Privacy Policy
Stumped is a grilling app: you name something you think you know, and it questions you on a ladder of difficulty. This page explains what we collect and what happens to it.
What we collect
- Account data: your email address and a bcrypt hash of your password. We never store the password itself.
- Grill data: the text you submit, the questions you are asked, your answers, verdicts, domain profiles and level curves. This is what makes the examiner remember you.
- Purchase data: if you buy grill credits, Apple processes the payment and RevenueCat validates the purchase. We receive a transaction identifier, product identifier and credit balance — never your card details.
- Optional API key: if you bring your own model key, we store it encrypted (Fernet) and show only its last four characters. The plaintext key is used only to call your chosen provider.
How we use it
- To run the grill, remember your progress per domain, and show your level curve.
- Managed mode: the text you submit is sent to DeepSeek for processing. DeepSeek is a third-party model provider and processes the text under its own terms and privacy policy.
- Bring-your-own-key mode: if you save your own key, the text is sent to the provider you chose (for example OpenAI, Google Gemini or OpenRouter) under that provider’s terms. We do not send it to DeepSeek in that mode.
- We do not sell personal data and we do not use it for advertising.
Who processes it
- DeepSeek — managed-mode model inference.
- Your chosen provider — bring-your-own-key inference.
- Apple — App Store payment processing.
- RevenueCat — purchase validation and purchase-event webhooks.
- Our hosting provider — the server and database that store your account and grill data.
Some of these providers may process data outside your country. Where required, transfers rely on the providers’ contractual safeguards.
Retention and deletion
We keep your account and grill data until you delete your account. You can delete it in the app: Mine → Delete account. That permanently removes your account, sessions, answers, domain profiles, curves, credit ledger and saved API key. Deleting your account does not automatically refund purchases already consumed; contact us if you believe a charge is wrong.
Children
Stumped is not directed to children under 13 (or under 16 where local law sets a higher age). Do not create an account if you are below that age.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to certain processing. Account deletion is available in the app; for anything else, contact us.
Security
Passwords are hashed, API keys are encrypted at rest, and traffic between the app and our server uses HTTPS. No system is perfectly secure; if you believe your account is compromised, contact us.
Contact
Email support@pjiu-gogo.com. We aim to reply within a few business days.