Privacy Policy

We collect the following categories of data when you use Stakd:

• Account data: Email address, password (hashed, never stored in plain text), and account creation date.
• Goal data: Goal title, description, goal type (gym or running), target value, stake amount, goal duration, start and end dates, and chosen charity.
• Check-in data: Date and time of each check-in submission, proof photos or screenshots you upload, any notes you attach, and the outcome of each submission (approved, rejected, missed).
• Behavioral outcome data: Whether you succeeded or failed your goal, the number of check-ins completed versus missed, rejection and resubmission history, and time-to-submit patterns. This data is collected to operate the platform and is also used in aggregate, anonymized form as described in Section 4.
• Financial data: Stake amounts, platform fees charged, and donation amounts routed to charity. We do not store full payment card details — payments are processed by third-party providers.
• Usage data: Pages visited, session duration, and browser/device type, collected via standard server logs.

• To operate the platform: Processing your goal commitments, reviewing check-in proof, routing forfeit donations to charity, and sending you email reminders and status notifications.
• To improve the product: Understanding which goal types and stake amounts are associated with higher success rates, identifying friction in the check-in flow, and improving our proof review process.
• For aggregate research and analytics: We analyze anonymized, de-identified outcome data to understand the effectiveness of financial commitment devices. See Section 4 for details on how this data may be shared or licensed.
• Legal compliance: Maintaining records as required by applicable law and responding to lawful requests from authorities.

We do not sell your personal data (name, email, or individually identifiable information) to third parties. We share data only in these circumstances:

• Service providers: We use Supabase (database), Resend (email), and payment processors to operate the platform. These providers access only the data necessary to perform their service and are contractually bound to protect it.
• Charities: When a forfeit is triggered, we share your name and donation amount with the receiving charity for their records. We do not share your email address with charities.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of users or the public.
• Business transfers: If Stakd is acquired, merged, or its assets are sold, user data will be transferred to the acquiring entity. You will be notified via email prior to any such transfer.

Stakd collects outcome data that has significant research and commercial value: specifically, whether users achieve their goals under different financial commitment conditions. This data, in anonymized and de-identified aggregate form, may be:

• Used in published research: Aggregate success rates by goal type, stake amount range, and duration may be shared with academic researchers or published in reports. No individual user is identifiable in this data.
• Licensed to third parties: Anonymized, aggregated behavioral outcome datasets may be licensed to insurance companies, employers, wellness platforms, behavioral economics researchers, or other organizations. This data will never include your name, email, or any directly identifying information.
• Included in a business sale: The aggregate dataset is a business asset. In the event of an acquisition, this dataset — in anonymized form — transfers as part of the business.

By using Stakd, you consent to this use of your anonymized, de-identified outcome data. If you object, you may request deletion of your account and associated data under Section 6.

We retain your personal account data for as long as your account is active. Check-in records and goal data are retained for 3 years after goal completion or account closure to support dispute resolution and financial record-keeping. Anonymized aggregate data derived from your activity may be retained indefinitely as it contains no personally identifying information.

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate data.
• Deletion: You may request deletion of your account and personal data. Note: financial transaction records may be retained for legal compliance even after deletion. Anonymized aggregate data derived from your activity cannot be deleted as it contains no identifying information.
• Portability: You may request your goal and check-in data in a machine-readable format.

To exercise any of these rights, contact us at hello@stakd.com.

Stakd uses session cookies required for authentication. We do not use advertising trackers or third-party analytics cookies. Server logs (IP address, browser type, pages visited) are retained for up to 90 days for security purposes.

We use industry-standard security practices: HTTPS for all data in transit, encrypted database storage via Supabase, hashed passwords, and role-based access controls. No system is completely secure — if you discover a vulnerability, please report it to hello@stakd.com.

Stakd is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

We will notify you by email at least 14 days before any material changes to this policy take effect. Continued use of Stakd after the effective date constitutes acceptance of the updated policy.

Questions about this policy: hello@stakd.com