Privacy Policy

Figura — Last updated: May 25, 2026

Figura ("we", "our", "the app") is a sticker collection tracker. This policy explains what data we collect and how we use it.

Camera

Figura's sticker scanner uses your device's camera to read sticker codes from album pages. All image processing (character recognition) is performed locally on your device using on-device ML libraries (ML Kit on Android, Vision on iOS). No photos, video frames, or image data are ever uploaded to Figura's servers or any third party.

What we collect

• Email address and username, provided during registration
• Name and profile picture URL, if you sign in with Google
• Your sticker collection data (which stickers you own, need, or have as duplicates)
• Swap requests you create and your participation in swaps with other users

Why we collect it

Solely to provide the service: authenticate your account, sync your collection across devices, and let you trade stickers with other users.

Who we share it with

We do not sell, rent, or share your data with third parties. We use service providers strictly to operate the app: Google Cloud (hosting and database), Resend (transactional emails such as password resets), and Google (OAuth sign-in, only if you choose it).

Account deletion

You can request deletion of your Figura account and the data associated with it at any time.

How to request deletion:

1. In the app: open the Profile tab, scroll to the bottom, and tap Delete account. You will be asked to confirm by typing your username.
2. Via the support form: visit getfigura.com/support and submit a request from the email address registered to your account with the subject "Delete my account". We will contact you at that email address to confirm deletion, then process the request within 30 days.

Data that is deleted:

• Your account profile (email, username, name, profile picture URL, password hash)
• Your sticker collection entries (owned, needed, duplicates)
• Your album enrollments and active album selection
• Your authentication sessions and linked OAuth accounts
• Swap requests you created that have not been claimed

Data that may be retained:

• Records of completed swaps with other users may be retained in anonymized form so the other party's transaction history remains intact.
• Backups containing your data are retained for up to 30 additional days before being permanently overwritten.
• Information we are required to keep to comply with legal obligations or to resolve disputes will be retained only for as long as legally necessary.

Data retention

While your account is active, we retain your data to provide the service. After deletion is requested, see the Account deletion section above for what is removed and what is retained.

Security

All data is transmitted over HTTPS. Passwords are stored as bcrypt hashes and never in plain text.

Contact

Questions? Use the support form at getfigura.com/support.