Terms of Service & Privacy Policy

Effective date: 24 April 2026. These Terms govern your use of STASHD (the “Service”), operated by STASHD Pty Ltd (“STASHD”, “we”, “us”). By tapping a STASHD NFC puck, creating an account, or otherwise using the Service you agree to these Terms. If you do not agree, do not use the Service.

1. The Service

STASHD is a loyalty platform. Venues place NFC pucks on their counters. When you tap a puck with your phone you collect stamps, packs, points and rewards for that venue. No app download is required to participate.

2. Your account

You can use the Service as a guest or with a signed-in account. To sign in and to receive rewards we ask for your mobile phone number and optionally an email address and display name. You must provide accurate details and keep them up to date.

• You must be at least 16 years old to create an account.
• You are responsible for activity on your account, including taps made from your phone.
• One account per person. Don’t share accounts, automate taps, or try to game rewards.

3. How we use your mobile number

Your mobile number is treated as private personal information. We use it to:

• Verify your identity when you sign in (one-time password via SMS).
• Link your taps across venues so your stamps, packs and rewards stay with you even if you switch phones.
• Send you service messages that are part of the core product — for example a reward becoming available to redeem, or a security alert on your account. These are transactional and cannot be unsubscribed from while you have an active account.
• Send you marketing messages — only if you have opted in (see section 4).

Your mobile number is stored in a private profile record that is separated from your public profile. Other members of the STASHD community never see your number. Venues you have tapped at do not receive your raw mobile number — they send messages to you through STASHD, and STASHD delivers them on their behalf.

Standard carrier message and data rates may apply to any SMS you receive.

4. SMS and email marketing consent

By creating an account or signing in you agree to these Terms, which include your consent to receive SMS and email marketing messages from venues where you have tapped an NFC puck. You can opt out at any time, free and immediately (see below). Messages may include:

• New menu items, specials, events and limited drops at those venues.
• Bonus points, giveaways, loyalty rewards and time-limited offers.
• Occasional reminders to redeem rewards you’ve already unlocked.

How it works:

• A venue only gains permission to message you after you have tapped one of their NFC pucks. No tap means no message.
• Messages are sent through STASHD on the venue’s behalf. Senders are clearly identified in every message.
• Venue messaging volume is capped by STASHD to prevent spam.

Opting out is always free and always immediate. You can:

• Reply STOP to any marketing SMS to stop all marketing SMS from that specific venue. Reply STOP ALL to stop marketing SMS from every venue.
• Click the unsubscribe link at the bottom of any marketing email.
• Manage per-venue SMS and email preferences at any time from your STASHD profile settings.

Opting out of marketing does not affect transactional or account-security messages, and does not delete the stamps, points or rewards you have earned.

5. Privacy — what we collect

We collect the minimum needed to run the Service:

• Private profile data: mobile number, email (optional), and authentication metadata. Stored in a protected table with row-level security so only you (and STASHD staff acting in a support capacity) can read it.
• Public profile data: display name, avatar, username and any titles or badges you’ve earned. Visible to other users and to venues you interact with.
• Tap and activity data: which pucks you tapped, when, and at which venue. Used to award rewards, calculate leaderboards, and to decide which venues can message you under section 4.
• Device and diagnostic data: IP address, approximate location at the moment of a tap (to protect against fraudulent or remote taps), browser and device information.
• Usage analytics: first-party, aggregated analytics about how the Service is used — pages viewed, sessions, device type and referring site — collected on our own systems using a random device identifier. We do not use third-party advertising trackers, and we do not sell this data.

6. Privacy — how we share it

• With venues: venues you’ve tapped at can see your public profile, your visit history at their venue, and aggregate stats. They cannot see your mobile number, email address, or activity at other venues.
• With service providers: we use carefully chosen processors to run the Service (hosting, SMS delivery, email delivery, analytics, fraud prevention). They only process data to provide their services to STASHD.
• For legal reasons: we may disclose information if compelled by law, or to protect the safety and rights of users and venues.
• We do not sell your personal information.

7. Your rights and controls

• Access, correct or export your personal information from within the app, or by contacting us.
• Withdraw marketing consent any time (see section 4).
• Delete your account — this removes your private profile data and permanently revokes all venues’ permission to message you.
• Lodge a complaint with the Office of the Australian Information Commissioner if you believe we’ve handled your information incorrectly.

8. Security

We protect your data with row-level security, encryption in transit, signed tap verification, geolocation shielding on NFC taps, and access controls on our admin systems. No online service can promise perfect security, but we work hard to keep your information safe and will notify you promptly if a breach materially affects you.

9. Rewards, stamps and points

Stamps, points and rewards are a promotional loyalty benefit. They have no cash value, are not transferable, and can expire or be adjusted if we detect fraud or abuse. Individual venues set their own reward catalogue and redemption rules.

10. Acceptable use

• Don’t tap pucks you are not physically next to, or automate taps.
• Don’t harass venues or other users.
• Don’t try to reverse-engineer, scrape or disrupt the Service.

We may suspend or terminate accounts that break these rules.

11. Changes to these terms

We may update these Terms from time to time. If we make a material change — especially to how we handle your mobile number or marketing consent — we’ll notify you in-app or by SMS/email before the change takes effect.

12. Contact

Questions, requests, complaints or opt-out help: hello@stashd.club.

STASHD is made in Australia. These Terms are governed by the laws of the State of New South Wales, Australia.