Stikapika · Kindermochi LLC
Privacy Policy
Last updated · July 8, 2026
Stikapika (the “app”) is operated by Kindermochi LLC. This policy explains what information we collect, how we use it, and the choices you have. Questions? Email hello@kindermochi.com.
What we collect
When you create an account: your email address, a password (stored as a one-way hash by our authentication provider — we never see your password), and an optional display name.
If you sign in with Google or Apple: we receive your email address (and, if the provider shares it, your name) so we can create your account. With Sign in with Apple you may choose to hide your email, in which case we only receive Apple’s private relay address. We never receive your Google or Apple password.
When you use the app: the flashcards (“stamps”) you create — the photo, the labels you type, and the deck’s topic and difficulty — the decks (“collections”) you save, and a small flag in your browser noting you’ve seen the intro animation.
When you send feedback: the message you write, an optional email address if you choose to give one, and basic technical information about your device (browser/user-agent, platform, and which screen you were on) so we can reproduce and fix the issue.
We access your camera only to capture the photo for a stamp, at the moment you tap the shutter. Photos are processed and resized in your browser before being saved. We do not collect your contacts, precise location, advertising identifiers, or continuous device-sensor data.
How we use it
- To let you create, organize, and review your flashcards.
- To sync your saved decks across devices where you’re signed in.
- To read and act on the feedback you send, and to reproduce bugs you report.
- To answer you when you contact us.
We do not sell your data, show you ads, or use your photos or labels to train AI models.
Where it's stored
If you’re signed in: your account and saved decks are stored with Supabase, our database and authentication provider. Data is transmitted over HTTPS.
If you’re not signed in: your decks live only in your browser’s local storage on the device you’re using. They never leave your device.
The app itself is hosted on Netlify, our web host, which receives standard request information (IP address, user agent) to deliver the site.
Who we share data with
We share information only with the third parties needed to operate the app:
| Service | What’s shared | Why |
|---|---|---|
| Supabase | Email, password hash, your saved decks and stamp photos, feedback you send | Account, content, and feedback storage |
| Netlify (web host) | Standard request data (IP, user agent) | Hosting and content delivery |
| Google (only if you use Sign in with Google) | Your email and name, exchanged to sign you in | Authentication you choose |
| Apple (only if you use Sign in with Apple) | Your email (or Apple’s private relay) and name | Authentication you choose |
| MyMemory Translation API | The word or phrase you type into the dictionary lookup | To translate words you ask about |
| Content delivery networks (jsDelivr, Wikimedia) | Your IP address and user agent | To serve fonts and some pack preview images |
We do not currently use analytics, advertising, or error-tracking services. If we add paid features in the future (such as artist packs), payment processing will be handled by Stripe, and this policy will be updated before that launches.
Cookies and local storage
We use only what’s necessary to keep you signed in and to remember your local progress:
- A secure session cookie set by Supabase when you sign in.
localStorageto hold decks created while you’re signed out.- A small
sessionStorageflag for the intro animation.
We do not use tracking or advertising cookies.
Your choices
- Edit or delete a deck: delete any collection from inside the app; it’s removed from our database.
- Delete your account: open Account in the app and tap delete account. This immediately and permanently removes your account, every stamp, and all your photos from our database and storage. It can’t be undone.
- Export your data: email us and we’ll send you a copy of the data tied to your account.
Children
Stikapika is a general-audience learning app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us at the address below and we will delete it promptly.
Accounts are intended for people 13 and older. A child may use Stikapika under a parent’s or guardian’s supervision on that adult’s account; in that case the account and everything in it belong to the adult, who is responsible for it. We don’t offer separate child accounts.
Security
User data is protected by row-level security in our database — accounts can only read or modify their own decks. Sessions and uploads are transmitted over HTTPS. Privileged database credentials are never exposed in the app.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately.
Changes
We’ll update the “Last updated” date at the top of this page when this policy changes. Material changes will be highlighted in the app the next time you open it.
Contact
For privacy questions, account deletion, or data-export requests:
hello@kindermochi.com
Kindermochi LLC