We built Stackr to help you take control of your subscriptions. Here is exactly what we collect, why, and how we protect it.
Contents
Stackr ("we", "us", "our") is a subscription tracking and management application operated by its founder, accessible at usestackr.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use Stackr, and the choices you have.
By signing in to Stackr, you agree to the practices described in this policy. If you do not agree, please do not use the service.
Plain English summary: We collect only what is necessary to make Stackr work. We do not sell your personal data. We do not show you ads. Your subscription data is used primarily to deliver the service to you. In the future, we may also use aggregated, anonymized data (from which your identity cannot be identified) for business insights and may license such data to third parties — see the Sharing section for details.
We collect two categories of information: what you provide directly, and what is generated automatically when you use the app.
We do not collect payment card details, bank account numbers, or any financial credentials.
Every piece of data we collect has a specific purpose tied to delivering Stackr's features:
Your data is stored in a Neon PostgreSQL database hosted in the Singapore (ap-southeast-1) region. Stackr is hosted on Vercel, a SOC 2 Type II certified provider. Database connections use TLS encryption in transit. Data at rest is encrypted by Neon's managed infrastructure.
Security measures: Authenticated routes require a valid session enforced server-side. Database queries are parameterised via Prisma to prevent SQL injection. Environment variables are never exposed to the client.
While we implement industry-standard security practices, no system is perfectly secure. We encourage you to enable two-factor authentication on your Google account.
We retain your data for as long as your account remains active. If you delete your account through the Stackr Settings page, all your personal data — account information, subscription records, settings, and push tokens — is permanently deleted from our database within 30 days.
Server logs held by Vercel are subject to Vercel's own retention policy (typically 30 days). Anonymised, aggregated data that cannot be linked back to you may be retained indefinitely.
Depending on your location, you have rights regarding your personal data. We respect these rights regardless of where you are based.
To exercise any of these rights, email us at privacy@usestackr.com. We will respond within 30 days.
Indian users have rights under the Digital Personal Data Protection Act 2023 (DPDP Act). Singaporean users have rights under the Personal Data Protection Act 2012 (PDPA).
Stackr is not intended for use by anyone under the age of 13 (or 18 where applicable under local law). We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us at privacy@usestackr.com and we will delete the account promptly.
We may update this Privacy Policy from time to time as Stackr evolves. When we make material changes, we will notify you via email or a prominent notice within the app at least 14 days before the changes take effect.
Continued use of Stackr after changes take effect constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests related to this Privacy Policy, please reach out:
usestackr.com · India & Singapore
© 2026 Stackr. All rights reserved.