Privacy Policy

Last updated: May 24, 2026

chainStone ("chainStone," "we," "us") provides a mobile and web application for creating tamper-evident environmental compliance records anchored on the Polygon blockchain. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

Account information — name, email, organization, and authentication credentials you provide when you register.
Compliance and field data — the records you create, including permit and facility details, discharge and effluent measurements, treatment logs, inspection notes, attached photos, and GPS coordinates captured at the time of recording.
Subscription information — purchase and entitlement data provided by the Apple App Store or Google Play. We do not receive or store your full payment-card details.
Device and usage data — app version, device type, diagnostic logs, and connectivity status used to operate and improve the service.

How we use your information

To create, store, anchor, and verify your compliance records.
To authenticate you and manage your organization and subscription.
To generate compliance reports and provide customer support.
To maintain security, prevent abuse, and meet legal obligations.

Blockchain anchoring and immutability

To make records independently verifiable, chainStone writes a cryptographic hash (and limited metadata such as a timestamp and registry identifier) to the public Polygon mainnet. Information written to a public blockchain is permanent and cannot be edited or deleted. We do not write your raw record contents, photos, or personal identifiers to the chain — only their hashes and the data required for verification. Supporting documents may be stored on IPFS, a distributed file network, where content addressed by its hash may persist on nodes outside our control.

Third-party services

We share data with service providers only as needed to operate chainStone:

Supabase — authentication and application data storage.
Polygon network — public anchoring of record hashes.
IPFS / pinning providers — storage of supporting documents.
Apple and Google — subscription billing and app distribution.

We do not sell your personal information.

Data retention

We retain account and record data for as long as your account is active or as needed to provide the service and meet legal and recordkeeping obligations. Hashes and metadata already anchored on the blockchain remain there permanently by design.

Your rights

Depending on your jurisdiction, you may request access to, correction of, or deletion of your personal information by contacting us. We will honor verified requests for data held in our systems; note that we cannot remove information that has already been written to a public blockchain.

Security

We use industry-standard safeguards including encrypted transport and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

chainStone is a professional tool and is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy? Email support@chainstone.pro.