Privacy policy

This policy explains what personal data Stamplyn collects through the Stamplyn app and stamplyn.com, why, and what you can do about it. Questions? Write to hello@stamplyn.com.

The short version

• We collect what we need to sign you in, run the app and handle your bookings.
• We email you only sign-in codes and messages about your account and bookings. We don't send newsletters or marketing, and we don't sell your personal data or share your email address with anyone for their marketing.
• This website doesn't use analytics or advertising cookies.

Who we are

Stamplyn is a travel app that is getting ready to launch. You can reach us about anything in this policy at hello@stamplyn.com. We'll add our company details here once the company is registered.

What we collect and why

Account. Your email address, which you give us yourself when you sign in. We use it to send you a one-time sign-in code, because Stamplyn has no passwords. If you add them to your profile, we also keep your first name, last name and nationality. Hotels need the guest's name, and some prices depend on nationality.

Bookings. When you book a stay, we keep the booking details, such as the hotel, dates, room, guests, price, guest name and email, and confirmation codes. We use them to make and show your booking, help with changes or cancellations, and keep the records the law requires.

Payments. You enter card payments in Stripe's payment form, and Stripe processes them. We don't receive or store your full card number.

AI features. When you use features like "Plan my trip", "Ask" or "Describe your trip", the text you enter and the trip details the feature needs are sent through our servers to an AI provider to create the answer. We don't keep your AI conversations on our servers; the history is saved on your phone. Please don't enter sensitive personal information in these features.

On your device. The app stores your sign-in session, a copy of your trips and profile, and your AI conversations on your phone.

Technical data. Our hosting providers may log basic request data, such as IP address and time, to keep the service running and secure.

We don't use your data for advertising, and the app has no analytics.

Legal bases

If you're in the EU, the UK or a country with similar laws, we rely on these:

• Contract: to run your account, make bookings and provide the features you use.
• Legitimate interests: to keep Stamplyn secure and prevent misuse.
• Legal obligation: to keep booking and payment records where the law requires.

Emails we send

We send transactional emails only: sign-in codes and messages about your account and bookings. We send them only to the address you gave us, and we don't buy or rent email lists. If an email bounces or is reported as spam, our email provider may stop sending to that address. Because these emails are needed to sign in and to manage bookings, you can't opt out of them while you use the app. To stop them completely, ask us to delete your account.

Who we share data with

We share personal data with service providers that run parts of Stamplyn for us, and only as far as they need it. Currently these are:

• Supabase: our database and sign-in. Your account data is currently stored in the EU.
• Nuitée (LiteAPI): our travel partner for search and bookings. It passes booking details to the hotel you book.
• Stripe: card payments.
• OpenRouter and Google (Gemini): the AI features. Where the provider offers it, we ask for our requests not to be retained or used for training.
• Our email delivery provider: sends sign-in codes and booking emails.
• Expo and Cloudflare: host our app servers and this website.

Hotels receive the details they need for your booking and use them under their own privacy policies. We may also share data if the law requires it, or to protect our users or the service. Some providers are based outside the EU, for example in the United States. Where required, we rely on the safeguards those providers offer for international transfers.

How long we keep it

We keep your account data while your account is active, or until you ask us to delete it. We may keep booking and payment records longer where the law requires. To remove the data stored on your phone, sign out and delete the app.

Your rights

Depending on where you live, you can ask us to access, correct, export or delete your personal data, or object to how we use it. The app doesn't have a delete button yet, so email hello@stamplyn.com from the address on your account. We'll respond within the time the law requires. You can also complain to your local data protection authority.

Children

Stamplyn is not meant for children under 16, and we don't knowingly collect their data.

Changes

We may update this policy. When we do, we'll change the date at the top.