Who's responsible for your data
Stander is operated by Mag. Andreas Stadlmayr, BA, Bräugütlweg 4, 4810 Gmunden, Austria. For any question about this policy or your data, contact hello@stander.app.
What we collect
Stander is a point-of-sale app for events, market stalls, and pop-up shops. To provide it, we collect:
- Account data — your name, email address, and password (stored securely as a hash, never in plain text).
- Event and product data — the events, products, prices, and settings you create in the app.
- Sales data — transaction records generated when you use the app to sell: amounts, timestamps, and payment method.
- Photos — product images you choose to add, and camera access when you scan a team invite QR code.
- Subscription status — which plan you're on. Payment itself is handled entirely by Apple or Google; we never see or store your card details.
- Team data — if you invite teammates to an event, their account is linked to that event so you can sell together.
Why we collect it
We use this data only to run the app: to store and sync your events, products, and sales across your devices, to manage your subscription, to send account emails (like confirming your address or resetting your password), and to provide support if you contact us.
Who else sees it
We don't sell your data. A few specialist services process it on our behalf, strictly to run the app:
- Supabase — hosts our database, authentication, and file storage.
- RevenueCat — manages subscription status across the App Store and Google Play.
- Apple App Store / Google Play — handle app distribution and all payments.
- Resend — delivers account-related emails (confirmation, password reset).
Some of these providers may process data outside the EU/EEA. Where that happens, we rely on their standard contractual safeguards for international transfers.
How long we keep it
We keep your data for as long as your account is active. If you delete your account, your personal data is removed within a reasonable period, except where we're required to retain records for legal or accounting purposes.
Your rights
Under the GDPR, you have the right to access, correct, or delete your data, to restrict or object to its processing, and to receive a copy of it in a portable format. To exercise any of these, email hello@stander.app. You also have the right to lodge a complaint with the Austrian data protection authority (Datenschutzbehörde).
Children
Stander is intended for business use and is not directed at children under 16.
Changes to this policy
If we change how Stander handles data, we'll update this page. The date at the top always reflects the current version.