Back to Stiggy

privacy policy

Last updated: 14 October 2026

In short: Stiggy processes your photos, videos and voice recordings only on your phone. We never see them, sell nothing, show no ads and train no AI with your data. There is no account. The only things that go over the internet are listed below: your subscription status, model downloads and, only if you agree, usage statistics.

1. Controller

Stansday UG (haftungsbeschränkt)
Oberer Kolberg 12, 34212 Melsungen, Germany
Managing director: Stefan Jung
Email: support@stiggy.app

2. The app

2.1 What stays on your device

Stiggy processes this data only on your device. We never receive it:

  • photos and videos you pick, and copies of them in your drafts
  • voice recordings and the sound of your videos, which the captions are made from
  • drafts, text, captions and your corrections to them
  • your club's name, colours and logo
  • imported routes (GPX files)

Cutting out people and speech recognition run on models on your device: Apple's Vision framework on iPhone, Google ML Kit on Android, and the Whisper speech model for captions. These models send your pictures and recordings nowhere. We have switched off the usage logs ML Kit would otherwise send to Google.

If you have backups turned on (iCloud or Google), your operating system may include the app's data in that backup. You control this in your device settings, and Apple's or Google's privacy policy applies.

2.2 Permissions

  • Photos: to pick pictures and videos and to save finished designs to your library
  • Microphone: only when you record your own voice
  • Notifications: only if you set a reminder. Reminders are scheduled on your device. We send no push messages.

Stiggy does not use your camera or your location.

2.3 Subscription status and purchases (RevenueCat)

So that Pro works across your devices and after reinstalling, we use RevenueCat (RevenueCat, Inc., USA) as a processor. When the app starts and when you buy, Stiggy asks RevenueCat whether your subscription is active.

Data: a random, anonymous identifier assigned by RevenueCat, store receipts and subscription data, the product, store country, device type, operating system, app version and the IP address of the request. RevenueCat does not receive your name, email or payment details.

Legal basis: Art. 6(1)(b) GDPR (providing Pro) and, for the check without a purchase, Art. 6(1)(f) GDPR. Our legitimate interest is unlocking Pro reliably.

Transfer to the USA: based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

The purchase and payment are handled by Apple or Google under their own responsibility; see the privacy policies of Apple and Google.

2.4 Downloading the speech model (Hugging Face)

Captions need a speech model (about 190 MB). The app downloads it once from Hugging Face (Hugging Face, Inc., USA), and only when you ask for it. Only your IP address and the usual technical details of a download request are sent, no content. After that the model runs offline. Legal basis: Art. 6(1)(b) GDPR.

2.5 Cut-out model on Android (Google Play services)

On Android, Google delivers the cut-out model through Google Play services. If the model is missing, Stiggy requests it at start-up. Google Play receives the device and app details needed for the download (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). No pictures are sent. Legal basis: Art. 6(1)(b) GDPR, because cut-outs don't work without the model.

2.6 Usage statistics and crash reports (PostHog, only with your consent)

On first start we ask whether Stiggy may send usage statistics. The statistics software is only loaded if you say yes. We use PostHog (PostHog Inc., USA) with servers in Frankfurt, Germany.

Why: to see which features are used, where people get stuck and when the app crashes, so we can make Stiggy better.

Data:

  • a random identifier instead of a name or email
  • which features and screens you use, for example which design, roughly how long a video is, whether an export worked
  • device model, operating system, app version, language, time zone and screen size
  • your approximate country or region, derived from the IP address
  • crash and error reports with technical details. We remove file paths beforehand wherever the app can.
  • answers to short in-app surveys if you answer any, including free text you type yourself
  • subscription events: RevenueCat reports purchases, renewals and cancellations to PostHog under the same identifier

Screen recordings, photos, videos, audio and the text in your designs are never sent.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Withdrawal: at any time in the app's settings. Stiggy then sends nothing more and deletes the statistics data on your device.

Transfer to the USA: the data is stored in the EU. Where PostHog Inc. accesses it from the USA, this is based on the EU Standard Contractual Clauses.

Retention: 24 months at most.

If you are under 16, please ask your parents before you agree.

2.7 Sharing

When you share a design, a sticker or your club style, Stiggy hands the file to your device's share menu. A shared club style contains your club's name, colours and logo. What happens next is up to the app you share with.

3. The website

stiggy.app is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit, GitHub processes your IP address and technical details such as browser and time to deliver the page and protect it from attacks. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a secure, available website. GitHub is certified under the EU-US Data Privacy Framework.

The website sets no cookies, uses no analytics and loads nothing from other providers. Even the fonts are served from our own server.

4. When you write to us

If you email us, we process your address and message to reply (Art. 6(1)(b) or (f) GDPR). We delete them once your request is settled, unless the law requires us to keep them.

5. What we don't do

  • We don't train any AI with your data, and we don't pass it on to anyone for that.
  • We don't sell data and we don't show ads.
  • We don't use advertising or tracking networks.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future.

Because we don't know who you are, we can only find data through the random identifier. Write to support@stiggy.app and we'll help you with that.

You can also complain to a data protection authority, for example the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

7. Changes

If Stiggy gets new features that handle data differently, we'll update this policy. The date at the top shows the current version.