Privacy Policy
Overview
Stash ("we," "us," or "our") is a personal finance tracking application. We are committed to protecting your privacy. We do not sell your personal data, display advertising, or share your information with third parties for marketing purposes.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using Stash, you agree to the practices described in this policy.
Information We Collect
We collect the following categories of information depending on which features you use:
| Category | What it includes | Sent off-device? |
|---|---|---|
| Financial data | Transactions, accounts, budgets, goals, debts, recurring bills, transfers, categories, and related records you create | Yes — synced to our cloud service when you are signed in |
| Account & identity | Email address, display name, profile image (if you sign in with Google), and authentication credentials | Yes — used for authentication and account management |
| Voice recordings | Audio recordings you make using the voice logging feature | Yes — sent to a third-party speech-to-text service for transcription |
| Receipt images | Photos of receipts you scan using the receipt scanning feature | Yes — sent to a third-party AI service for analysis |
| Usage analytics | App interactions such as feature usage and screen views, linked to your account | Yes — sent to our analytics service. You may opt out in Settings → Data |
| Diagnostic data | Crash reports, error logs, and performance data to help us fix bugs | Yes — sent to our crash reporting service |
| Subscription data | Purchase status and entitlement information | Yes — managed by the App Store (Apple or Google) and our subscription provider |
| Technical / security data | IP address and basic request metadata (e.g. request timestamps, HTTP headers) processed by our hosting and security providers to operate the service, prevent abuse, and secure the API | Yes — processed by our hosting/security infrastructure. We do not use this to build advertising profiles. |
Data Stored on Your Device
Stash stores data locally on your device to enable offline access and improve performance. Authentication tokens are stored using your device's hardware-backed secure storage (iOS Keychain on iPhone, Android Keystore on Android devices). Other app data is stored in standard OS app storage, which is protected by your device's security features and is not accessible to other apps.
Locally stored data is protected by your device's own security features. We recommend using a device passcode or biometric lock to protect your device. If your device is lost, stolen, or accessed by an unauthorized person, locally stored app data may be at risk.
If you enable Android device backups, your device's operating system may include app data in those backups according to Android's backup policies. External backup files you export manually persist until you delete them.
AI Features — Voice & Receipt Scanning
When you use voice logging or receipt scanning, your data is processed by third-party AI services to extract expense information. By using these features, you acknowledge that:
- Voice logging: Your audio recording is sent to a third-party speech-to-text service. The resulting transcript is then processed by an AI language model to identify expense details. We make reasonable efforts to delete your audio and transcript data from third-party servers after processing, but we cannot guarantee deletion in all cases, as third-party data retention policies apply.
- Receipt scanning: Receipt images are sent to a third-party AI service for visual analysis. The extracted text is then processed by an AI language model to identify expense details. Third-party data retention policies apply to these images.
- Financial content: Both features may process content that includes financial information such as amounts, merchant names, and dates. This processing occurs through our secure server-side infrastructure regardless of whether you have cloud sync enabled.
- Accuracy: AI-generated results may not always be accurate. You should always review AI-suggested entries before saving them.
All AI feature requests are routed through our secure server-side infrastructure. No third-party API credentials are stored in the app itself.
Analytics
We collect usage analytics to understand how the app is used and to improve it. Analytics events are associated with your account identifier and include information such as which features you use and when. Analytics are not used for advertising.
You can opt out of analytics at any time in Settings → Data. When opted out, no analytics data is recorded or transmitted.
Crash Reports & Diagnostics
We use a third-party crash reporting service to automatically collect information about app crashes and errors. This helps us identify and fix bugs. Crash reports may include technical information about the state of the app at the time of the crash, such as stack traces and device information.
Pre-release (beta) versions of the app may collect additional diagnostic information to help us identify and fix issues before public release. If you are participating in a beta program, you will be notified of any additional data collection.
Third-Party Services
Stash works with third-party service providers to operate. Each provider has its own privacy policy and data practices. We do not disclose the names of specific vendors, but we describe the categories of providers and the purposes for which they may process your data.
| Provider Category | Purpose | Data Involved |
|---|---|---|
| Cloud infrastructure & database | Storing and syncing your financial data when you are signed in | Financial records, account information, authentication credentials |
| Server-side infrastructure | Hosting the secure API layer through which AI features are routed | Voice transcripts, receipt images, AI request payloads |
| Authentication provider | Enabling sign-in via your existing account (e.g. Google) | Email address, name, profile image, authentication tokens |
| Speech-to-text provider | Transcribing voice recordings for the voice logging feature | Audio recordings |
| AI language & vision processing | Extracting expense details from voice transcripts and receipt images | Voice transcripts, receipt images, financial content |
| Subscription & payment management | Managing Stash Pro subscription entitlements and purchase status | Subscription status, purchase identifiers (no raw payment card data) |
| Crash reporting & error monitoring | Automatically collecting crash reports and error logs to help us fix bugs | Stack traces, device information, app state at time of crash |
| Analytics | Understanding how the app is used in order to improve it | Feature usage events, screen views, account identifier (opt-out available in Settings → Data) |
These providers process your data only as necessary to deliver their respective services. We are not responsible for the independent data practices of these providers. Your use of features that involve these providers is also subject to their respective terms and privacy policies.
No Advertising
We do not sell your personal data, display advertisements, or share your information with advertisers or data brokers. Stash is funded by subscriptions — your data is not our product.
Security
We take reasonable technical and organizational measures to protect your data. All data transmitted between the app and our servers is encrypted in transit using industry-standard protocols. Data stored in our cloud infrastructure is encrypted at rest. Authentication credentials are stored using your device's hardware-backed secure storage.
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your device and account credentials.
Your Rights & Data Deletion
You have the following rights regarding your personal data:
- Access: You can view all your financial data within the app at any time.
- Export: You can export your data from Settings.
- Correction: You can edit or delete individual records at any time.
- Deletion: You can delete your entire account and associated data from Settings → Danger Zone. Upon account deletion, we will remove your personal data from our systems.
Please note that some data may be retained by third-party service providers subject to their own retention policies (see Third-Party Services above). Locally stored data on your device must be removed by uninstalling the app. Backup files you have exported manually must be deleted by you.
Subscriptions: Deleting your account does not automatically cancel an active Stash Pro subscription. You must cancel your subscription separately through Google Play or the Apple App Store before or after deleting your account.
For step-by-step deletion instructions, see our Delete Account page.
To exercise any of these rights or for any privacy-related questions, contact us at shalabyadam012@gmail.com.
Accessibility
Stash is designed to be accessible to all users, including those with disabilities. The app supports screen readers (iOS VoiceOver and Android TalkBack), right-to-left layouts for Arabic-speaking users, and voice input as an alternative to manual text entry.
If you encounter any accessibility barrier, please contact us at shalabyadam012@gmail.com.
Children's Privacy
Stash is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it promptly.
Third-Party Links & Services
The app may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with Stash.
Disclaimer
Stash is a personal finance tracking tool, not a licensed financial advisor. Nothing in the app constitutes financial, investment, tax, or legal advice. We make no representations or warranties about the accuracy, completeness, or suitability of any information in the app for any purpose. You use the app and rely on its data entirely at your own risk.
We are not liable for any financial decisions you make based on data in the app, for data loss resulting from device failure or uninstallation, or for the acts or omissions of any third-party service provider.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Your continued use of Stash after any changes constitutes your acceptance of the updated policy. The effective date at the top of this page reflects the most recent version.
Contact
Questions about this Privacy Policy? Contact us at shalabyadam012@gmail.com or through Settings → Help & Support in the app.