Privacy Policy
Last updated: 06/10/2026
1. Who we are
(Overwatch Digital Assistant Diagnostics), (overwatchdiag@gmail.com) is the data controller for personal data processed through Stackyard apps.
2. What we collect
| Data | What it is | Why |
|---|---|---|
| Account data | Email address, username, authentication details, your theme and accent colour, and any app-access restrictions you set | To create and secure your account |
| AI balance & usage | Your current AI credit balance, auto-recharge settings, top-up payment records (via Stripe), and records of your AI requests (for billing accuracy) | To meter and charge for your AI usage, and let you manage your balance |
| App data | Data you save within an app (app_data) | So your saved data (e.g. notes, history) persists across sessions/devices |
| Community data | Data you choose to publish via an app's shared/community feature (community_data) | Visible to other subscribers using that app, by your choice |
| Subscription/billing data | Managed by Stripe. We hold your subscription status, Stripe customer ID and a Stripe identifier for your card (a fingerprint, not the card number), which we use to stop the free trial being claimed more than once. We never hold your full card details. | To manage your subscription and prevent trial abuse |
| Basic technical data | Standard server logs (e.g. for debugging/security) | To operate and secure the Service |
| Error reports | Technical details when something breaks (error message, page address, browser/device/OS type, language and time zone, and approximate city and country). Your IP address is used to work out the approximate location but is not stored. We don't attach your email address or account details. | To find and fix faults |
| Teams | A username used to invite you to teams, your team memberships, and the shifts, time-off requests and messages in teams you use. Other members of your team can see your username and that team's shifts, requests and messages. | To provide the Teams feature |
| Uploaded files | Files an app saves for you (for example photos or documents), stored privately against your account, with an optional expiry date | So an app can store and show your files |
| Notification settings | If you turn on notifications: your browser's push address and encryption keys, linked to your account | To send the notifications you've asked for |
| Favourites & suggestions | Apps you've favourited, and any app suggestions you submit (title, description and whether you'd like credit) | To personalise your Library and consider your ideas |
| Usage & security records | Daily counts of lookups you make through platform services (such as vehicle lookups); failed sign-in records (email address and time, kept for up to 2 days); short-lived records that complete email sign-in on another device; and technical records of errors inside apps, linked to your account (kept for 90 days) | To apply fair-use limits, protect accounts from guessing attacks, and fix faults |
We do not sell your data.
3. Legal basis for processing
- Account, app, and billing data: necessary to perform our contract with you (providing the Service you've subscribed to).
- Community data: based on your explicit choice/consent each time you publish something via a community feature.
- Security/technical logs: our legitimate interest in keeping the Service secure and functioning.
- Error reports: our legitimate interest in fixing faults and keeping the Service reliable.
- Teams, uploaded files, favourites and suggestions: necessary to provide the features you use.
- Notifications: your consent, given when you turn them on in Settings. Turning them off deletes the stored address.
- Usage limits, failed sign-in and app error records, and the card identifier used to limit free trials: our legitimate interest in preventing abuse and fraud, securing accounts and fixing faults.
4. Where your data is stored
Our database is hosted in the UK (London region). Error reports are processed in the EU (Germany). AI requests are made using Stackyard's own account with our AI provider, not a key of your own. Some providers listed in section 5 are outside the UK. Where data is transferred out of the UK we rely on safeguards such as approved contract terms or an adequacy arrangement, as set out in each provider's data processing terms.
5. Who we share data with
We use these providers, who process data on our behalf:
- Supabase: database and sign-in (London).
- Lovable: hosting of the Service and sending our account and billing emails.
- Stripe: payment processing. Stripe handles your card details directly; we never see or store full card numbers.
- Google: prompts, and any photos, audio or video you send to an AI-powered app, go to Google's Gemini API using Stackyard's own account with Google, not a key of your own.
- Sentry: error monitoring.
- DVLA and DVSA: vehicle registration numbers you enter in lookup apps.
If you turn on notifications, your browser's push service (Google, Mozilla or Apple, depending on your browser) delivers them to your device. The content is encrypted, so the push service can't read it.
We don't sell your data and don't share your personal data with anyone else except where required by law.
6. Community and team sharing
If you publish data via an app's community feature, other subscribers using that app can see it. We strip identifying information (your user ID) before other users can see published entries — the app itself has no way to know who published what. However, you're responsible for not including personal or identifying information in anything you choose to publish this way.
If you use Teams, other members of a team you belong to can see your username and the shifts, time-off requests and messages in that team. Notifications may show a sender's username and the start of a message on your device's screen.
7. How long we keep your data
We keep your data while your account is active. Error reports sent to our error-monitoring service are kept for 30 days and then deleted automatically. Failed sign-in records are kept for up to 2 days, and app error records for 90 days. Notification addresses are kept until you turn notifications off or delete your account. Uploaded files are kept until they expire (if an expiry was set), you remove them, or you delete your account.
If you delete your account, we delete your account data, saved app data, uploaded files, team data, favourites, suggestions, usage and security records, notification addresses and published community data, and we cancel your Stripe subscription. If you own a team, deleting your account deletes that team, including its shifts, requests and messages for the other members. (See "Your rights" below.)
If your subscription has been cancelled for 12 months and you haven't returned, we delete your account and data automatically. We email you a warning at least 30 days beforehand. We keep a minimal record that an automatic deletion took place (dates only, with no personal details). Some records may be retained briefly where we have a legal obligation to do so (for example billing records for tax purposes).
8. Your rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to erasure") — available directly in-app via account settings, or by contacting us.
- Request a copy of your data in a portable format.
- Object to certain processing.
- Complain to the UK Information Commissioner's Office (ICO) if you believe we've mishandled your data.
To exercise any of these rights, contact (stackyardapps@gmail.com).
9. Cookies & browser storage
We don't use advertising or analytics cookies or trackers. We use:
- Strictly necessary: your login session, kept in your browser's local storage (not a cookie) so you stay signed in. It is removed when you sign out. Our hosting provider also sets two technical cookies: one for bot protection and security, and one that keeps your visit on a consistent version of the site.
- Preferences: your light/dark theme and accent colour, saved in local storage so pages load in the right colours.
- Convenience: your scroll position while you move between pages, kept in session storage and cleared when you close the tab.
Apps you run don't store anything in your browser; their data is saved to your account.
10. Children
Stackyard is not directed at, and should not be used by, anyone under 16. We don't knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time; material changes will be flagged in-app where practical.
12. Contact
stackyardapps@gmail.com