Privacy Policy
Effective date: 5 September 2026
In short: Your photos, your stamps and any location you attach to them stay on your own device — none of it is sent to us. There are no accounts, no sign-in, and we never ask for your name or email.
From version 1.1 the app sends limited technical data, not tied to you personally, to two outside services: RevenueCat, which validates purchases, and Meta, for advertising measurement. We do not track you — we never touch Apple's advertising identifier (IDFA). Section 2 spells this out.
1. Who this covers
This policy covers the CikCak app for iPhone and the site at cikcak.app. Questions: info@cikcak.app.
2. Data we collect
Your photos, your stamps, your location and your preferences stay on your device only; none of them are sent to us or to anyone else. CikCak has no accounts, no sign-in, and never asks for your name or email address.
Until version 1.1 the app connected to no outside service at all. That version added two, and the app sends each of them limited technical data that is not tied to you personally:
- RevenueCat — purchase infrastructure. Validates that your Pro purchase is genuine and remembers which devices it applies to, so your purchase is not lost when you change phones. What is sent: a randomly generated identifier created by the app, the product code purchased, the transaction date, country and device model.
- Meta (Facebook) — advertising measurement. Lets us tell whether you installed the app through a Meta ad, so we can spend the advertising budget on what actually works. What is sent: events such as install and app launch, device model, operating system version, language, and the app-specific identifier Apple provides.
Nothing sent to either service includes your photos, your stamps, your location, or what you do inside the app. Your name, email and payment details are not sent either — we never see your card details in the first place.
We do not track you. We never access Apple's advertising identifier (IDFA), which is why the app never asks you "Allow this app to track your activity?". The data sent to Meta is not used to recognise you in other apps or on other websites; whether an ad worked is measured through Apple's own aggregated SKAdNetwork system.
3. App Store statistics
Beyond what the previous section lists, there is no analytics code inside the app. Separately, what we receive from Apple is aggregate, anonymous figures from Apple through App Store Connect: how many times the app was downloaded, how long a version ran, whether it crashed. These numbers do not belong to individual people and give us no way to identify anyone; the collecting is Apple's, not ours.
They only come from people who left analytics sharing switched on in iOS. Turning it off is up to you: Settings › Privacy & Security › Analytics & Improvements, then switch off "Share iPhone Analytics" and "Share With App Developers".
4. Data that stays on your device
To work at all, the app stores the following on your device only:
- Photos and stamps. The images you capture or pick from your library, their stamp versions, and your folders.
- Stamp details. Capture date, serial number, any title you write and — if you allowed it — the location.
- Your preferences. Theme, typeface, background, reminder time, badge progress.
All of it lives in the app's own protected container. Deleting the app deletes all of it.
5. Permissions and why they are asked for
- Camera
- Only to take photos inside the app. The frame you capture becomes a stamp immediately; it is never uploaded.
- Photos
- So you can pick images from your library and save finished stamps back to it. Your library is never scanned.
- Location (optional)
- To attach the place name and coordinates to a stamp and show it on the Map tab. Decline it and the app still works fully; stamps simply carry no place. Location never leaves your device.
- Notifications (optional)
- For the daily reminder. Notifications are scheduled on your device; we have no ability to send you anything.
You can withdraw any permission at any time in the iOS Settings app.
6. iCloud sync (optional, Pro)
If you turn on iCloud sync in Settings, your stamps are backed up to the private area of your own iCloud account (Apple's CloudKit private database) and synced between your devices. Only you can reach that area; we cannot. The data is governed by Apple's privacy policy. Sync is off by default.
7. In-app purchases
Payment is handled entirely by Apple. We never see, store or process your card details. Whether a purchase is valid comes from Apple's system, and RevenueCat verifies it on our behalf (see section 2). For that, RevenueCat holds only a random identifier, the product code and the transaction date — nothing that would let it identify you.
8. Children's privacy
CikCak is not directed to children under 13. It never asks anyone for their age and collects no data specific to children.
9. Deleting your data
You can delete individual stamps inside the app. To remove everything, delete the app. If you used iCloud sync, you can also remove CikCak's data from iOS Settings › your Apple Account › iCloud › Manage Storage.
10. Your rights
The EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) and Turkey's Personal Data Protection Law (KVKK) grant you rights such as access, correction and erasure of your personal data. CikCak collects nothing that identifies you directly, such as your name or email; the technical records described in section 2 are tied to random identifiers. If you would still like those records deleted, write to info@cikcak.app and we will pass the request on to RevenueCat and Meta.
11. Changes
If this policy changes we will publish the new text on this page and update the effective date above. Significant changes will also be announced inside the app.