Legal
Privacy Policy
CatStamp keeps your album on your iPhone. Only what you choose to post to the Feed, and the small account that holds those Posts, reaches our servers. This policy says exactly what that is.
What CatStamp is and who operates it
CatStamp is an iPhone app that turns your cat photos into stickers for a collectible album, with an optional public Feed where collectors share catches and adopt each other's cats, and the website at catstamp.fun. It is operated by Aktiv Rekord Kft., 14-24 Horvát u., Budapest, Hungary ("we", "us"), which is the controller of the personal data described here.
We process this data to provide the features you choose to use, and, for safety, moderation and analytics, on the basis of our legitimate interest in running a safe and working service.
Data that stays on your device
Your photos, the cutouts CatStamp makes from them, your album, cat names, bond levels and appearance results are made and stored on your iPhone. The cat cutout and the appearance labels are computed on the device. None of this leaves your phone unless you post a catch to the Feed, and even then the Source Photo never does. Deleting a catch or the app removes it.
Private cat-map locations
CatStamp asks separately before saving a capture location. If you enable it, camera catches may save the device location available when you take the photo; photo-library imports use embedded GPS metadata only. You can keep using CatStamp without enabling this feature.
In this release, these coordinates are stored only on your device with the catch. They are not uploaded or shared, and deleting a catch removes its saved location. A future Friends feature will require separate sharing controls and will not use this local permission as permission to share.
The optional Collector Account
You need a Collector Account only to open the Feed, post a catch or adopt one. It is anonymous. When you create one we store:
- your username;
- your country, taken from your device region when the account is created, which you can change or leave empty;
- a hashed copy of your account token (the token itself stays in your iCloud Keychain);
- the time you confirmed you are 13 or older;
- the time the account was created;
- its status, active or suspended.
We never ask for or store your name, email address, phone number or Apple ID.
Posts and the Feed
Posting is something you do for one catch at a time; nothing is posted automatically. A Post contains:
- the cat's cutout as a PNG image of up to 2048 pixels on its longest side;
- the Cosmetic it wears, or none;
- the cat's display name and rarity;
- whether the app recognised the picture as a cat;
- the coat and breed-resemblance labels, when the app found them;
- when the cat was caught and when it was posted;
- an identifier for the cat in your album, so adopted copies of the same cat stay together;
- the result of the on-device person check described below.
A Post never contains the Source Photo, the location, or appearance confidence percentages. We make a smaller copy of the image, 1024 pixels on its longest side, for Feed cards and the web page.
Every Post is public. Anyone using the app can see it in the Feed with your username, country flag and adoption count, and every Post has a public link on catstamp.fun that anyone can open. Other collectors can copy a Post into their own album through Adoption.
Adoption
When you adopt a Post we record that your account adopted it, so each account counts once, and add one to the Post's public adoption count. The app downloads the Post's image and saves the copy in your album on your device. An adopted copy stays with the adopter even if the poster later deletes the Post or their account, and releasing an adopted cat does not lower the count.
Reports and blocks
You can report a Post or a username by choosing a reason from a fixed list; there is no free text. We store the reason, what was reported, the reporting account and the time. A block is stored on our server so the Feed stops showing you that collector's Posts; the blocked collector is not told. Reports sent by email to balint.hajnal@activerecord.com are read by us and kept with the case.
Push notifications
If you allow notifications after your first Post, the app registers a push token for that installation of CatStamp. We use it only to tell you when your cats are adopted and when we make a moderation decision about your Posts. Push tokens are deleted with your account, or when Apple reports that a token is no longer valid.
The on-device person check
Before a Post is uploaded, the app uses Apple's Vision framework on your iPhone to look for a human face or body in the cutout. Only the yes or no result travels with the Post. It helps us decide which Posts to review first and never blocks a Post on its own. Nothing else from the check leaves your phone.
Analytics
The app sends usage events to PostHog, for example that a capture started, the Feed opened or a Post succeeded, tied to a random identifier for that installation. These events never include your username, cat names, country, account or Post identifiers, images or locations. Our Feed server sends nothing to PostHog. The website's analytics are described under Cookies.
Android waitlist
When you join the Android waitlist on this site, we store the email address you submit, which Google Play button you joined from (the hero or the footer), and the time you signed up. We store nothing else about the signup: no IP address and no device or browser data.
We use this information for one purpose only: to email you when CatStamp for Android is available. We do not send any other email and we do not share the list with anyone. You can have your entry removed at any time by emailing balint.hajnal@activerecord.com, and we will delete it from the waitlist.
Service providers
These companies process data for us, each only for the task named:
- Hetzner Online GmbH, Nuremberg, Germany: our servers and database (Collector Accounts, Posts, adoptions, reports, blocks and push tokens).
- Cloudflare, Inc.: image storage in the European Union and worldwide delivery of Post images.
- OpenAI: image moderation screening of every upload with its omni-moderation model, processed in the United States, with no retention and no training on the images.
- Apple: App Store purchases and subscriptions, delivery of push notifications, and iCloud Keychain, which carries your account token to your other devices if you use it.
- PostHog: app and website analytics, hosted in the EU; it never receives an account or Post identifier.
- Adapty: subscription status and the paywall, using purchase information from Apple.
How long we keep data
- Collector Account data: until you delete the account.
- Posts: until you delete them, you delete your account, or we remove them.
- Deleted images and account data leave our live systems at once and our backup copies within 14 days.
- Images of Posts we remove are kept privately for 30 days, so a mistaken removal can be undone, and then deleted.
- Moderation decisions are kept as long as the record of the Post they concern.
- Server request logs: 30 days. IP addresses are used only briefly to answer requests and are never joined to an account.
- Analytics: under PostHog's existing retention terms.
When you delete your account, your username, Posts and their links are removed. Collectors who adopted your cats keep their copies, and reports you filed are kept without your account.
Minors
You must be at least 13 to use CatStamp. If you are under 18, you need the consent of a parent or guardian to use it. If we learn that we hold personal data from a child under 13, we delete it.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, object to or restrict its processing, and complain to a data protection authority (in Hungary, the NAIH). You can delete your Collector Account and everything it holds yourself in the app: Profile, your account, Delete account. Because the account is anonymous we cannot verify by email who holds it, so we cannot act on deletion requests sent by email; see how to delete your account. For any other request, write to balint.hajnal@activerecord.com.
Changes to this policy
When CatStamp changes what it collects, we update this policy and the date below. We announce significant changes in the app or on this site.
Contact
Aktiv Rekord Kft., 14-24 Horvát u., Budapest, Hungary. Email balint.hajnal@activerecord.com.