legal

Privacy Policy

Effective July 6, 2026

This policy describes what information Reaction Stash ("we," "us") collects when you use the Reaction Stash iOS app (the "Service"), how we use it, and the choices you have.

What we collect

Account information. Your email address (if you sign in with an email code) or the identifier Apple provides (if you use Sign in with Apple), plus the profile you create: handle, display name, bio, and avatar.
Content you upload. Images you save to the Service, along with tags, descriptions, and the albums you organize them into.
Activity. Likes, stashes (saves), follows, follow requests, mutes, and reports you make in the app.
Technical data. Standard server logs (such as IP address and request metadata) generated when the app talks to our backend. We do not collect precise location, contacts, or your photo library beyond the specific images you choose to upload.

How we use it

To operate the Service: storing and serving your images, powering feeds, search, notifications, and the social features you use.
To keep the Service safe: every uploaded image is screened by automated content moderation, uploaded content is scanned for child sexual abuse material, and reports are reviewed by a human.
To communicate with you: sign-in codes and replies to support requests.

We do not sell your personal information, show ads, or track you across other companies' apps and websites.

Who can see your content

Images you make public are visible to other users in feeds, search, and on your profile, and are served from a content delivery network via unguessable URLs. Private images are visible only to you. If your profile is set to private, your images and albums are visible only to followers you approve. Other users can save ("stash") your public images into their own collections.

Service providers

We use a small number of processors to run the Service. Each receives only what's needed for its function:

Supabase — database, authentication, and backend hosting (account data, content metadata, activity).
Cloudflare — image storage and content delivery, including CSAM scanning of stored images.
OpenAI — automated moderation: uploaded images are submitted to OpenAI's moderation API to classify unsafe content. Images are not used to train OpenAI's models.
Apple — Sign in with Apple, if you choose it.

Data retention & deletion

Your data is kept while your account is active. You can permanently delete your account anytime from Settings → delete account inside the app — this deletes your profile, images, albums, and activity from our systems, including stored image files. Reports you filed are retained in anonymized form for moderation records. Residual copies in backups are purged on the backup rotation schedule.

Security

Data is encrypted in transit (TLS) and at rest. Access to production data is limited to what's needed to operate the Service. Image storage credentials never leave our backend — the app uploads via short-lived signed URLs scoped to your own account.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has an account, contact us and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Most of these you can exercise directly in the app (edit profile, delete content, delete account); for anything else, email us and we'll help.

Changes

We may update this policy from time to time. Material changes will be posted here with an updated effective date.

Contact

legal@reactionstash.com · support@reactionstash.com