Privacy Policy
Last updated: 20 August 2026
Stacked is a financial-literacy learning app for students. This policy explains exactly what the app stores, where it goes, and how to get rid of it. It covers both the website at trystacked.app and the Stacked mobile app.
1. What Stacked collects
Account information
When you create an account, our authentication provider (Clerk) stores your email address, a securely hashed password, and a username that the app generates from your email address. If you sign in with Google or Microsoft instead, Clerk receives the basic profile information those services return — your email address and name — and nothing else.
Your learning progress
So your progress follows you from your phone to your laptop, the following is stored against your account:
- XP, level, day streak, coins and diamonds
- Which lessons and modules you have completed, and your scores on them
- Badges earned, and the shop and room items you own or have equipped
- Your daily login history
- Your answers to the onboarding survey, and the starting track it recommended
- Your final assessment result, if you have taken it
- Anything you enter into the Budget tool
Budget tool figures
The Budget tool saves the numbers you type into it so they are still there next time. These are figures you enter yourself for your own planning. Stacked does not connect to your bank, does not ask for account numbers or card details, and has no access to any real financial account. Nothing you type into the Budget tool is used for any purpose other than showing you your own budget.
Feedback you send
If you use the feedback box in Settings, we store your message, whether you marked it as a bug or feedback, which app you sent it from, and your account identifier so we can reply or follow up. This is only ever read by the people who maintain Stacked.
Referrals
If you arrive through a referral link, we record which account referred you so the reward can be credited. That record is the two account identifiers and whether the reward has been paid.
On your device
The app keeps a copy of your progress on the device so it works offline, and stores your sign-in session token in the device's secure storage (Keychain on iOS, Keystore on Android). Signing out or deleting the app removes both.
2. What Stacked does not collect
- No advertising and no ad identifiers. There are no ads in Stacked.
- No analytics or tracking SDKs. There is no Google Analytics, Firebase, Facebook SDK, Amplitude, Mixpanel, Segment or equivalent in the app.
- No cross-app or cross-site tracking. Stacked does not track you across other companies' apps or websites, and does not use the iOS App Tracking Transparency permission because it has nothing to ask for.
- No location, contacts, photos, camera, microphone or health data. The app never requests these permissions.
- No bank or payment details. Stacked takes no payments and connects to no financial institution.
3. Where it is stored, and who can see it
| Service | What it holds | Why |
|---|---|---|
| Clerk | Email address, hashed password, username, sign-in sessions | Authentication — so only you can get into your account |
| Supabase | Your progress, budget figures, feedback messages, referral records | Database — so your progress survives and syncs across devices |
| Vercel | Serves the website and the mobile web build | Hosting |
These are processors acting on our instructions. Access to the database is restricted per user by row-level security, which means your account can only ever read and write its own rows — other users cannot see your data, and it is not shown to anyone else in the app.
Stacked does not sell your personal information, does not share it for advertising or marketing, and does not disclose it to third parties except where legally required.
4. Deleting your account and your data
You can delete your account from inside the app: Settings → Delete my account. This permanently removes your saved progress, budget figures, feedback and referral records, and deletes your login with our authentication provider. It cannot be undone, and there is no separate request to make or email to send.
If you would rather start over without deleting your account, Settings → Reset all progress wipes your progress and leaves the login in place.
If you cannot get into your account to delete it, email trystacked.app@gmail.com from the address on the account and we will delete it for you.
5. How long it is kept
Your account and progress are kept for as long as your account exists. When you delete your account, the records described above are deleted with it. Feedback messages may be retained in an anonymised form (with your account identifier removed) so that a fixed bug report does not vanish from our records.
6. Children
Stacked is written for college and university students and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal information held about you, and to object to or restrict its processing. Deletion is built into the app (section 4). For anything else, email trystacked.app@gmail.com and we will respond within 30 days.
8. Security
Traffic is encrypted in transit (HTTPS). Passwords are hashed by our authentication provider and are never visible to us. Database access is restricted per user by row-level security. Session tokens are held in the device's secure storage rather than ordinary app storage. No system is perfectly secure, and we cannot guarantee absolute security.
9. Changes to this policy
If this policy changes materially, the date at the top will change and the updated policy will be posted here before the change takes effect.
10. Contact
Questions about this policy or your data: trystacked.app@gmail.com