This policy explains how Pixel N Stack ("we", "us", "our") handles personal data when you visit pixelnstack.com or use an app we publish. Pixel N Stack is a sole proprietorship registered in India. For the data described here, we are the controller under the EU and UK GDPR and the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
Some of our apps have their own privacy policy, linked from the store listing and from inside the app. Where an app has one, that policy governs the app and takes precedence over this one. This policy covers the website and any app without its own.
1. Data we collect
On this website
The site is static and has no accounts or forms. Our hosting provider keeps standard request logs (IP address, browser user agent, the page requested and the time), which are used only to keep the site secure and are deleted on a short rotation. If you email us, we keep the correspondence for as long as we need it to deal with your message.
Website analytics
We use Google Analytics 4 to see how the site is used, and only with your consent. On your first visit a banner asks for it. Until you choose "Allow", the site loads nothing from Google.
If you allow it, Google Analytics sets two first-party cookies, _ga and _ga_ followed by our property ID, each lasting up to 13 months. It records the pages you view, how you reached the site, your approximate location (country and city, derived from your IP address, which Google Analytics does not store), your device type and browser, and which links and buttons you use, such as our email address. It does not record anything you type. Google signals and all advertising features are switched off, and the data is deleted after 14 months.
You can withdraw consent at any time through "Cookie settings" at the foot of every page. Measurement stops immediately and the analytics cookies are removed. If your browser sends a Global Privacy Control signal, we treat it as a refusal and do not show the banner. Your choice and your light or dark theme setting are saved in your browser's local storage and are not sent to us. Our fonts are served from this domain, so no font provider receives your IP address.
In our apps
What an app collects depends on what it does. The specifics for each app are in its Data safety section on Google Play and its App Privacy details on the App Store. Across our apps, the categories are:
- Account data: an email address, or the identifier Google or Apple provides when you sign in with them.
- Content you create: the entries, notes, settings and preferences you save in an app.
- Purchase status: whether you have an active subscription, which plan, and when it renews. Payment is handled by Google Play or the App Store, and card details never reach us.
- Diagnostics: device model, operating system and app version, language, crash reports and usage events.
- Notification token: issued by Firebase Cloud Messaging or Apple Push Notification service if you allow notifications.
Some apps deal with sensitive subjects such as health, wellbeing or relationships. Data of that kind is collected only where the app needs it to work, and the app's own privacy policy explains how it is protected.
2. How we use it, and on what basis
| Purpose | What it involves | Legal basis (GDPR) |
|---|---|---|
| Providing the service | Creating your account, storing and syncing your content, and running the features you use. | Contract |
| Subscriptions | Unlocking paid features for the right account and restoring purchases. | Contract |
| Support | Answering your emails and investigating problems you report. | Contract; legitimate interests |
| Security and reliability | Preventing abuse, diagnosing crashes and keeping the service available. | Legitimate interests |
| Website analytics | Understanding, in aggregate, how visitors use this site. | Consent |
| Notifications | Sending the reminders and messages you have switched on. | Consent |
| Legal obligations | Keeping tax and accounting records, and responding to lawful requests. | Legal obligation |
Under the DPDP Act, we process personal data with your consent or for a legitimate use the Act permits, such as a purpose for which you have provided the data voluntarily.
We do not sell personal data or use it for targeted advertising. Your content is not used to train machine-learning models. If an app ever shows advertising, its store listing and this policy will say so first.
3. AI features
Some apps generate responses using AI models run by third-party providers. When you use such a feature, the text needed to answer your request is sent to the provider. We do not attach your name, email address or account identifier to it. Each provider processes the data under its own terms, which we review before using it.
4. Who we share it with
We use service providers that process personal data on our instructions and only for the purposes above:
- Hosting and database providers, to run our servers and store data.
- Google Play and the Apple App Store, for distribution, payments and subscription management.
- A subscription management provider, to keep your purchase status consistent across devices.
- Firebase Cloud Messaging and Apple Push Notification service, to deliver notifications.
- AI model providers, as described in section 3.
- Email providers, to send and receive email.
- Google Analytics (Google Ireland Limited and Google LLC), for website statistics, only with your consent.
We may disclose personal data where the law requires it, or where it is necessary to establish, exercise or defend legal claims or to protect someone's safety.
5. International transfers
We are based in India, and our providers process data in other countries, including the United States and member states of the European Union. Where personal data from the EEA or the UK is transferred to a country without an adequacy decision, we rely on the Standard Contractual Clauses approved by the European Commission (with the UK addendum where relevant) or, where it applies, on the provider's certification under the EU–US Data Privacy Framework.
6. How long we keep it
- Account data and content: for as long as your account exists. When you delete your account, we delete or irreversibly anonymise it within 30 days.
- Purchase and invoice records: for as long as Indian tax and accounting law requires.
- Server logs: a short period, after which they are rotated out.
- Website analytics: 14 months, after which Google deletes the data automatically.
- Email correspondence: for as long as needed to resolve your request and any follow-up.
7. Security
Data is encrypted in transit with TLS, and access to production systems is limited to the people who need it. We apply technical and organisational measures appropriate to the data we hold, but no system is completely secure. If a breach affects your personal data, we will inform you and notify the authorities the law requires, including the Data Protection Board of India.
We are not responsible for data on a device that is lost, shared or compromised, or for the security of third-party accounts you use to sign in.
8. Children
The DPDP Act treats anyone under 18 as a child. Unless an app's store listing says otherwise, our apps are intended for adults, and we do not knowingly collect personal data from children. If we offer an app to younger users, it will ask for verifiable consent from a parent or guardian first, as the Act requires. If you believe a child has given us personal data, contact us and we will delete it.
9. Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you, including in a portable format;
- correct, complete or update it;
- erase it, together with your account;
- restrict how we use it, or object to processing based on our legitimate interests;
- stop processing that relies on your consent, by withdrawing it (this does not affect processing already carried out);
- under the DPDP Act, accept a person you nominate to exercise these rights on your behalf in the event of your death or incapacity.
Email hello@pixelnstack.com from the address linked to your account and tell us which app the request concerns. We may need to confirm your identity first. We respond within 30 days and do not charge for it. Account deletion is explained on our support page.
If you are not satisfied with our answer, you may complain to the Data Protection Board of India once you have raised the matter with us or, in the EEA or UK, to your local data protection authority.
10. Changes to this policy
We may revise this policy from time to time. The date at the top of the page shows the current version. If a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect.
11. Contact and grievances
Pixel N Stack, India
hello@pixelnstack.com
This address is also our point of contact for questions and grievances under the DPDP Act.