Privacy Policy
Last updated: 22 July 2026
StackFrame.Co ("StackFrame," "we," "us," or "our") is a software company based in New Zealand that builds and operates a range of products, currently including Kora and Matua (the "Products"). This Privacy Policy explains what information we collect across our Products and website at stackframeco.com, how we use it, and the choices you have.
By using our website or any of our Products, you agree to the collection and use of information as described in this policy. This policy is written to align with the New Zealand Privacy Act 2020, and, where applicable, the UK GDPR and EU GDPR.
Individual Products may publish additional product-specific privacy notices that describe features unique to that Product. Where a Product notice conflicts with this policy, the Product-specific notice applies for that Product.
1. Who This Applies To
This policy applies to visitors to stackframeco.com and to users of our Products. Our Products are intended for adults (18+). Where a Product allows an account holder to add other family or household members by name, those individuals do not hold separate accounts with us and do not provide their own information directly to us. Any information about a child is provided and controlled entirely by the account holder.
Our Products are not directed at children, and we do not knowingly collect information directly from anyone under 18.
2. Information We Collect
Account information: name, email address, and authentication details (including via Google sign-in, where a Product offers it).
Content you create in a Product: information you add while using a Product, such as family member names, calendar events, lists, notes, meal plans, and invite codes used to link household members.
Uploaded content processed by AI features: where a Product offers features that process content you upload (for example, extracting dates from a school newsletter), the uploaded content is processed to provide that feature. See Section 4.
Technical information: device type, browser, general usage data, and information needed to keep our website and Products secure and functioning (such as session data for staying signed in).
Communications with us: if you email us at hello@stackframeco.com, we retain your message and contact details so we can respond.
We do not currently collect payment information. If a Product introduces paid plans in the future, payment details will be handled by a reputable third-party payment processor and described in that Product's terms.
3. How We Use Information
We use your information to:
- Provide and operate our website and Products
- Authenticate your account and keep you signed in
- Send transactional emails (e.g. sign-in codes, invite notifications, password resets, service updates)
- Respond to support requests and other communications
- Maintain security and prevent misuse
- Improve our Products based on how they are used, in aggregate
We do not sell your information, and we do not use the content you create in a Product for advertising.
4. Third Parties We Work With
Our website and Products are built on infrastructure provided by trusted service providers, who process data on our behalf:
- Lovable Cloud / Supabase — hosts our databases and authentication systems, and stores account and Product data.
- Resend — sends transactional emails on our behalf via our domains.
- Anthropic (Claude API) — processes uploaded content (such as newsletter images) to extract text and dates when you use an AI-powered feature in a Product. Content sent for processing is not used by Anthropic to train their models under our commercial terms.
These providers are only permitted to use your information to provide services to StackFrame.Co, not for their own purposes. The specific providers used may vary by Product.
5. Data Storage and Security
Your data is stored on secure servers operated by our infrastructure providers. We use industry-standard measures, including encrypted connections and access controls, to protect your information. No system is 100% secure, and we can't guarantee absolute security, but we take reasonable steps to protect your data.
6. Data Retention
We retain your information for as long as your account with the relevant Product is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we're required to retain it for legal reasons.
7. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
To exercise these rights, contact us at hello@stackframeco.com.
8. Cookies and Local Storage
Our website and Products use browser local storage and similar technologies to keep you signed in and to make Products work as Progressive Web Apps (PWAs), including offline access to some features. We do not use third-party advertising cookies.
9. International Data Transfers
Some of our service providers may process or store data outside New Zealand (including in the United States). Where this occurs, we take reasonable steps to ensure your information continues to receive an appropriate level of protection.
10. International Users
StackFrame.Co is operated from New Zealand and this Privacy Policy is written under New Zealand law. If you access our website or Products from outside New Zealand, including from the United States, United Kingdom, European Union, or elsewhere, you understand that your information will be processed in accordance with this policy and New Zealand law, in addition to any local laws that may apply to you.
If you are located in the UK or European Union, you may have additional rights under the UK GDPR or EU GDPR, including the right to data portability and the right to request erasure of your data. We will honor reasonable requests made under these rights on the same basis as our Section 7 (Your Rights), regardless of your location.
Our Products are not directed at children, and we do not knowingly collect personal information directly from children under 13 (or the relevant age of digital consent in your jurisdiction). As described in Section 1, any information about a child is provided and controlled entirely by their parent or guardian, and children do not create their own accounts or provide their own data to us. If you believe a child has provided us with personal information directly, contact us at hello@stackframeco.com and we will take steps to remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify users via email or an in-product notice. Continued use of our website or Products after changes take effect means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or how your information is handled, contact us at:
hello@stackframeco.com
StackFrame.Co, New Zealand