Privacy Policy
Last updated: 19 October 2026
STVCK ("we", "us") is operated by STVCK, 125 City Rd, London, EC1V 2NX, United Kingdom. Contact: support@stvck.co.uk. This policy explains what the STVCK iPhone app and its online service collect, why, and your rights under UK GDPR and the Data Protection Act 2018.
1. What we collect and why
| Data | When | Why | Legal basis |
|---|---|---|---|
| Email address | Signing in with an email code, or Sign in with Apple (Apple may share a private relay address) | To create and secure your account and send sign-in codes | Contract |
| Name, phone number, delivery address and postcode | Only if you fill in the Profile section | So you can keep your contact details in one place; we do not pass them to retailers | Consent (delete them any time) |
| Display name and handle, posts, comments, photos, showcase and binder entries | When you use Community or Showcase | To show your content to other members as you choose | Contract |
| Precise location | While you use Nearby and, if you opt in, a saved alert location and radius | To show stores near you and limit local alerts to your area. A saved alert location expires after 30 days unless refreshed | Consent |
| Device push token and a random device identifier | If you allow notifications | To deliver stock and account alerts. Tokens are stored encrypted | Consent |
| Subscription status | If you subscribe through Apple | To unlock paid features. Apple processes the payment; we receive a transaction reference and expiry, never card details | Contract |
| Alert history, watchlist, alert preferences | As you use alerts | To avoid repeating alerts and show your inbox | Contract |
| Security events (sign-ins, sessions, email changes, deletion requests) | Automatically | To protect your account and investigate abuse | Legitimate interests |
| Reports you make about content, and blocks | When you use them | Moderation and safety | Legitimate interests |
We do not use advertising SDKs, do not track you across other apps or websites, and do not sell personal data.
2. Where data is processed
Our service runs on Railway in the European Union (Netherlands). Sign-in emails are sent through Resend, Inc. (USA) under standard contractual clauses. Apple processes Sign in with Apple, payments and push delivery under Apple's terms.
3. How long we keep data
- Account data: until you delete your account (Profile → Account & Security). A verified request freezes the account; erasure follows after a short review window and removes your profile, content, alerts, devices, sessions and photos.
- Saved alert location: 30 days from when you set it, unless refreshed.
- Sign-in codes: minutes.
- Security and moderation records: up to 12 months after the event, or until erasure, whichever is first.
- Backups: encrypted database backups are kept for up to 30 days and then overwritten.
4. Your rights
You can access, export (Profile → Account & Security → Export), correct or delete your data in the app, and you can object or complain by emailing support@stvck.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
5. Children
STVCK is for users aged 13 and over. Showcase features include an age check.
6. Changes
We will post changes here and, for material changes, tell you in the app.