Privacy at Stash

Your account and household records

Your account includes your sign-in email and authentication information. Household records can include member roles, places and coordinates, item names, quantities, notes, photos, purchase details, receipts, loans, trips and reminders. Your household can see shared inventory and activity according to its access rules. Owners control invitations and member roles.

Photos, receipts and optional identification

Uploaded photos and receipts are held in private storage for your household. Choosing photo identification asks your permission before sending selected images through the Lovable AI gateway to the model provider named in the permission prompt to suggest item details. You can decline and enter items manually. You review and can correct suggestions before saving. Identification usage records track attempts, status and available token counts; they do not contain the image or your inventory notes.

Category and packing suggestions

When you import a list, name a new item or plan a trip, Stash can suggest a category or rank gear to pack. To do that it sends item names, categories and notes, and for trips the destination name, trip note and month, to Jev, a model from TypeSafe (through OpenRouter when that route is configured). Photos, receipts and account details are never sent for suggestions. TypeSafe states that Jev is not trained on customer requests or responses. Suggestions are never applied until you accept them, and without a connection Stash falls back to on-device suggestions.

Ask Stashe (household inventory assistant)

Ask Stashe is an optional AI assistant you can open from Find. It answers questions about your household inventory using your current item names, categories, locations, spots, and notes. When you ask, Stash sends your question and the relevant inventory text to the model provider named in the in-app disclosure (for example, OpenAI). Photos, receipts, and account details are never sent. Answers are generated by the provider and are not verified by Stash; review them before acting. Ask Stashe requires an internet connection and a signed-in household. It does not change anything in your inventory unless you explicitly confirm a suggested move or quantity adjustment through a separate step. You can decline consent at any time; local Find continues to work without AI.

What stays on this device

The browser stores sign-in state, saved inventory, personal views, drafts, photos and supported pending changes. That lets you recover work after a reload or interruption. Signing out or losing confirmed access clears Stash's private local data for that session. Stash warns before an explicit sign-out discards pending work. Files you download or export are separate copies that you control.

Location access

If you allow location access, your browser can provide your current position for nearby-place features. Coordinates you choose to save for a place become part of the household's records. You can manage location permission in your browser or device settings.

Usage, reliability and payments

Stash records small product milestones such as signup, a first or tenth item, a first trip and repeat use. These events use account or household identifiers, event types and timestamps, without item names, notes or photos. Usage counters enforce plan and identification limits. Hosting and service providers may also process technical request and security logs.

When billing is available on the web, Stripe handles checkout and payment details. For purchases in the iOS app, Apple processes payment and RevenueCat helps Stash verify the purchase and subscription status. RevenueCat receives a stable Stash account identifier and the product, transaction and subscription information needed to verify access. It does not receive your inventory, photos or receipts from Stash. Stash keeps the minimum customer, purchase, subscription, event and household-entitlement records needed to provide access, handle refunds or renewals, prevent duplicate grants and reconcile late provider notifications. Stash does not collect card numbers in its own forms.

To enforce one cardless trial per eligible owner, Stash stores a one-way fingerprint derived from the verified sign-in email using a server-only secret. It is not used to contact you or shown to other household members.

Export, deletion and shared history

You can export household records from Settings. Leaving a household preserves its shared records for the remaining members. Account deletion removes your sign-in and membership; a household where you are the last member is deleted after confirmation. Shared activity may retain the former member's identifier so history stays attributable, with a removed-member label. Storage deletion can finish through a retry queue after account deletion. Minimal payment and entitlement records may remain where needed for reconciliation, fraud prevention, accounting or legal obligations, without restoring a deleted account. Copies you exported and provider backup retention are separate from the app's active records.