Card information stays local
Card information you enter, including bank name, cardholder name, card number, expiry date, CVV, network, card type, and appearance, is stored only within stack on your Android device.
The vault is encrypted with AES-GCM using a key protected by Android Keystore. stack does not upload card information to Firebase, our servers, cloud backup, analytics, or advertising services.
Account information
If you sign in, Firebase Authentication processes information required by your chosen sign-in method:
- Google: account identifier, email address, and display name.
- Email: email address, authentication identifier, and display name.
- Phone: phone number and authentication identifier.
Passwords and SMS verification codes are handled by Firebase Authentication and are not stored by stack.
Purchases and subscriptions
Google Play processes premium purchases and may process payment method, transaction, country, tax, and billing information under Google's privacy terms. stack receives purchase status and product information needed to unlock premium access. We never receive your full payment-card details.
Retention and deletion
- Local card data remains until you delete it, clear app storage, or uninstall stack.
- Firebase account information remains until your account is deleted.
- Google Play retains purchase records under its billing and legal requirements.
- Support messages are kept only as long as needed to resolve requests or meet legal obligations.
Signing out does not delete cards because cards belong to the local device vault, not the online account.
Security and contact
stack uses Android Keystore-backed encryption, device authentication for sensitive actions, screen protection in release builds, encrypted local preferences, clipboard clearing, and disabled cloud backup for the card vault.
No security method can guarantee absolute protection, particularly on rooted or compromised devices. stack is not directed to children under 13.
Privacy questions can be sent to yoursupportstack@gmail.com.