StayPut: Phone Motion Alarm — App Privacy Policy

Who operates the app

StayPut: Phone Motion Alarm is developed by Kangift Ltd.

This App Privacy Policy covers the StayPut iOS and iPadOS app. The separate Website Privacy Policy covers stayputalarm.com.

Information processed by StayPut

StayPut does not require a conventional account and does not ask you to provide your name, email address, phone number, postal address, or other contact details in order to use the app. To provide app functionality, StayPut uses Firebase services that create and retain anonymous app-level identifiers and related device and service information.

Firebase and device information

Firebase Anonymous Authentication creates a persistent anonymous Firebase UID. StayPut also creates and stores an installation or device identifier. StayPut stores device and app metadata in Firebase needed for app functionality, such as platform, device model identifier, OS version, app version and build, locale, preferred languages, time zone, and device display name.

Firebase Cloud Messaging stores and uses an FCM push token and notification authorization or registration state so StayPut can provide notifications. These identifiers and service records are used for App Functionality, not advertising or tracking.

Motion data

StayPut uses iPhone and iPad motion sensors to detect movement during a protection session. Motion sensor samples are processed locally on the device and are not uploaded to Kangift Ltd.

Microphone and custom recordings

Microphone access is requested only when you choose to create a custom alarm sound or heartbeat chirp. Custom alarm and heartbeat recordings are stored locally on your device and are not uploaded to Kangift Ltd.

Face ID and Touch ID

Face ID or Touch ID authentication is handled by Apple's LocalAuthentication framework. StayPut does not receive or store biometric data.

Local app data

App settings, custom recordings, normal protection history, and related configuration are generally stored locally on your device. Firebase-backed service data described in this policy is stored remotely where needed to provide notifications, Remote Alerts, purchase authorization, and linked-device functionality.

Remote Alerts

Remote Alerts are notifications sent between authorized StayPut installations. To operate this feature, StayPut processes linked-device relationships for Send Alerts To and Receive Alerts From, Alert Link invitation and token information, send-to-self settings, sending and receiving enabled state, alarm event identifiers, Remote Alert delivery and result metadata, and generic per-device signal or revision records used to refresh linked-device state.

Alert Links are directional. If one device sends Remote Alerts to another, the reverse direction is not enabled automatically. Remote Alerts do not provide remote location tracking or theft recovery, and the audible alarm happens locally on the protected StayPut device.

Purchases

StayPut Pro is a one-time in-app purchase. Apple processes payment through the App Store. StoreKit remains the source of truth for the local StayPut Pro entitlement, and StayPut mirrors purchase transaction and Pro entitlement information to Firebase so server-side Pro functionality, such as sending Remote Alerts, can be authorized. Kangift Ltd does not receive or store payment card, bank, or payment credential details.

Advertising and tracking

StayPut contains no third-party advertising, does not sell personal information or data, and does not use cross-app or cross-site advertising tracking. Identifiers are used for App Functionality, not advertising or tracking.

StayPut does not use Firebase Analytics, Crashlytics, or Performance Monitoring. StayPut does not collect location, contacts, health or fitness data, browsing history, search history, photos or videos, or general behavioral analytics.

Service providers

StayPut uses Google Firebase and Google Cloud services as service infrastructure for anonymous authentication, database storage of service data, Cloud Functions, and push messaging.

StayPut uses Apple services for App Store purchases, StoreKit entitlement handling, push notification delivery through APNs, and Face ID or Touch ID authentication. StayPut does not provide these services with data for StayPut advertising.

Data retention

Firebase-backed identifiers, linked-device records, Remote Alert service data, and related app functionality records may be retained for as long as needed to provide StayPut functionality, maintain service integrity, and support linked installations.

Apple services

Apple platform and App Store services may process information according to Apple's own privacy policies.

Children

StayPut does not knowingly collect personal information from children.

Changes

This privacy policy may be updated if StayPut's functionality or data practices change.

Contact

For app privacy questions, contact us through the StayPut Support Centre.