StakphaseContact
Privacy contact
Contact stakphase@dudna.sk with privacy questions or a request concerning information we process. A privacy request is separate from cancelling a store subscription.
Records stored on your device
Protocols, compounds you enter, scheduled occurrences, dose logs, injection-site history, wellbeing notes and manual measurements are stored locally in the app’s SQLite database. The current tracking app does not require an account and does not upload these records to a Stakphase cloud service. You decide what to enter. We cannot retrieve your local records from our server because this tracking service has no such server copy.
App lock and app-preview protection are optional access protections, not database encryption. The SQLite database and the JSON and CSV exports are not encrypted by Stakphase. Your device’s operating-system protections also matter. Do not assume that deleting a file is secure erasure.
Notifications are scheduled locally after you grant the relevant device permission. Notification content can appear on a lock screen depending on your preferences and device settings. Stakphase does not send health-record push payloads to a remote notification service.
Backups, exports and sharing
A JSON export is a local backup that you can restore through the app. A CSV export is a readable dose-history file and cannot restore the app. Neither is automatically uploaded by Stakphase. When you use your device’s share sheet, the destination you choose may process or upload the file under its own privacy terms.
Restore replaces local records instead of merging them. Keep exported files safely and only share them deliberately. A cloud-drive provider selected in the system picker or share sheet is your chosen destination, not a Stakphase cloud-sync feature.
Optional subscriptions and RevenueCat
Subscriptions are in preparation for store sandbox testing. A version that initializes the optional RevenueCat SDK may contact RevenueCat to obtain products or refresh subscription status before a checkout. Checkout and restoring purchases also process subscription data. Apple or Google processes the store transaction, and RevenueCat validates purchases and reports access status. Metadata can include an anonymous app-user identifier, product and transaction identifiers, purchase and renewal times, store/environment and locale information. An anonymous identifier is not a guarantee that information is legally anonymous. The exact initialization triggers must be checked in the released version.
The intended configuration sends no compounds, amounts, protocol names, injection sites, wellbeing, measurements, notes or backup contents to RevenueCat. It adds no customer attributes, advertising identifiers or health-data analytics. Tracking records are not part of subscription analytics. Store receipts and access status are not part of your JSON backup.
The proposed Article 6 grounds are performance of an optional subscription contract, legitimate interests in preventing misuse, and legal obligations for any required financial records. Apple, Google and RevenueCat have their own privacy information. RevenueCat may process information outside the EEA using safeguards in its data-processing agreement. Final store connections, retention, transfers and legal bases require review against the version actually released.
Website requests and cookies
This English-language website is a static product and support site. Its own code has no advertising or analytics scripts, embedded social trackers, web forms or nonessential browser storage. It does not store your pricing selection.
The stakphase.com website is hosted on a DigitalOcean server in Frankfurt, Germany. Hosting providers receive technical request data to deliver pages and protect the service. Our configured web-server access log records the time, request method, path, response status and response size, without a client-IP or browser-agent field. Error logs and hosting infrastructure may still process IP addresses and other technical information. The web-server logs are configured for daily rotation with 14 retained rotations. Provider-level retention and processing outside this server are separate and still require review. We do not use these logs to build health profiles.
The proposed legal basis for website delivery and security is legitimate interests. An earlier preview at stakphase.susky8.chatgpt.site uses Sites and Cloudflare infrastructure rather than this DigitalOcean server. Applicable provider agreements, transfer safeguards and the final legal basis must be confirmed before adopting this draft as a final notice.
The public marketing site is accessible without a Stakphase sign-in. A hosting-provider account, if used to administer or preview the site, is separate from the mobile app.
Contacting support
When you email support, your email provider and our support mailbox process your address, message and any attachments you send. We use ordinary support information to respond, resolve problems and maintain necessary correspondence. The proposed Article 6 grounds are legitimate interests in reliable support, steps at your request before a contract or performance of a contract where applicable, and legal obligations where required. The operator must approve the final purpose and lawful-basis mapping.
Do not send health records, protocols, dose amounts, wellbeing notes or unencrypted backups to support. Redact screenshots first; device and app versions and reproduction steps are usually enough. Handling unsolicited sensitive information, mailbox-provider details and a specific retention schedule still require review. Ordinary support correspondence is kept while needed to resolve a request or meet applicable legal or dispute obligations.
Retention, deletion and your rights
Local records remain in the app until you delete them, replace them during restore or remove the app. Operating-system backup or device-transfer services may retain copies under your device settings; that is separate from a Stakphase cloud service. Delete all data affects local app records. It does not delete files you exported, erase purchase history or cancel an Apple/Google subscription. Uninstalling the app is not a guarantee that every independent copy has been erased.
For personal data the provider processes, you may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. If consent is used, you can withdraw it without affecting the lawfulness of prior processing. Some records may need to remain to meet a legal obligation or establish legal claims.
You may complain to the Slovak Office for Personal Data Protection or another competent supervisory authority. We do not carry out automated medical decisions or health profiling. The current app has no compulsory account and no app-usage advertising analytics. We cannot exercise server-side control over copies you independently shared.
Changes and further information
We update this policy when the actual product, hosting or subscription flows change. The date shown below identifies the current text. Material changes should be described before the affected functionality is used. Legal bases, provider information and processor arrangements must be checked against the final public deployment.