Privacy Policy

Last updated: May 4, 2026

BeautyStack ("we," "us," "our") is an iOS app and web service operated from the United States. This privacy policy describes the personal information we collect, how we use it, who we share it with, and the choices you have. We've kept the language plain on purpose — privacy policies should be readable.

What we collect

Account information. When you sign up for BeautyStack, we collect your email address, a username, and either a password (for email signup) or an Apple/Google identifier (for social sign-in). For social sign-in, the provider also gives us your email and, in the case of Google, optionally your display name and profile picture.

Profile information. Anything you choose to add to your profile — display name, bio, profile photo — and the products, stacks, and wishlist items you create. Stacks are private by default; you choose whether to make any of them public.

Device and usage data. When you use the app or website, we automatically collect technical information including device type, operating system version, IP address, app version, and event logs (which screens you viewed, what features you used). This is for security, analytics, and product improvement.

Affiliate click data. When you tap a "Buy" or affiliate link, we record that the click happened so we can attribute commissions and improve product surfacing. We do not sell or share this data with third parties beyond the affiliate networks themselves.

Affiliate networks and tracking

BeautyStack participates in affiliate programs that allow us to earn commissions when users purchase products through our app or website. To enable this, we partner with affiliate networks who may collect personal information when you interact with our affiliate links.

How we use your information

• To provide the BeautyStack service — account access, social features, deal alerts, search
• To communicate with you — service updates, security alerts, password resets, deal notifications you've opted into
• To improve the product — understand what features are used, fix bugs, plan new features
• To prevent fraud and abuse — detect spam accounts, enforce our Terms of Service
• To attribute affiliate commissions — record that a click came from BeautyStack so we get paid
• To comply with legal obligations

Who we share with

We do not sell your personal information to anyone.

We share necessary information with:

• Service providers we use to operate BeautyStack — hosting (Cloudflare), database (Neon), email (Google Workspace, Resend), authentication (Apple, Google), analytics, and affiliate networks listed above. These providers are contractually limited to using your data only to perform services for us.
• Public profile data — if you make a stack or profile public, anyone can view it. By default, your stacks are private.
• Legal requirements — we'll disclose information when required by law, court order, or to protect rights and safety.
• Business transfers — if BeautyStack is acquired or merges with another company, your information would transfer as part of that. We'd notify you before any such transfer takes effect.

Cookies and similar technologies

The BeautyStack website uses cookies and similar technologies to keep you logged in, remember preferences, and analyze how the site is used. Affiliate network partners may also set cookies when you click affiliate links — those cookies are governed by the partner privacy policies linked above.

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

Your rights and choices

• Access and edit. View and edit your account information any time in app settings.
• Privacy controls. Choose which stacks are public versus private. Default is private.
• Marketing emails. Opt out via the unsubscribe link in any marketing email. Service-related emails (security, password resets) cannot be opted out without closing your account.
• Account deletion. Email hello@beautystack.app from your account email and we will delete your data within 30 days. Some information may be retained for legal compliance — see "Data retention" below.
• California residents (CCPA). You have the right to know what personal information we collect, request deletion, and opt out of "sale" of personal information (we don't sell). Contact hello@beautystack.app for any of these requests.
• EU residents (GDPR). You have rights to access, correct, delete, and restrict processing of your personal data. Contact hello@beautystack.app for any of these requests.

Data retention

We keep your account information as long as your account is active. After account deletion, we delete personal data within 30 days, with limited exceptions for legal compliance (transaction records for tax purposes, etc.) or to prevent abuse.

Children's privacy

BeautyStack is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we've collected information from a child under 13, contact hello@beautystack.app and we will delete it.

Security

We use industry-standard security measures: TLS in transit, encryption at rest for sensitive fields, modern password hashing (Argon2), and audit logging on authentication events. No system is perfectly secure, but we take this seriously.

Changes to this policy

We'll update this policy when our practices change. The "Last updated" date at the top will reflect the latest version. Material changes will be communicated via email and in-app notification.

Contact

Questions, requests, or concerns? Email hello@beautystack.app.