PRIVACY POLICY

Last Updated: July 1, 2026

This Privacy Policy describes how Samoremi LLC ("we," "us," or "our") handles information in connection with RefStage ("the App").

SUMMARY

RefStage is a local-first application. Your privacy is protected by design. We include anonymous error tracking (enabled by default) to help us fix bugs, and optional anonymous analytics to help improve the App. The App also contacts a server we operate to check for required updates and, on Android, to verify your license — these checks transmit no personal information and no user content. No personal information is ever collected — only technical data needed to diagnose issues, keep the App up to date, and confirm it was obtained through an authorized channel.

1. INFORMATION WE DO NOT COLLECT

RefStage does not collect:

  • Personal information (name, email, address, etc.)
  • Device identifiers
  • Location data
  • Any user content (images, notes, file names, etc.)

    • 2. ANONYMOUS ERROR TRACKING

    RefStage includes anonymous error tracking powered by Sentry. This feature is enabled by default to help us identify and fix bugs across all platforms.

    When enabled, we collect:

  • Error messages and stack traces (absolute file paths and file names are redacted before sending)
  • Operating system type and version
  • App version and build number
  • Device type (desktop or mobile), CPU core count, and available RAM
  • System locale, Dart runtime version, and a coarse device processing tier
  • A randomly generated anonymous ID (not linked to any personal information)
  • An internal error reference code (the short code shown to you, e.g. "ref: AB12CD") and a log category tag
  • Navigation breadcrumbs (which screens were visited before an error occurred)

    • We do NOT collect:

  • File names, file paths, image content, or any user-created content (absolute file paths and file names are redacted before sending)
  • Personal information, accounts, or contact details
  • Home directory paths or usernames (automatically scrubbed before sending)
  • Precise device identifiers or advertising IDs

    • You can disable error tracking at any time in Settings > Privacy.

    3. OPTIONAL ANONYMOUS ANALYTICS

    RefStage includes an optional analytics feature powered by PostHog. This feature is disabled by default and only activated if you explicitly opt in during setup or via Settings > Privacy.

    When enabled, we collect:

  • Anonymous usage events (e.g., "board created," "export completed") with no personal details
  • A randomly generated anonymous ID (not linked to any personal information)
  • App version, operating system type and version
  • Device characteristics: CPU architecture, CPU core count, available RAM, and processing tier
  • System locale and Dart runtime version
  • Aggregate library statistics: total counts of references, boards, folders, artworks, tags, and file type distribution (counts only — no file names or content)

    • We do NOT collect:

  • File names, file paths, image content, or any user-created content
  • Personal information, accounts, or contact details
  • Precise device identifiers or advertising IDs
  • Location data

    • You can disable analytics at any time in Settings > Privacy. When disabled, no analytics data is collected or transmitted.

    4. LOCAL DATA STORAGE

    All data you create or import into RefStage is stored locally on your device:

  • Reference images and their metadata
  • Sticky notes and text content
  • Vision boards and canvas layouts
  • App preferences and settings

    • This user content never leaves your device unless you explicitly export or share it.

    5. APP UPDATES AND LICENSE VERIFICATION

    To keep the App working correctly and to protect against piracy, RefStage contacts a server we operate (api.refstage.com, hosted on Cloudflare):

  • Update checks: On launch, the App fetches a small configuration file that tells it the minimum supported version. This is an anonymous request — it sends no personal information, no identifiers, and no user content. As with any internet request, your device's IP address is visible to the server for the duration of the request; it is used only transiently to prevent abuse and is not stored or linked to you.
  • License verification (Android only): To confirm the App was obtained through an authorized channel, RefStage uses Google Play Integrity. Google Play generates a signed token attesting that the request comes from a genuine installation, which our server verifies with Google. This token is processed by Google under the Google Play Terms of Service and is used solely to check your license; we do not receive, collect, or store any device identifier from it.

    • No user content (images, notes, boards, or files) is ever transmitted during these checks.

    6. IN-APP WEB BROWSER (WEB CAPTURE)

    RefStage includes an optional built-in web browser you can use to browse websites and save images you are viewing into your local library.

  • Browsing happens directly between your device and the websites you visit: pages and images are fetched straight from those sites (and their content delivery networks), never through our servers.
  • We do not collect, log, or transmit your browsing history, page contents, cookies, or login sessions. None of this data is sent to Samoremi, Sentry, PostHog, or any other party by RefStage.
  • Browser sessions are private (ephemeral) by default and are discarded when you close the browser. If you enable "Stay signed in", website cookies are stored only on your device by the operating system's web view, and you can clear them at any time with "Clear session data".
  • Images you choose to import are downloaded by the App directly from the website's servers to your device and stored in your local library like any other reference image (see Section 4). The image's source web address is saved locally with the image so the App can avoid importing duplicates; it is never transmitted anywhere.
  • Websites you visit can see your device's IP address and the requests your browsing generates, and their own privacy and cookie policies apply to your use of them.

    • 7. THIRD-PARTY SERVICES

    RefStage uses the following third-party services:

  • Sentry (anonymous error tracking — see Section 2)
  • PostHog (optional anonymous analytics — see Section 3)
  • Cloudflare (hosting for our update-check and license-verification server — see Section 5)
  • Google Play Integrity (Android only — license verification — see Section 5)

    • RefStage does not integrate with advertising networks, social media platforms, or cloud storage/sync services, and we do not sell or share your data for advertising.

    8. DATA HOSTING AND RETENTION

    All anonymous diagnostic data is hosted within the European Union:

  • Sentry: Error reports are stored on Sentry's EU servers and retained for 90 days, after which they are automatically deleted.
  • PostHog: Analytics events are stored on PostHog's EU servers and retained for 1 year, after which they are automatically deleted.

    • Update-check and license-verification requests (Section 5) are handled by our server on Cloudflare's global network. They carry no personal information and are not stored.

    No user content (images, notes, boards, or files) is ever transmitted to or stored on any external server.

    9. NO ACCOUNT REQUIRED

    RefStage does not require you to create an account or provide any personal information to use the App.

    10. DATA CONTROL

    You have complete control over your data:

  • All data is stored on your device
  • You can delete your data at any time by uninstalling the App or clearing app data
  • You can disable error tracking and analytics at any time in Settings > Privacy
  • We cannot access, recover, or restore your local data

    • 11. CHILDREN'S PRIVACY

    RefStage does not knowingly collect any information from children under 13. Since we do not collect any personal information from any users, we are compliant with COPPA (Children's Online Privacy Protection Act).

    12. CHANGES TO THIS POLICY

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App. Changes are effective immediately upon posting.

    13. CONTACT US

    If you have any questions about this Privacy Policy, please contact us at:

    support@refstage.com

    14. YOUR RIGHTS

    Depending on your jurisdiction, you may have certain rights regarding your personal data:

  • European Union (GDPR): You have the right to access, rectify, erase, restrict processing, and port your personal data. Since RefStage collects only anonymous diagnostic data (not linked to any personal identifier), these rights are primarily exercised by disabling error tracking and analytics in Settings > Privacy.
  • California (CCPA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. RefStage does not sell any data. You can disable all data collection in Settings > Privacy.
  • All users: You can disable error tracking and analytics at any time in Settings > Privacy. You always have full control over the data stored locally on your device. We cannot access, recover, or identify your anonymous diagnostic data.