THE STACKMINT

Privacy Policy

Last updated: July 2026  ·  Effective: July 2026

This policy covers every thestackmint product. Family Heath Care and SafeHeir handle sensitive personal data on your behalf; India Pincode & IFSC Finder doesn't require any personal data at all. We never sell, share, or use your data for advertising, in any product.

1. Who we are

thestackmint is a solo software studio building focused apps for everyday life: Family Heath Care (family health records), India Pincode & IFSC Finder (Indian postal & banking code lookup), and SafeHeir (family legacy vault). This policy applies to all three. Contact: [email protected].

2. What data we collect, by product

Family Heath Care

Family Heath Care stores health information you choose to enter:

  • Phone number (OTP authentication); optional email for Google Sign-In; display name and profile photo
  • Medications, dosage schedules, and dose logs
  • Medical appointments and linked doctor/hospital details
  • Vital measurements (blood pressure, blood sugar, weight, oxygen saturation, etc.)
  • Prescription files you upload — nothing else. We intentionally don't accept lab reports, discharge summaries, or any other medical document type, to keep the data we hold to a minimum under HIPAA and GDPR.
  • Family member profiles and caretaker assignment relationships

India Pincode & IFSC Finder

India Pincode & IFSC Finder is a stateless lookup tool. Searching a Pincode, IFSC code, or bank branch requires no account, and we don't collect or store any personal data through it. We may collect aggregated, anonymised usage analytics to keep the service reliable.

SafeHeir

SafeHeir records where your documents, assets, and accounts are kept — never the sensitive details themselves. Data you enter includes:

  • Family member and nominee profiles, including relationship and contact details
  • Asset, property, and bank/investment locations — never account numbers, balances, or passwords
  • Insurance and legal document locations, and photographed copies you choose to store in the Document Vault
  • Emergency access and continuity planner configuration

Technical data (all products)

  • Anonymised crash reports via Sentry (no health or vault data)
  • Subscription plan status and change history, where applicable
  • Security audit logs — retained 90 days

We do not collect advertising identifiers, location data, contact lists, microphone audio, or browsing history, in any product.

3. How we use your data

  • Core app functionality specific to each product — medications, appointments, vitals, and prescriptions for Family Heath Care; vault modules and emergency access for SafeHeir; search results for India Pincode & IFSC Finder
  • Reminders you have enabled
  • Subscription plan enforcement and self-serve plan changes
  • Bug detection and security monitoring
  • Legal compliance

We do not use your data for advertising, profiling, or sale to third parties.

4. Data storage & security

  • Stored in Supabase (PostgreSQL + Object Storage), AES-256 at rest, TLS 1.2+ in transit
  • Row Level Security (RLS) — you access only your own family's or vault's data
  • Private storage buckets — only you, and anyone you explicitly grant access to, can reach your files
  • Certificate pinning, Android FLAG_SECURE, session timeouts, and biometric lock on supported apps

5. Third-party processors

  • Supabase — database, auth, file storage
  • Sentry — anonymised crash reporting (no personal data)
  • Google Sign-In — optional OAuth (no personal data shared beyond what you authorize)

6. Your rights (GDPR — EU/EEA)

  • Access, erasure, portability, restriction, rectification, objection, and consent withdrawal

Email [email protected] — we respond within 30 days.

7. FTC Health Breach Notification (US)

For Family Heath Care, in the event of a breach affecting US residents, we notify each individual and the FTC within 60 days.

8. India DPDPA 2023

We comply with India's Digital Personal Data Protection Act 2023 across all products — collecting only necessary data and enabling account deletion at any time.

9. Data retention

  • Active accounts: retained while active
  • Deleted accounts: all data permanently deleted within 30 days
  • Security logs: 90 days; crash reports: 12 months

10. Children's privacy

Accounts must be created by adults (18+). Contact us immediately if you believe a child under 13 provided data without consent.

11. Changes

Material changes notified via in-app notice at least 7 days before taking effect.

12. Contact

General: [email protected]

Family Heath Care: [email protected]  ·  SafeHeir: [email protected]