Privacy Policy

This Privacy Policy explains how StacksClub Pty Ltd (ACN 697 102 417) (“StacksClub”, “we”, “us”) collects, holds, uses and discloses personal information through the StacksClub app and website, and the choices you have about your information. It applies to everyone who uses StacksClub. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

StacksClub is operated by StacksClub Pty Ltd (ACN 697 102 417). StacksClub is a free financial literacy app for young Australians, built around weekly lesson content completed together in small accountability groups (“squads”).

We currently collect a deliberately small amount of personal information:

• Your email address, and either a password or an authentication token, so you can create and access your account.
• A self-declaration that you are 13 or over.
• A nickname you choose yourself, your squad membership, and your lesson-completion status as visible to your squad.
• Anything you send us directly — for example, if you email support.

Note: We do not currently collect your real name, date of birth, bank account information, financial data, or device analytics data beyond the basic crash/error logging and cookieless page-view analytics described in sections 7 and 11. We also don't currently offer a journal feature. If we add a journal, it will be private to you only — never visible to your squad, our staff beyond what's needed to run the service, or any partner. If we ever add bank-account connections or personalised financial insights, we will update this Privacy Policy in full and ask for your consent before collecting or using that new information — we won't fold it quietly into this general policy.

• Directly from you, when you create an account, complete lessons, or contact support.
• From other squad members, indirectly — your squad can see your nickname and whether you've completed the current week's lessons, because that visibility is how the squad accountability mechanic works.

StacksClub does not connect to your bank account and does not collect any financial information — no account balances, no transaction history, no banking credentials, and (currently) no self-reported figures either. This isn't planned to change for the foreseeable future. If that ever changes, this section will be rewritten in full, with its own separate consent process, before any such feature is released.

StacksClub's core mechanic organises users into squads of up to five people who move through lesson content together. Within your squad, other members can see your nickname and whether you have completed the current week's content. They cannot see your email address or any other account information.

The app is built with Expo, which automatically collects basic crash and error logs through Expo Application Services (EAS) to help us diagnose and fix technical problems. This telemetry is limited to crash and error data — it does not include personal information such as your email address, nickname, or lesson activity. Expo Application Services is operated by 650 Industries, Inc. (“Expo”), a US company, and crash log data may be processed and stored in the United States. The StacksClub website separately uses Vercel Analytics, a cookieless page-view-counting service — see sections 11 and 19 for details.

• To create and operate your account and the squad/lesson features.
• To let your squad see the nickname and completion status necessary for the group-completion mechanic to work.
• To fix bugs and improve the app.
• To respond to support requests.
• Where you separately opt in in the future, to build de-identified, aggregated engagement statistics that we may share with institutional partners (such as universities or superannuation funds) — never your individual identity or account details.

StacksClub does not use AI to generate financial recommendations or personalised insights, and has no plans to for the foreseeable future. Quiz scoring and lesson-progress tracking involve simple, rule-based automated processing (for example, marking a lesson complete once quiz criteria are met) — this does not involve profiling you or making a decision that significantly affects your legal rights or financial position.

We disclose personal information only:

• To your own squad, for the limited nickname/completion-status information described in section 6.
• To service providers who help us run the app (for example, our hosting provider), under contractual confidentiality obligations, and only for the purpose of providing their service to us.
• To institutional partners, only in de-identified, aggregated form, and only where you have separately opted in.
• Where required by law, for example in response to a valid legal request.
• If StacksClub is involved in a merger, acquisition or sale of assets, in which case personal information may be transferred as part of that transaction, subject to the same protections in this Privacy Policy (or you being notified of any material change).

We do not sell your personal information.

We use the following service providers to help us run StacksClub:

• Backend and database hosting: Convex (Convex, Inc.) — United States
• Website hosting and deployment infrastructure: Vercel Inc. — United States
• Email and notifications: Resend — United States
• Website analytics: Vercel Analytics (Vercel Inc.) — United States. This is a cookieless service that only records aggregated page-view counts; it does not use cookies, does not set any tracking identifier, and does not collect your account information.
• Crash-reporting: none, beyond the basic Expo Application Services crash/error logs described in section 7 above.

Each provider is engaged under contractual confidentiality obligations and only processes personal information for the purpose of providing their service to us.

Yes. Our backend/database provider (Convex), our website hosting and analytics provider (Vercel), and our email/notification provider are all United States companies, and personal information may be stored or processed on servers located in the United States. Before disclosing personal information to these overseas recipients, we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles, including through their own privacy and security commitments. If you have questions about a specific provider's data handling, contact us at team@stacksclub.com.

We take reasonable technical and organisational steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure, consistent with Australian Privacy Principle 11. No system is completely secure, and we cannot guarantee absolute security. We maintain an internal process for responding to any data breach, consistent with the Notifiable Data Breaches scheme under the Privacy Act, and will notify affected users and the Office of the Australian Information Commissioner where a breach is likely to result in serious harm.

We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law. If you delete your account, we delete or de-identify your personal information within a reasonable period (we intend this to be 30 days, to allow recovery from accidental deletion), except where we are required to retain limited information for legal or accounting purposes.

You can access and correct most of your information directly in the app. For anything you can't change yourself, contact us at team@stacksclub.com. We will respond within a reasonable time and won't charge you for a reasonable access or correction request.

You can delete your account at any time in the app. This removes your access to your squad and lesson progress, and your personal information is deleted or de-identified in line with section 14. Deleting your account does not automatically delete de-identified, aggregated data already shared with institutional partners, because that data no longer identifies you.

If you have a concern about how we've handled your personal information, contact us first at team@stacksclub.com so we can try to resolve it. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We will only send you marketing communications if you opt in, and you can opt out at any time using the unsubscribe link in any marketing email or by contacting us. We may still send you essential service communications (such as security notices) even if you opt out of marketing.

The StacksClub marketing website does not use cookies for advertising or tracking. The one piece of technology in use is Vercel Analytics, which is cookieless by design — it does not set cookies or any tracking identifier, and only records aggregated, anonymous page-view counts. See section 11 for details.

StacksClub is intended for users aged 13 and over. We do not knowingly collect personal information from anyone under 13. Our signup screen uses a neutral date-of-birth check (rather than a simple yes/no age checkbox) to screen for this, consistent with US Children's Online Privacy Protection Act (COPPA) guidance on age-screening design — this matters because StacksClub is available globally on the App Store, not just in Australia, and COPPA can apply to any app a US under-13 can access, regardless of where the company is based. If someone is identified as under 13 during signup, we don't create an account or store any of the information they entered. If we later become aware that we've collected personal information from someone under 13, we will delete it. There is no in-app messaging or direct contact between users — squad members can only see a nickname and lesson-completion status, never a way to contact each other directly.

We may update this Privacy Policy from time to time. If we make a material change, we will notify you in the app or by email before the change takes effect. The “last updated” date at the top of this policy always reflects the current version.

For privacy questions or general support, contact team@stacksclub.com.