STUB

Privacy Policy

Effective August 20, 2026

1. Introduction

This Privacy Policy explains how Nexflow Strategies LLC ("Stub," "we," "us," or "our") handles information in connection with the Stub mobile application ("the App"). Stub is built around a simple principle: your ticket journal belongs on your device, not on our servers. We do not operate a backend database of your tickets, photos, or personal journal content — with one deliberate exception, described in Section 6, for tickets you explicitly mark "Visible to Friends" so a friend you've mutually connected with can see them.

2. Information Stored on Your Device

When you use Stub, the following information is created and stored locally in the App's own storage on your device, and is never transmitted to us unless described otherwise in Section 6:

None of this data is visible to us. We have no way to access, view, or recover it. If you delete the App, this data is deleted with it, unless your device's own backup system (e.g. iCloud device backups, which we do not control) has separately backed up the App's local storage.

3. Camera and Photo Permissions

Stub requests camera access so you can photograph a physical ticket stub and, optionally, capture a paired selfie of the moment. It requests photo library access only when you explicitly choose to save a ticket image to your Photos library from the share sheet. Camera captures are stored in the App's own private storage, not your general Photos library, unless you take that explicit save action.

4. The Scan Feature and Google Gemini

Stub's optional "Scan" feature lets you photograph a ticket stub and have its details (title, theater, date, price, rating) automatically read and filled in, instead of typing them by hand. To do this, the photo you capture for scanning is sent directly to Google's Gemini API for text recognition. This is the one case where an image you capture leaves your device.

We do not store a copy of that image ourselves, and we do not see or retain the text Gemini returns beyond using it to fill in the ticket form in front of you. Google's handling of data sent to the Gemini API is governed by Google's own privacy policy and terms, available at policies.google.com/privacy. Scanning is entirely optional — you can always type ticket details in by hand instead, and manual entries never involve any third-party service.

5. Sharing Features

Stub lets you share a ticket as an image using Apple's native share sheet, or save it to your Photos library. Both actions are ones you take explicitly and deliberately — the App never shares or posts anything on your behalf automatically. Where that image goes once you hand it to the share sheet (a messaging app, social media, AirDrop, etc.) is controlled by you and governed by that destination's own privacy practices, not ours.

6. Friends and Sharing

Stub's Friends feature lets you connect with people you know and see movie nights they've chosen to share with you, and vice versa. This is the one part of the App backed by a server, operated for us by Supabase, Inc. ("Supabase"), our database and storage sub-processor. Here's exactly what that involves:

Supabase stores this data on our behalf and does not use it for its own purposes; see Supabase's own privacy policy at supabase.com/privacy for how they handle data processed on our behalf.

7. Subscriptions and Payment

Stub Cinema Club, the App's optional subscription, is sold and billed entirely through Apple's App Store using Apple's StoreKit framework. We never receive, see, or store your payment card information, billing address, or Apple ID — Apple handles all of that directly, under Apple's own privacy policy. We only receive confirmation from Apple's systems of whether a subscription is currently active, which the App uses locally to determine what features to unlock.

8. No Sign-Up, No Analytics, No Advertising

Stub never asks you to sign up with an email or password, and does not use third-party analytics, advertising, or tracking software of any kind. The anonymous identifier described in Section 6 is created automatically only if you open the Friends feature — it isn't tied to your name or email, and nothing about it is used for advertising. We do not build advertising profiles, and we do not sell, rent, or share your information with data brokers or advertisers.

9. Data Retention and Your Control

You are always in direct control of your journal. You can edit or delete any individual ticket at any time from within the App, and deleting the App itself removes all locally stored data along with it. For anything shared through the Friends feature, unsharing a ticket or deleting the App stops it from being visible to friends going forward; removing or blocking a friend does the same for everything you'd shared with them specifically.

10. Children's Privacy

Stub is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.

11. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the effective date above and make the revised policy available in the App. Continued use of the App after a change becomes effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how Stub handles information, contact us at aidanc@nexflowstrategies.com.