Privacy Policy

Stuffidy

Operated by Stellaark, LLC

Last Updated: July 25, 2026

Stellaark, LLC operates Stuffidy, a peer-to-peer marketplace that allows users to buy, sell, and rent items. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Stuffidy, including the mobile application, the website located at www.stuffidy.com, related marketplace features, and related support and communications services.

By using Stuffidy, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the service.

1. Who We Are

Stuffidy is operated by Stellaark, LLC.

For privacy or support questions, or to submit an account deletion request, you may contact:

Support and Privacy Email: support@stuffidy.com

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect through Stuffidy, including:

The Stuffidy mobile application for iOS and Android;
The Stuffidy website and related web services;
User accounts, listings, photos, chats, reviews, ratings, public profiles, purchases, rentals, and marketplace transactions;
Customer support, security, moderation, and fraud-prevention functions; and
Transactional and marketing communications, including email, SMS/MMS, push notifications, and in-app messages.

This Privacy Policy does not apply to third-party services that are governed by their own privacy notices.

3. Personal Information We Collect

We collect personal information you provide to us, information generated through your use of Stuffidy, and certain information collected by service providers that help us operate the platform.

3.1. Account and Contact Information

We collect information such as your name, username, account ID, email address, phone number, mailing address, and other account profile information when you register for and use Stuffidy.

3.2. Payment and Transaction Information

Stuffidy facilitates marketplace transactions, rentals, payouts, and certain promoted listing payments. Payment card and bank details are handled by Stripe or applicable in-app purchase providers and are not accessed directly by Stuffidy for payment processing purposes. We may receive and store transaction-related information such as payment status, transaction amounts, purchase or rental details, payout information, and related records needed to operate the marketplace, provide support, prevent fraud, and comply with legal obligations.

3.3. Location Information

Stuffidy uses location information to provide locally relevant marketplace features. Users may manually provide ZIP code information. Users may also choose to allow the app to detect precise device location automatically. If a user does not grant location permission, certain automatic location features may be unavailable, but manual ZIP code entry may still be used where supported.

3.4. Photos, Videos, and Listing Content

We collect photos, videos, listing descriptions, titles, and related content that users upload or submit to create and maintain marketplace listings.

3.5. Messages, Chats, and Communications

We collect messages, chat content, support communications, transaction updates, account notices, and related communication records in connection with the operation of the platform.

3.6. User-Generated Content

Stuffidy collects and displays user-generated content, including listings, images, descriptions, public profile information, reviews, ratings, and marketplace interactions.

3.7. Usage, Device, Log, and Diagnostic Information

We may collect device, session, log, diagnostic, crash, and usage information to maintain, secure, troubleshoot, improve, and monitor Stuffidy.

3.8. Moderation and Safety Information

Stuffidy uses backend moderation tools to review listing content for policy violations, including possible mismatches between listing photos, titles, and descriptions. This review may involve analysis of uploaded content and related listing metadata.

4. How We Collect Personal Information

We collect personal information in the following ways:

Directly from you, when you create an account, complete your profile, list an item, upload media, send a message, complete a transaction, request support, or otherwise use Stuffidy;
Automatically through your use of Stuffidy, including through logs, diagnostics, session data, usage metrics, and service monitoring tools;
Through device permissions, such as location, camera, photo or media library, and notifications permissions; and
Through service providers, including payment, communications, hosting, storage, analytics, and security vendors that support the platform.

Stuffidy does not use cross-app behavioral tracking for advertising and does not use App Tracking Transparency for targeted advertising.

5. App Permissions

Stuffidy may request the following device permissions:

Permission	Purpose	Required or Optional	Effect if Denied
Location	To detect a user's location automatically and show locally relevant content	Optional	Users may need to enter ZIP code manually and certain automatic location features may not work
Camera	To take photos of items for listings	Optional for users who want to take photos in-app	Users can still use other features, but camera-based listing functions may be unavailable
Photos or Media Library	To upload existing photos for listings	Optional for users who want to upload existing media	Users can still use other features, but media upload from the library may be unavailable
Notifications	To send account, transaction, and service updates	Optional	Users may not receive push updates through the app

Where available, Stuffidy may use privacy-preserving alternatives, such as system pickers or secure device storage.

6. How We Use Personal Information

We use personal information for the following purposes:

6.1. Account Creation and Management

To create accounts, authenticate users, manage profiles, verify email addresses and phone numbers, and administer platform access.

6.2. Marketplace Operations

To enable users to list items, browse listings, communicate with each other, complete purchases, rentals, payouts, promoted listings, and related marketplace functions.

6.3. Payments and Financial Operations

To support payment processing, in-app purchases, payouts, refunds, accounting, fraud prevention, and related compliance functions.

6.4. Communications

To send transactional emails, customer support responses, account notices, service messages, marketing emails, SMS/MMS messages, push notifications, and related communications.

6.5. Personalization and Local Relevance

To show locally relevant content and improve marketplace relevance based on location information, listing activity, search behavior, and usage patterns.

6.6. Safety, Security, and Fraud Prevention

To protect users and the platform, detect abuse, enforce our policies, maintain logs, investigate incidents, and preserve platform integrity.

6.7. Content Moderation

To review listings for possible policy violations or mismatches between uploaded images and listing text. Stuffidy uses a multimodal AI model solely for backend moderation support. AI flags are routed to a human moderator queue, and the model does not make final automated enforcement decisions.

7. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

7.1. Service Providers and Infrastructure Vendors

We may disclose personal information to vendors and service providers that support Stuffidy's operations, including:

Twilio, for email and phone verification;
Stripe, for payment processing, payouts, webhooks, and transaction services;
Resend, for transactional and marketing email delivery;
Google AdMob, for non-personalized contextual advertising within the app;
Apple StoreKit, for iOS in-app purchase functionality;
PostHog, for PII-free analytics and product usage insights;
Sentry, for crash reporting and error monitoring configured to avoid collecting directly identifying information where practicable;
MongoDB Atlas, for database hosting and storage; and
Cloudinary, for media storage and delivery.

7.2. Other Users and Public Content

Because Stuffidy is a marketplace, information you choose to publish through listings, public profiles, reviews, ratings, and similar features may be visible to other users or the public.

7.3. Advertising

Stuffidy displays non-personalized contextual advertisements. Stuffidy does not use behavioral tracking across third-party apps or websites for targeted advertising, does not use App Tracking Transparency for targeted advertising, and does not share personal information for cross-context behavioral advertising based on current practices.

7.4. Legal, Safety, and Compliance Disclosures

We may disclose personal information where necessary to comply with law, legal process, government requests, law enforcement requests, fraud investigations, safety concerns, enforcement of our terms, or protection of the rights, property, or safety of Stuffidy, Stellaark, LLC, our users, or others.

7.5. Business Transfers

We may disclose or transfer personal information in connection with a merger, acquisition, reorganization, financing, sale of assets, bankruptcy, or similar transaction.

8. Retention and Deletion

We retain personal information for different periods depending on the type of data and the purpose for which it is used.

Data Category	Retention While Account Is Active	Treatment After Account Deletion
Account Data (name, email, phone, passwords)	Life of account	Permanently deleted within 30 days
Listings and Photos	Life of account	Permanently deleted within 30 days
Messages and Chat Logs	Life of account	Anonymized so chat context may remain for the remaining counterparty without exposing personal information
Transaction and Financial Records	7 years	Retained for 7 years for tax, legal, fraud-prevention, and compliance purposes
Server Logs	30-90 days	Overwritten on a rolling schedule
Database Backups	30 days	Overwritten on a 30-day rolling rotation
Fraud and Security Records	As needed for platform integrity	May be retained in anonymized form, including device or phone hashes and ban records, to prevent abuse and account re-creation by bad actors

When you delete your account, certain information may be retained where necessary for legal compliance, tax obligations, fraud prevention, security, dispute resolution, enforcement of agreements, or platform integrity.

9. Account Deletion and Privacy Requests

Users can request deletion of their Stuffidy account and associated data through the in-app settings menu. Users may also email support@stuffidy.com to request account deletion.

Users may also contact Stuffidy regarding access, correction, deletion, portability, or other privacy rights that may apply under U.S. law. Stuffidy generally aims to process privacy requests within 30 days, subject to extensions or exceptions permitted by applicable law.

We may take reasonable steps to verify the identity and authority of the requesting person before fulfilling a request. Depending on the nature of the request, verification may include confirming account access, matching account records, confirming contact details, or requesting additional information reasonably necessary to authenticate the request. If an authorized agent submits a request on a user's behalf, we may require proof of authority and may still require the user to verify their identity directly where permitted by law.

If we decline to take action on a privacy request, and applicable law provides an appeal right, the requester may appeal by replying to our decision notice or by emailing support@stuffidy.com with the subject line Privacy Rights Appeal within a reasonable period stated in the notice.

10. Your Choices

Depending on your location and applicable law, you may have the ability to:

Access or review certain personal information;
Correct or update account information;
Request deletion of your account and associated data;
Request a copy of certain personal information in a portable format where applicable;
Opt out of marketing emails using the unsubscribe link in the email;
Opt out of SMS/MMS marketing by following the instructions in the message;
Disable push notifications in your device or app settings; and
Adjust device permissions, including location, camera, and photo access.

Stuffidy currently uses non-personalized contextual advertising and does not sell personal information or share personal information for cross-context behavioral advertising based on current practices. If Stuffidy later engages in processing that requires an opt-out right under applicable law, we will provide the corresponding mechanism required by law.

If you disable certain permissions or delete certain information, some features may not function as intended.

11. Marketing Communications

Stuffidy may send transactional emails, marketing emails, SMS/MMS messages, push notifications, and in-app messages. Transactional and service-related messages may continue as needed to operate the platform and fulfill marketplace functions.

Users are responsible for keeping their contact information current. Consent to receive marketing or promotional messages may be withdrawn using the methods described in the message or within account settings where available.

12. Security

Stuffidy uses administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards include:

Encryption in transit using TLS 1.2+ for communications between mobile clients, APIs, and third-party services;
Encryption at rest for databases and cloud media storage, including AES-256 volume encryption for supported systems;
Password hashing using bcrypt;
Hardware-backed secure storage for mobile session tokens, such as iOS Keychain and Android Keystore;
Mandatory administrative multi-factor authentication across administrative platforms and dashboards;
Role-based access controls and signed short-lived JSON Web Tokens for system access;
Least-privilege and network isolation controls, including IP allowlisting and VPC-based protections for production systems;
Security monitoring and incident response procedures; and
Vendor and SDK review procedures designed to evaluate material changes in data access, permissions, and disclosed practices before release.

Stuffidy maintains a documented incident response process that includes detection, containment, eradication and recovery, and notification procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Operational Enforcement, Trust and Safety, and Investigations

To protect users, the marketplace, and Stellaark, LLC, Stuffidy may review listings, accounts, reports, transaction activity, support communications, and related platform records for trust and safety, fraud prevention, policy enforcement, payment integrity, and legal compliance purposes.

Stuffidy may use a combination of automated signals, human review, moderation queues, transaction monitoring, audit logs, payment processor alerts, and user reports to investigate suspected misconduct or policy violations. Where appropriate, Stuffidy may preserve relevant records, restrict visibility of content, remove listings, place holds on transactions or payouts, disable promoted content, limit account functionality, or suspend or terminate accounts.

Stuffidy may also cooperate with payment processors, app platforms, service providers, insurers, legal authorities, and law enforcement where reasonably necessary to investigate fraud, abuse, safety issues, chargebacks, policy violations, or legal claims.

14. Children and Age Restrictions

Stuffidy is intended for users 18 years of age or older. Stuffidy is not directed to children under 13 and does not knowingly collect personal information from children under 13. If we learn that personal information from a child under 13 has been collected without appropriate consent, we will take reasonable steps to delete it.

15. U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable law. Depending on the user's state of residence and applicable legal thresholds, those rights may include the right to:

Confirm whether we process personal information;
Access personal information;
Correct inaccuracies in personal information;
Delete personal information, subject to legal exceptions;
Obtain a copy of certain personal information in a portable format;
Opt out of the sale of personal information, targeted advertising, or certain profiling activities where those rights apply; and
Appeal a decision we make about a privacy request.

Stuffidy currently uses non-personalized contextual advertising and does not sell personal information or share personal information for cross-context behavioral advertising based on current practices. If our practices change in a way that creates additional opt-out rights, we will update this Privacy Policy and provide any rights mechanism required by applicable law.

Users may submit privacy-rights requests by emailing support@stuffidy.com or, where available, through in-app account tools. We may deny a request in whole or in part where an exemption or exception applies, where we cannot verify the request, or where the law does not require the requested action.

We will not discriminate against users for exercising applicable privacy rights, except to the extent differential treatment is permitted by law and reasonably related to the value or functionality of the service.

16. International Users and Future Expansion

Stuffidy is expected to launch in the United States only. Support for other countries or regions may be added later.

If Stuffidy expands outside the United States, Stellaark, LLC may publish supplemental or region-specific privacy notices, update in-app and app-store disclosures, modify consent or notice flows, implement additional data-transfer or localization measures, designate additional contact channels or representatives where required, and offer additional privacy rights or request mechanisms where required by applicable law.

Until such region-specific notices are published, Stuffidy is intended only for jurisdictions where its current disclosures and operations are made available by Stellaark, LLC.

17. Analytics, SDKs, and Tracking Technologies

Stuffidy uses certain SDKs, APIs, and similar technologies to operate the platform, process payments, deliver in-app purchases, monitor errors, support advertising, and understand product usage. These may include Stripe, Apple StoreKit, Google AdMob, PostHog, Sentry, and similar supporting technologies.

Based on current practices:

Google AdMob is used for non-personalized contextual advertising;
Apple StoreKit supports iOS in-app purchase functionality;
Stripe supports payment processing, payouts, webhooks, and related transaction services;
PostHog is configured for analytics and observability in a manner intended to avoid collecting directly identifying information through that tool where practicable; and
Sentry is configured for crash reporting and error monitoring in a manner intended to avoid collecting directly identifying information through that tool where practicable.

Stuffidy does not use App Tracking Transparency for targeted advertising and does not use cross-app behavioral advertising tracking based on current practices. If a vendor, SDK, permissions configuration, or data flow materially changes, we will review the change, update this Privacy Policy if needed, and update any corresponding app-store or platform disclosures before release or as otherwise required.

18. App Store and Google Play Disclosures

Stuffidy's Apple App Privacy disclosures, Google Play Data Safety responses, permissions disclosures, and other platform-facing privacy statements are intended to reflect the data practices described in this Privacy Policy.

Based on current practices, those platform disclosures are intended to remain aligned with:

Account and contact information used for account creation, support, and communications;
User-generated content such as listings, photos, messages, reviews, and marketplace interactions;
Payment, purchase, payout, and transaction-related information processed through Stripe or applicable in-app purchase tools;
Optional location information used for local marketplace relevance;
Diagnostic, crash, and product-usage information processed through approved observability tools; and
Non-personalized contextual advertising rather than cross-app behavioral advertising.

If Stuffidy changes its vendor stack, SDK configuration, permissions usage, data collection behavior, ad configuration, deletion workflow, or other platform-relevant practices, Stellaark, LLC will update the applicable app-store disclosures, policy language, and platform-facing notices as needed. If an app platform requires a separate public deletion page, support URL, or externally accessible privacy-rights resource, Stellaark, LLC will publish or update that resource to maintain platform compliance.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will revise the "Last Updated" date above and may provide additional notice where appropriate.

20. Contact Us

If you have questions about this Privacy Policy or Stuffidy's privacy practices, please contact us at:

Support and Privacy Email: support@stuffidy.com