Privacy policy

1. Who we are

Stiquer is an iPhone app that turns GIFs, videos, photos and links into WhatsApp stickers. In this policy, “we” and “us” means whoever develops and publishes the app, who is responsible for the data described here. It applies to the Stiquer app (including the “Make a sticker” option in the share sheet and the shortcuts in the Shortcuts app) and to this website.

This site uses no cookies or analytics tools. It loads a font from Google Fonts, so Google receives the IP address of visitors, as with any visit over the internet (see Google Fonts privacy).

2. What stays only on your iPhone

Stiquer works without an account. Everything you create is stored on the device itself, inside the app:

• Stickers, packs and edits: the finished stickers, the thumbnails, the name of each pack, the signature you write and each sticker's project (layers, text, decor and the trim you picked), so you can edit it again.
• Photos and videos: you pick what you want to use with iOS's own photo picker. The app only receives the item you picked, doesn't access your whole library, and doesn't ask for permission to.
• Editing and magic cutout: the cutout, the filters, the text and the conversion to WhatsApp's format all happen on the iPhone, using iOS's own features. None of it is sent to us.
• Clipboard: the app only reads what you copied when you tap Paste (iOS's own button). Before that, it only asks the system whether there's something that looks like a link, without seeing the content, to light up the button.
• Share and Shortcuts: when you use “Share › Make a sticker” or a shortcut, the item sits in an app folder on the device until it opens in the editor. If it's not used, it's discarded after 1 hour.

Since this data never leaves the device, we can't access it and can't recover it. If you delete the app, it's deleted too. Your iPhone's own backups (iCloud or computer) may include the app's data, depending on your device's backup settings.

3. Links from X, GIPHY and Tenor

When you paste or type a link, the app downloads the GIF or video straight from the link's service, without going through any server of ours:

• GIPHY: the file is downloaded from media.giphy.com.
• Tenor: the app opens the link's page to find the GIF and downloads the file.
• X (Twitter): the app queries X's post-embedding service (cdn.syndication.twimg.com) to find the post's video and downloads the file.
• Short links and direct files: the app follows the link to the file and downloads it from wherever it is.

As with any visit over the internet, these services receive your device's IP address and technical connection details, and handle them under their own privacy policies. We don't receive the link you pasted. In the stats, we only record what kind of site it came from (for example, “GIPHY” or “X”).

Free-plan link counter

On the free plan, you can make stickers from a few links a day. To count that in a way that doesn't reset when you change the iPhone's date or reinstall the app, the app uses two Google services, Firebase Authentication and Cloud Firestore:

• A random code, no login: Firebase Authentication creates an anonymous user for the app, with no name, email, phone or password. It's just a code, stored on the iPhone, that usually stays the same if you reinstall the app.
• What gets stored: tied to that code, only the day, how many links became stickers that day and the time of the last count. A new day wipes the previous one. The link, the GIF and what you do in the app never go.
• With Pro, nothing is counted. The random code exists on Pro too, for identification.
• No cross-referencing: this code doesn't go to the stats, and the stats don't go to it.

Since the counter is part of how the free plan works, it has no off switch. It's kept as long as you use the app, and we delete it when you ask (see Your rights). The app also queries Firebase Remote Config to find out how many links per day the free plan has and other app settings; that query uses Firebase's installation identifier and sends nothing about you.

Identification, no login

Since the app has no account, we need another way to find your data when you ask for it, to help if your Pro goes missing and to know that two installs belong to the same person. So, on the free plan and on Pro, the app stores in Cloud Firestore, tied to the random code above:

• From the App Store: the app's transaction code (a number Apple gives your account for this app, the same on every device; it isn't and doesn't reveal your Apple ID), the date you first downloaded the app and which version it was, and whether it's the App Store, TestFlight or a test of ours.
• From your Pro purchase, if you have one: the purchase number and date, the same ones Apple uses for support and refunds.
• From the iPhone: the model (for example, “iPhone16,1”), the iOS version, the app version, the language and region (for example, “en_US”), the time zone and the day the app was last opened.

None of this goes to the stats. The app doesn't read the advertising identifier (IDFA) or the vendor identifier (IDFV). It's kept as long as you use the app, and we delete it when you ask.

4. Sending to WhatsApp

Sending a pack to WhatsApp happens on the iPhone itself: the app hands the pack to the WhatsApp installed on the device, through the way WhatsApp offers for that, and opens WhatsApp. With Copy & paste to WhatsApp (Pro), the sticker goes to the clipboard and WhatsApp opens so you can paste it. We don't see your chats, your contacts or who you send stickers to. Once the pack gets there, the WhatsApp privacy policy applies.

5. Usage stats and crash reports

To understand what works, what breaks and what to improve, the app uses two Google services, Google Analytics for Firebase and Firebase Crashlytics. They're only on in the published version of the app (App Store and TestFlight), and you can turn each one off whenever you want in Settings › Privacy: “Usage stats” is Google Analytics for Firebase and “Crash reports” is Firebase Crashlytics.

Google Analytics for Firebase (usage data)

• What's sent: usage events, like opening a screen, importing a GIF, using an editor tool, sticking a sticker in a pack, sending a pack to WhatsApp or viewing the Pro screen; counts (how many packs and stickers you have); whether WhatsApp is installed; whether you're on Pro.
• Device information that Firebase itself collects: model, iOS version, app version, language, approximate region (from the IP, with no precise location) and a random app-install identifier (the “instance ID”), which changes if you delete and reinstall.
• What never goes: pack names, signatures, typed text, photos, videos, stickers or links. The app's Firebase doesn't use the advertising identifier (IDFA) or the vendor identifier (IDFV).
• Stats only, not advertising: through consent mode, the app tells Google Analytics that this data can't be used for ads or to personalize ads.
• Purchases: when you buy Pro, Firebase records the purchase with its amount and currency, so we know how the app sustains itself. It doesn't receive payment details.

Firebase Crashlytics (crashes and errors)

• When the app closes on its own or hits an error it shouldn't, it sends a report with the spot in the code where it happened, the device model, the iOS and app versions, the screen that was open and an error code. Everyday errors (no internet, full pack, link without a GIF) aren't sent.
• Crashlytics keeps these reports for up to 90 days.

Usage data tied to the instance ID is kept for 2 months (the retention set in Google Analytics). After that, only aggregated reports remain, which don't identify anyone. Learn more at Privacy and Security in Firebase and in Google's Privacy Policy.

6. Buying Pro

Pro is a one-time purchase made through the App Store. Apple handles all of the payment: the app never sees your card, your billing details or your Apple ID. The app only receives from the App Store the confirmation that Pro was bought, and stores that response on the device to unlock the features. The purchase number and date go along with the identification, so we can help if your Pro goes missing. The purchase follows Apple's Privacy Policy and the App Store terms.

7. What we don't do

• We don't sell, rent or trade your data.
• We don't ask for or store name, email, phone, contacts, precise location, photos or chats.
• We don't share data with anyone beyond the services described here (Google Firebase and Apple), which act as the app's service providers, or when the law requires it.

8. Your choices and how to turn things off

It's all in Settings › Privacy, inside the app (the gear in the corner of the Studio):

• Usage stats: one switch turns off Google Analytics for Firebase. Once off, the app stops sending usage data, deletes from the device whatever hadn't been sent yet and doesn't tell us you turned it off.
• Crash reports: another, separate switch turns off Firebase Crashlytics. Once off, the app stops sending crash and error reports, deletes the ones that hadn't been sent yet and doesn't tell us. You can leave only this one on and keep helping us fix crashes without sending stats.
• Your data: shows the install code (Firebase's instance ID), which you copy and send to us to ask for a copy of your data or for us to delete what has already been sent. The random code of the link counter and of the identification goes along with it. The codes are still there even after you turn off usage stats.
• Wipe everything from the device: deleting the app deletes the stickers, packs, edits and choices stored in it, and a new instance ID is created if you install it again.

9. Your rights (LGPD and GDPR)

In Brazil (LGPD)

Under the General Data Protection Law (Law No. 13,709/2018), you can ask for confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, deletion, information about who we share it with, information about what happens if you don't consent, and withdrawal of consent. You can also object to processing done without consent.

We process usage and crash data based on our legitimate interest in keeping the app running and improving it (you object by turning off “Usage stats” and “Crash reports”, each with its own switch); the free-plan link counter and the Pro purchase to fulfill what was contracted (the terms of use of each version); and identification based on our legitimate interest in handling your data and support requests and preventing abuse of the free limit (you object by sending us a request). You can file a complaint with the Brazilian National Data Protection Authority (ANPD).

In Europe and the United Kingdom (GDPR)

If you're in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR) and local laws apply too. Whoever develops and publishes the app is the controller of the data described here. The legal bases are:

• Usage stats and crash reports: our legitimate interest in keeping the app stable and improving it (art. 6(1)(f)), with minimal data, nothing of what you create and no use for advertising. You can object at any time, to each one separately, by turning off “Usage stats” or “Crash reports” (art. 21).
• Pro purchase and free-plan link counter: performance of a contract (art. 6(1)(b)): these are the terms of use of each version.
• Identification: our legitimate interest in handling your data and support requests and preventing abuse of the free limit (art. 6(1)(f)), with minimal data and no use for advertising. You can object by sending us a request (art. 21).

You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent. The app doesn't make automated decisions that produce legal effects on you. You can also file a complaint with the data protection authority in your country.

How to ask

Since there's no account, we can't find your data by your name or email. In Settings › Privacy › Your data, copy the install code and send it to us (see Contact) telling us what you want. We reply within 15 days.

10. Security and where data lives

What the app sends over the internet goes over an encrypted connection. Google and Apple services may store data on servers outside Brazil and Europe, including in the United States. These transfers follow the safeguards provided for by the LGPD and the GDPR: the standard contractual clauses and the EU-US Data Privacy Framework, which Google and Apple adhere to, under their data protection terms. What stays on the iPhone is protected by iOS's own protections.

So that only the real Stiquer talks to Firebase, the app uses Firebase App Check with Apple's App Attest: the iPhone creates a key stored in its own security chip, Apple confirms it belongs to a genuine copy of the app, and Google receives only that confirmation. Nothing about you goes along, not even what you do in the app. The app also doesn't download anything from links that point to the iPhone itself or to your local network.

11. Children

Stiquer isn't made for children under 13 and we don't knowingly collect data from children. If you're a parent or guardian and you think a child sent data through the app, talk to us and we'll sort it out.

12. Changes to this policy

If the app changes what it collects, this page changes along with it, with a new “Last updated” date at the top. If the change is important, we'll also let you know in the app or on the App Store page.

13. Contact

Questions, requests or complaints about privacy? Write to us: [email protected].