Privacy Policy
Last updated: 11 November 2026
1. Who we are
Begamob Global Limited, 45-51 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong, is the controller of personal data processed through the Stay app ("Stay: Stress Management") and staymind.world (the "Service"). Privacy contact: [email protected].
In short: what you write in Stay is used to give you the Service. We do not sell it and we do not use your mood entries or reflections for advertising. You can ask us to delete your data at any time.
2. Data we collect
2.1 Account data: an account or device identifier, and your email address or Apple or Google ID if you sign in or contact us.
2.2 Wellbeing entries: the moods you log, your answers to reflective questions, notes, and your progress through lessons and exercises. This information can reveal how you feel, so we treat it as sensitive.
2.3 Purchase data: plan, price, transaction ID and status from Apple or Google. We never receive your full card details.
2.4 Device and usage data: device model, OS and app version, language, country, IP address, advertising ID (only if you allow tracking on iOS or have not opted out on Android), crash logs and in-app events such as screens opened.
2.5 Website data: standard server logs and, where you allow them, cookies and campaign parameters (see Cookie Policy).
2.6 Support data: your messages and attachments.
3. Why we use data and legal bases (EU/UK)
| Purpose | Data | Legal basis |
|---|---|---|
| Provide mood history, observations, lessons and exercises | 2.1, 2.2 | Contract; your explicit consent for wellbeing entries, given when you choose to record them |
| Process purchases and restore plans | 2.1, 2.3 | Contract; legal obligation (tax) |
| Support, security and preventing misuse | 2.1, 2.4, 2.6 | Legitimate interests |
| Analytics and product improvement | 2.4 | Legitimate interests; consent where required |
| Advertising measurement | 2.4, 2.5 (never wellbeing entries) | Consent |
4. Observations and automated features
Observations and suggestions in the App are generated automatically from what you record. They are for self-reflection, are not a diagnosis, and no decision with legal or similarly significant effect is made about you. If a feature relies on a third-party service provider to generate text, that provider processes the data on our behalf and only to provide the feature.
5. Who we share data with
- Service providers acting on our behalf: hosting and storage, analytics and crash reporting, customer support tools.
- Apple and Google: to process in-app purchases and refunds.
- Advertising partners (such as Meta, Google and TikTok): limited device and event data to measure our ads, only where you allow it. Never your mood entries, reflections or notes.
- Authorities or advisers where required by law or to protect someone's safety, or in a merger or acquisition under equivalent protections.
We do not sell personal data for money. Under some US state laws, sharing device data with advertising partners may count as "sharing" or "targeted advertising"; you can opt out (Section 7).
6. Retention
| Data | Kept for |
|---|---|
| Account data and wellbeing entries | While you use the App; deleted within 30 days after you delete your account or ask us to delete them |
| Purchase records | As required by tax and accounting law (up to 7 years) |
| Support emails | 2 years after the last message |
| Analytics data | Up to 14 months |
7. Your rights
Everyone: access, correct and delete your data (delete your account).
EU/UK: also restriction, objection, portability, withdrawal of consent at any time, and a complaint to your data protection authority.
US residents (including California, Virginia, Colorado, Connecticut, Texas, Washington and others): right to know, delete, correct, opt out of sale, sharing and targeted advertising, and non-discrimination. Use Do not sell or share or send a Global Privacy Control signal, which we honor. You may appeal a denied request by replying to our decision.
To exercise rights, email [email protected]. We reply within 30 days (EU/UK) or 45 days (US) and may need to verify your identity.
8. International transfers
We are based in Hong Kong and use providers in other countries, including the United States and Vietnam. For EU/UK data we use Standard Contractual Clauses or other lawful safeguards.
9. Security
Data is encrypted in transit (TLS). Access is limited to staff and systems that need it. No method of storage or transmission is completely secure. Report vulnerabilities to [email protected] with "Security" in the subject.
10. Children
The Service is not intended for anyone under 18. We delete data if we learn it was collected from a minor.
11. Changes and contact
We will notify you in the App, by email or on the website of material changes before they take effect. [email protected] · Begamob Global Limited, 45-51 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong