Privacy at Stash

Your account and household records

Your account includes your sign-in email and authentication information. Household records can include member roles, places and coordinates, item names, quantities, notes, photos, purchase details, receipts, loans, trips and reminders. Your household can see shared inventory and activity according to its access rules. Owners control invitations and member roles.

Photos, receipts and optional identification

Uploaded photos and receipts are held in private storage for your household. Choosing photo identification sends the selected image to the configured AI service to suggest item details. You review those suggestions before saving. Identification usage records track attempts, status and available token counts; they do not contain the image or your inventory notes.

What stays on this device

The browser stores sign-in state, saved inventory, personal views, drafts, photos and supported pending changes. That lets you recover work after a reload or interruption. Signing out or losing confirmed access clears Stash's private local data for that session. Stash warns before an explicit sign-out discards pending work. Files you download or export are separate copies that you control.

Location access

If you allow location access, your browser can provide your current position for nearby-place features. Coordinates you choose to save for a place become part of the household's records. You can manage location permission in your browser or device settings.

Usage, reliability and payments

Stash records small product milestones such as signup, a first or tenth item, a first trip and repeat use. These events use account or household identifiers, event types and timestamps, without item names, notes or photos. Usage counters enforce plan and identification limits. Hosting and service providers may also process technical request and security logs.

When billing is available, Stripe handles checkout and payment details. Stash keeps the customer, subscription and entitlement information needed to manage the household's plan. The app does not collect card numbers in its own forms.

Export, deletion and shared history

You can export household records from Settings. Leaving a household preserves its shared records for the remaining members. Account deletion removes your sign-in and membership; a household where you are the last member is deleted after confirmation. Shared activity may retain the former member's identifier so history stays attributable, with a removed-member label. Storage deletion can finish through a retry queue after account deletion. Copies you exported and provider backup retention are separate from the app's active records.