is introduced later, Staplicht will add an in-app opt-in disclosure and update this policy and the Google Play Data safety declaration before enabling it. A future community feature would need the chosen pseudonym and submitted post for publishing and moderation. A future external AI feature would require explicit consent and would explain which service provider receives the submitted text.
Staplicht uses encrypted transport, a SQLCipher-encrypted recovery database, app-private preferences excluded from backup, hashed session and purchase tokens, and Android Keystore-backed secrets. No system can promise absolute security.
To limit automated authentication abuse, Staplicht temporarily processes the request IP address and stores only a keyed one-way rate-limit identifier, time window and counter. This control does not store the raw IP address. Configured retention after a rate-limit window ends is capped at one day and cleanup is scheduled at least hourly.
Deleting local data does not by itself delete an online account. An account deletion request revokes sessions, removes login credentials and direct profile identifiers, deletes linked report and block records, and deactivates entitlements. Pseudonymized billing records may remain while a purchase is restorable or financial, dispute and anti-fraud obligations apply. They retain a random account tombstone and transaction references but cannot be used to sign in. See the deletion page for both routes.
Privacy, access and deletion questions: support@staplicht.app.
Staplicht updates this policy and the Google Play Data safety declaration when its data practices change.