Privacy notice

Who we are

StopperLab is a company in the United Kingdom. It decides why and how your personal data is used in the StopperLab app and website, and is responsible for it. You can reach us about your data through Settings › Privacy in the app or the privacy page of your account on the web.

What we collect

Your account: your email address or your Apple or Google sign-in, your age band (13 to 17, or 18 and over), your country and your language.

Your cards: the photos you take or import, the images we derive from them, the measurements, observations and estimates of each analysis, and the labels and tags you give your cards. Location data is removed from every photo before it is stored; a photo that still carries it is refused.

Your device: its model, its operating system and app version, and the verdict of Apple's or Google's device check, which we use to give free analyses once per device.

Your purchases and credits: which pack you bought, through which store, what it cost, and every credit added, held, spent or returned. We never see your card number.

Your choices: each consent you give or withdraw, with the version of the text you saw.

Use of the app: events about capture and analysis, stored under a pseudonymous id. They never contain your photos, file names, email or payment details.

Why we use it

To provide the service you ask for (your account, analyses, reports, credits and purchases): because it is needed for our contract with you.

To keep records of payments and credits: because the law requires it.

To keep the service secure, prevent fraud and misuse, give free analyses once per account and device, and measure how well capture and analysis work: because we have a legitimate interest in it.

For product analytics, marketing email, a public page for a record, and the training of our models with your photos: only with your consent, which you can withdraw at any time.

Training our models

Your photos are used to train or test our models only if you switch this on. It is off unless you do. If you switch it off later, your photos are left out of the next dataset we build.

Who we share it with

Service providers who process data for us under contract: Supabase (database, storage and sign-in, in London), Vercel (the website, in London), Google Cloud (the analysis service, in London), OpenAI (help with identifying a card and wording an explanation), Sentry and PostHog (error reports and product analytics, in the European Union, only as described in the cookie notice), RevenueCat and Stripe (purchases), and Apple and Google (sign-in, purchases and device checks).

Where a provider handles data outside the United Kingdom, the transfer is covered by UK adequacy regulations or by the safeguards UK law requires.

A record of an analysis is seen only by you until you share it. A shared link is unlisted; a public page needs your explicit switch.

How long we keep it

Photos and reports: while your account is open. Data of an app session that was never attached to an account: 7 days. Photos the server refused: 30 days. Capture sessions you abandoned: 30 days. Logs: at most 90 days, without personal data. Payment and credit records: as long as the law requires, under a pseudonymous id. Backups expire on our provider's schedule and are not used until then.

Your rights

You can ask for a copy of your data, have it corrected, restrict or object to its use, and take it elsewhere. You can delete an analysis, your photos (keeping your reports) or your whole account in the app or on the web; we complete a deletion within one month and confirm it with the date the last backup holding your data expires. You can withdraw any consent at any time.

You can complain to the Information Commissioner's Office (ico.org.uk).

Children

You must be 13 or over to have an account. For accounts of 13 to 17 year olds, product analytics, marketing, public pages and the use of photos for training are switched off and not offered.

Changes

Each version of this notice has its own version name, shown at the top of the page. We tell you in the app before a change that affects how we use your data.