Sticker Llama Privacy Policy

Effective date: October 28, 2026.

Sticker Llama is operated by AZIO Labs Inc. (“we”, “us”, or “our”). This policy explains how we handle information when you use our app, generate and collect stickers, or order printed products. Contact us at [email protected]. Our business mailing address is 1 Hycrest Ave, PH1, Toronto, Ontario M2N 6V8, Canada.

Information we handle

Account information. When you sign in with Apple, we receive an account identifier and, when you choose to share them, your name and email address or Apple relay address. We also store your account preferences, creative profile name, collector stamp, and account security/session information.

Optional welcome survey. You can choose to share an age bracket and where you heard about Sticker Llama. We store these answers with your account to understand our audience and how people discover the app. Both questions can be skipped. We do not ask for your exact date of birth in this survey, and it is not an age-verification check. These answers are removed when account deletion begins.

Photos, prompts, and creations. We process the photos you choose to upload, your text prompts and selected styles, generated images, sticker names, packs, favorites, saved library information, and generation status. Choosing a photo does not give us access to your entire photo library. Camera access is used when you choose to take a photo. Photos may contain information about you or other people; only upload content you have permission to use.

Purchases and orders. We keep credit balances, credit grants and usage, Apple transaction identifiers, payment and refund status, print selections, order records, and customer support communications. For physical orders, we process the recipient’s name, shipping address (including unit number), and contact information needed for delivery. Apple handles in-app credit payments. Stripe handles physical-order payments. We do not receive your full payment-card number from those payment flows.

Technical information. Our service providers and servers process information needed to operate and secure the service, such as network/IP information, request times, device/app information, error records, and service activity. If you enable notifications, we store a device push token, notification preferences, and language information.

Why we use information

We use this information to authenticate your account; generate, store, display and share your selected stickers; manage credits and payments; prepare and fulfill print orders; provide delivery updates and support; prevent fraud and prohibited content; troubleshoot failures; and meet legal and accounting obligations. We use the app’s supported language preference to provide localized content.

We do not sell your personal information or use your uploaded photos or prompts for targeted advertising. We do not use your creations in our marketing without separate permission.

AI processing

Sticker Llama sends the content needed for a generation request—including your selected photo, prompt, and style instructions—to OpenAI for image generation and safety screening. AI processing occurs on external servers, not solely on your device. Only submit content you are authorized to share for this purpose. If you do not want content sent to OpenAI, do not submit it for AI generation.

The provider processes information under its applicable business-service terms and data policies. Its security, abuse-prevention, and legally required retention may differ from the lifetime of files in your Sticker Llama library. Deleting an item from the app does not promise immediate deletion from every provider’s security records or backups. AI outputs may not be unique and may contain mistakes.

Submitting a generation request sends your selected content to OpenAI without a separate AI permission dialog or in-app AI toggle. If you do not want this processing, do not submit a generation request. You can still browse your library and order existing stickers.

Service providers and disclosures

We share only the information needed for the relevant service:

Apple: sign-in, in-app purchases, transaction/refund verification, and push notifications.
OpenAI: generation and safety screening of the content you submit for those features.
Supabase and Fly.io: database, file storage, hosting, and backend operations.
Mixpanel: usage analytics as described below.
Stripe: physical-product checkout, payment processing, fraud prevention, and refunds.
Printful and delivery carriers: printable artwork, order details, recipient address, and contact information needed to manufacture and deliver orders.
Meta: optional advertising measurement, as described below.
Cloudflare: hosting and securing our public website, including processing connection and request information.
Namecheap Private Email: handling support and privacy-request emails.

These providers may process information in countries other than your own, including the United States, where privacy laws may differ. Where required, we use applicable contractual or other safeguards. We may also disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or complete a business transfer subject to appropriate privacy protections.

When you export, save, send, or share a sticker, the destination app or recipient handles its copy under its own practices. We cannot recall copies you have shared outside Sticker Llama.

Retention and deletion

We keep your active library and account information while needed to provide the service. Working uploads and unreferenced generation files are subject to automated cleanup; timing depends on whether a file is still needed for an active job, your library, a print order, or recovery from a failure. We do not promise that deleting a single item instantly removes every stored copy or backup.

You can request account deletion in the app. It removes app access and begins deletion of your personal library and profile. Account deletion does not cancel a physical order. We temporarily retain the order information and artwork needed to finish delivery, resolve cancellation or refunds, and provide required support. We remove that information when no longer needed, subject to legal obligations. We retain limited transaction, refund, security, and deletion-prevention records where needed for accounting, dispute resolution, fraud prevention, or legal compliance. Copies may remain in provider backups until those backups expire. Provider-held payment, fraud-prevention and legally required records may be retained under the provider’s own obligations.

Limited financial records generally need to be retained for at least six years after the end of the last tax year they relate to, and longer where a legal hold or other requirement applies. This does not mean we need to retain your uploaded photos, prompts, or delivery address for that entire period. Limited account identifiers and fraud-prevention records may remain where necessary; these are not necessarily anonymous.

Unused credits become unavailable when your account is deleted. An Apple refund request is separate from account deletion. See our Terms of Service for purchase and credit rules.

Your choices and rights

You can manage photo/camera and notification permissions in device settings, edit supported profile information, remove library items, and request account deletion in the app. You may contact [email protected] to request access, correction, deletion, or information about our handling of your data. We may need to verify your identity. Depending on your location, you may also have rights to portability, restriction, objection, withdrawal of consent, or complaint to a privacy regulator. Withdrawing consent does not undo lawful processing that occurred before withdrawal; some features may no longer work without necessary information.

Children

Sticker Llama is for people aged 13 or older. If you are below the age of majority where you live, you must have permission from a parent or legal guardian, who should review this policy and our Terms with you. The service is not intended for children under 13, and we do not knowingly collect personal information from them. The optional age-bracket survey is not proof of age or parental permission. If you believe a child has provided information contrary to this policy, contact us so we can investigate and take appropriate action.

Security and changes

We use safeguards designed to protect information, but no storage or transmission system can be guaranteed completely secure. We may update this policy as the service changes. We will update the effective date and provide additional notice or seek consent when required for material changes.

Analytics, advertising measurement, and privacy controls

Usage analytics — Mixpanel. We use separate development and production projects hosted in the United States. Data can include selected screen and feature events, generation counts and timings, app language/version, sanitized error categories, review-prompt responses, purchase outcomes, credit quantities, amounts/currencies, and hashed checkout/order references. If you answer the optional survey, the selected age bracket and discovery source may be included in analytics events. The survey can be skipped; usage analytics does not depend on answering it. A pseudonymous identifier derived from your account ID can connect app and server events and an analytics profile; it is not anonymous data. Profiles may contain app metadata, survey completion state, and assigned offer or pricing experiment groups.

We test credit prices, offers, and their timing. We store assignments, eligibility, displayed offers/prices, notification and redemption outcomes, purchases, refunds, and print rewards to administer these features and assess results. Selected server events and experiment profile properties are sent to Mixpanel. We do not send your photos, prompts, email address, delivery address, payment credentials, or free-text content to Mixpanel. Automatic event collection, session replay, and IP-based geolocation are disabled in our integration. Network requests still expose connection information, including IP addresses, to the receiving provider.

Advertising measurement — Meta. Our Release app integration can send app activation and confirmed purchase amount/currency to Meta to measure advertising. The SDK also processes technical connection, app and device information under its applicable terms. We do not explicitly supply Meta with your account ID, email, phone number, photos, prompts, survey answers or delivery address. Our integration disables advertiser-ID collection, automatic event/purchase logging, metadata matching and product-improvement logging, and limits event use through the SDK settings. Meta's attribution mechanisms may include Apple's SKAdNetwork. These restrictions do not mean that no data is sent to Meta.

Usage analytics and separate permissions. Mixpanel usage analytics is enabled by default for all active accounts, including app events and selected server events. The app does not provide a Mixpanel consent prompt or an in-app switch to disable usage analytics. Optional survey participation, notification preferences are separate; changing those choices does not disable Mixpanel. Account deletion stops future account activity, but does not automatically erase historical analytics. Essential account, payment, fraud-prevention and order records, and records needed to administer an assigned price or offer, are processed for those purposes.

The current app does not offer a Privacy & data menu or an advertising measurement toggle. The Meta integration remains gated by a previously stored, account-specific advertising permission and iOS tracking authorization; removing the menu does not enable advertising measurement. You can revoke iOS tracking authorization in Settings. Older app versions may use different advertising settings. Contact us if you need help with an older version.

Historical analytics and diagnostics. Historical Mixpanel events and Meta event records remain with those providers after you delete your Sticker Llama account; account deletion does not automatically erase provider history. Retention remains subject to provider retention settings, applicable legal obligations and applicable privacy rights. For privacy questions or to exercise your rights, contact [email protected]. We use Sentry to diagnose app crashes and service errors. Reports include technical stack traces, app version, environment and operation categories. We remove account details, request data, screenshots, breadcrumbs and original error messages from error reports. App error reporting is enabled alongside usage analytics; server operational error reporting is separate. Sentry data is stored in the United States and is subject to provider retention settings. Deleting your account does not automatically delete diagnostic reports. Hosting, authentication, payment and fulfillment providers also process operational and security data necessary for their services.

Notifications, purchase privacy, and website visits

We store device push tokens, notification preferences, language, device timezone and App Store storefront information where needed for delivery and offer eligibility. Promotional notifications have a separate opt-in that you can withdraw in the app; system notification permission alone is not consent to promotions.

Apple refund reviews and purchase acceptance. The purchase screen explains that tapping Buy accepts these Terms and authorizes us to share credit delivery, consumption, preview availability and our refund recommendation with Apple to help it assess refund requests. This sharing is enabled when you act on that notice, unless you have already opted out. We record your account identifier, accepted terms version, acceptance time and the purchase-button source. We do not enable sharing merely because you open the app or read this policy. Existing opt-outs remain in effect after later purchases. You can disable or re-enable sharing in More → Purchase privacy; opting out does not prevent purchases and stops future reports, but does not recall reports already sent to Apple. We do not send your photos, prompts or sticker artwork in these refund reports. We may recommend declining a refund when all purchased credits were consumed, but Apple decides and applicable consumer rights remain unaffected.

Our public website is hosted by Cloudflare, which processes request and connection information to deliver and secure the site. We have not added advertising pixels, analytics cookies or a website analytics SDK. Messages you send to our support or privacy addresses are processed by our email provider and retained as needed to answer your request and keep necessary support or compliance records.

Contact and complaints

For privacy requests or complaints, email [email protected], addressed to the Privacy Officer, AZIO Labs Inc., 1 Hycrest Ave, PH1, Toronto, Ontario M2N 6V8, Canada. For app or order support, email [email protected]. Please give us enough information to identify your request, but do not send passwords or full payment-card details. You may also contact the privacy regulator responsible for your location; this does not limit your statutory rights.