Privacy Policy

What Stamplyn collects, why, who else handles it, and how to get it changed or deleted. The short version: we keep only what the app needs, we never store your GPS position (your stamps do record which landmarks you visited and when), we don’t show ads or use analytics or advertising trackers, and we don’t sell your data.

Who we are

Stamplyn is run by STAMPLYN LLC, Pap Tagavor Street, Yerevan 0002, Armenia. We are responsible for (the “controller” of) the personal data in the Stamplyn app and on stamplyn.com. Write to hello@stamplyn.com about anything in this policy.

Your account

When you sign in, we keep your email address. If you sign in with Apple or Google, we also get the name they share with us, and a record that your account is linked to them; Apple lets you hide your email behind a relay address. If you sign in by email, we send you a one-time code instead of using a password.

Your first and last name are only shown to you; others see your display name. We also keep the app language you use, so emails and notifications reach you in it.

You need an email address, or an Apple or Google account, to have an account. Everything else you give us is optional.

Your profile and who sees it

When you choose a username, you get a profile. Other Stamplyn users can see your username, display name and avatar. Your avatar is a pattern drawn from your account, a stamp you choose, or a photo; a photo avatar is only shown to your friends.

Your profile is public unless you turn this off in You › Privacy. On a public profile, other signed-in users can also see your level, how many stamps and countries you have and your finest stamps (without dates), and you appear in the city, country and world rankings, which shows that you collected stamps in that place this year. On a private profile, people who aren’t your friends see only your display name and avatar, and you’re left out of those rankings.

Friends always see your level, XP and Passport: the stamps you share and the achievements you reach.

Location and stamps

Stamplyn uses your location only if you allow it. While the app is open, it’s used to find stamps you can collect nearby, to check you in at a landmark, and to show where you are on the map. To check you in, the app sends our server your position, how accurate it is and how fast you’re moving; the position isn’t stored.

For each stamp we keep the landmark, the time, roughly how far away you were and how accurate your phone’s reading was, so a check-in can’t be faked. When you come back to a place you’ve stamped, we keep the day. If you collect a stamp without signal, or before you sign in, the reading waits on your phone until it can be sent.

On iPhone you can turn on nudges near stamps. Your phone itself then watches for nearby landmarks you haven’t collected and shows the notification; where you are isn’t sent to us.

Photos

You can add photos to your stamps, taken with the camera or picked from your library, and use a photo as your avatar. Before we store a photo, we remove the hidden details in it, such as where it was taken and the camera used.

You choose who sees each stamp photo: only you, your friends, or everyone. Everyone means any signed-in Stamplyn user, and only while your profile is public. Photos are stored privately with Cloudflare in the EU and shown through links that expire within an hour. When you delete a photo, its files are deleted. For photos shown to everyone, we keep who viewed them, to weigh reports about them.

Friends, the feed, rankings and lists

Friends see your new stamps (the landmark and its city), the city albums you complete, your new levels and your achievements in their feed, and can react and comment. You can keep a stamp to yourself: it then stays out of the feed and your friends’ view of your Passport, but still counts for your XP, level and rankings. If you and a friend collect the same place within 15 minutes, you both see that you collected it together; you can turn this off in You › Privacy. Friends see which landmarks you stamped, never where you are.

Rankings cover this year and all time. Each row shows the person’s username, display name, avatar, XP, how many stamps, countries and Wonders they have, and their finest stamps; in the friends ranking, friends also see each other’s latest stamps. Stamps someone keeps to themselves and places of remembrance are never shown.

Lists you make are private, for friends, or public. A public list (its title, description, places, notes, and your display name and username) can be seen by anyone, also without an account, in the app and on stamplyn.com. Your invite link shows your display name and username to anyone who opens it. In You › Privacy you choose who can send you friend requests.

We keep your friends, friend requests, the people you block, your reactions and comments, and when you last opened the feed.

Moderation and reports

To keep Stamplyn safe, comments and the titles, descriptions and notes of lists you share are checked by an AI moderation model before others see them, and photos by Amazon Rekognition in Frankfurt. For comments and photos we keep the result of each check. Something that clearly breaks our rules isn’t posted; a comment or stamp photo that might waits for a person to review it, and list text or a profile photo that might isn’t accepted. If a comment suggests someone may be thinking of harming themselves, only its writer sees it until a person on our team has looked at it, and the app shows where to find help; that result is kept with the check. In list text, it isn’t accepted. How moderation works is described in our Terms of Service.

If you report a comment, a photo, a person, a list or a shared chat, we keep who reported what (nothing about you when you report without an account), the reason, your note and whether it came from the app or the website; the person you report isn’t told who reported them. If you report an answer from Lyn, we also keep a copy of the question and the answer and the app’s language, to review it and improve Lyn, for up to a year. If you report a problem with a landmark, we keep the reason, your note and, if you were nearby, roughly how far away you were. When we act on something, we keep a record of the decision and any warning or suspension. No decision with legal or similarly significant effects on you is made only by a computer: suspensions and removals after a report are decided by a person. Our small team reviews reports on a private page, and gets a short alert in Slack, without the content itself.

Lyn and AI

When you use Lyn, our AI travel guide, your question and the conversation so far, and a photo if you add one to your question, go through our server to an AI model, with what the answer needs from your Stamplyn: your local time, stamps, XP and rank, your lists and saved places, nearby landmarks and how far they are, and the display names of friends who collected a place. Distances are worked out on our server; the model doesn’t get your position. Suggestions also use your home city, which is otherwise kept only on your phone. A photo goes only with the question you add it to: we make it smaller and take out where and when it was taken first, and we don’t keep it, on our server or in your saved chats.

We reach AI models through OpenRouter. Claude models are run by Anthropic, which deletes requests after 30 days, except ones flagged as breaking its usage policy, which it can keep longer, and doesn’t use them for training. The other models we use run with zero data retention: nothing is stored or used for training. When Lyn searches the web, only the search words go to the search provider. The same AI models also help search the map by description, check comments and lists, pick the partner offers that fit a question, and write the line about your year in your recap (from the places you collected, not your position). The app asks your permission before Lyn, its suggestions or your recap’s line send anything to these models; without it, or once you turn it off in You › Privacy, they send nothing and stay off.

When you’re signed in, your chats are saved with your account so you can open them again, until you delete them, clear your chats with Lyn in You › Privacy, or delete your account. When you’re signed out, they stay on your phone and move to your account when you sign in.

If you share a chat, anyone with its link can read a copy of it on stamplyn.com, with your display name and avatar, until you stop sharing it or delete the chat. If someone reports an answer in it, we keep that answer and the question before it for up to a year, even after you stop sharing it or delete your account, to review it and improve Lyn. Your position isn’t in it, but answers can mention places near you when you asked. Please don’t put sensitive personal information in your chats with Lyn.

To keep use fair, we count questions per account or, when you’re signed out, per install, using a one-way code made from your network address to limit new installs. The counts are deleted after two days.

Partner offers

Some screens show offers from travel partners, such as Viator, Klook, Trip.com, Airalo, Omio, Localrent, Kiwitaxi, SafetyWing, Radical Storage and AirHelp (some through the Travelpayouts network), and links to places’ own official websites. Tapping one opens the partner’s website in a browser inside the app.

The link only says where in Stamplyn it was tapped (for example, which landmark’s tickets), so the partner can pay us a commission. When you open hotels from a list with dates, it also carries those dates. We don’t send partners your name, email, account or location. To find offers, our server asks partners about places, never about you. What you do on a partner’s website, including the cookies it sets, is covered by that partner’s own privacy policy.

Notifications and emails

If you allow notifications, we keep your device’s push token, its platform and time zone, and which notifications you want. They’re delivered through Expo and Apple or Google. We keep each notification we send (its text can name friends and landmarks) for 30 days. You can turn them off in You › Notifications or in your phone’s settings.

We email you only sign-in codes and messages about your account, such as the confirmation when you delete it: no newsletters or marketing. Amazon Web Services sends them for us.

Crash reports and logs

When the app or our server hits an error, we send a crash report to Sentry, stored in the EU, so we can fix it: what went wrong, the screen, the app version and the kind of phone. We strip personal details first: no IP address and no screenshots, and emails and typed text are masked. A report from our server can include your account number, so we can find what broke. Sentry keeps reports for up to 90 days.

Our hosting providers keep short technical logs (such as IP addresses, times and errors) to run and protect the service, for up to 30 days. We don’t use analytics or advertising trackers. We count only totals, such as how many stamps were collected in a week, never what one person does.

stamplyn.com

The website uses no cookies, analytics or advertising trackers; your browser only remembers where you scrolled while you read. When you open a shared invite, list or chat, the page loads it from our server. A link preview in a messaging app can show a shared chat’s title and the sharer’s name. Pages with shared content are hidden from search engines.

Who handles your data for us

Supabase (our database, sign-in and server, in Frankfurt); Cloudflare (photo storage in the EU, and stamplyn.com); Amazon Web Services (emails, and photo checks in Frankfurt); OpenRouter and the AI providers it connects us to, such as Anthropic, Google, OpenAI, TypeSafe and Liquid AI, and Parallel for web search; Expo (app updates, which tell Expo which version an install runs, and push delivery); Apple and Google (sign-in, push delivery and maps); Sentry (crash reports, in the EU); and Slack (alerts for our team). Each gets only what it needs for its job, and must protect it at least as well as this policy does.

Some pictures load straight from other sites, such as Wikimedia Commons (photos of the stops in Lyn’s routes) and partners (pictures in their offers). Like any website, they see your device’s network address.

We’re based in Armenia, our database is in Germany, and some providers handle data in other countries, including the United States. Armenia, the United States and some other countries aren’t recognised by the EU as protecting data to the same standard. When we send data to providers in those countries, we use the EU’s standard contractual clauses or, for US companies certified under it, the EU–US Data Privacy Framework. Write to us for a copy of these safeguards.

We may also share data when the law requires it, or to protect someone’s safety. We never sell personal data.

Why we use it

To run your account and the features you use (stamps, friends, the feed, rankings, lists, Lyn, the recap and sharing): to provide the service you signed up for.

Location, camera and photo access, and notifications: your consent, which you give in your phone’s settings and can take back at any time.

Sending your questions, and what the answers need from your Stamplyn, to AI models for Lyn, its suggestions and your recap’s line: your consent, which the app asks for before the first question and you can take back at any time in You › Privacy.

Anti-cheating checks, moderation and reports, the record of who viewed a photo shown to everyone, usage limits, crash reports and logs, and naming friends who collected a place in Lyn’s answers: our legitimate interest, and yours and other users’, in a fair, safe and working app.

Answering authorities and handling reports of illegal content: our legal obligations, including under the EU Digital Services Act.

How long we keep it

We keep your data while you have an account, unless you delete it sooner. Some things go sooner: notifications we’ve sent after 30 days, counts of questions to Lyn after two days, reports on Lyn’s answers after a year, crash reports after up to 90 days, and technical logs after up to 30 days. A shared chat goes when you stop sharing it, and a photo when you delete it.

When you delete your account, we delete your account, profile, stamps, photos, friends, feed, reactions, comments, lists, chats with Lyn, shared chats, reports and moderation records straight away. We keep the address for the “account deleted” email until it’s sent, seven days at most. Copies in our database backups are overwritten within 30 days. A few records stay with nothing that links them to you, such as places you added to someone else’s list, or that a guest stamp was claimed. Reports other people made on answers in a chat you shared stay too, with that answer and your question, for up to a year.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to move it to another service, or to limit how we use it. Where we rely on your consent, you can take it back at any time, for example by turning off location or notifications. Much of it you can change or delete yourself in the app. For anything else, write to hello@stamplyn.com from your account’s email address (or, with Apple’s Hide My Email, tell us your username and we’ll confirm with a code); we’ll answer promptly, and always within the time the law sets.

Your right to object: where we rely on our legitimate interests, you can object at any time for reasons about your situation. We’ll stop, unless we have compelling reasons, such as keeping other people safe, or need the data for a legal claim.

If you’re unhappy with how we handle your data, you can complain to the data protection authority where you live or work, or in Armenia to the Personal Data Protection Agency. We’d be glad to try to fix it first.

Children

Stamplyn isn’t for anyone under 16, and we don’t knowingly collect their data. If you think someone under 16 has an account, tell us and we’ll delete it.

Changes

If we change this policy in a way that matters, we’ll tell you in the app at least 30 days before the change applies, unless the law or a safety problem needs it sooner. The date at the top shows when it last changed.