Privacy Policy

Effective September 29, 2026

Stash does not collect, store or share any personal data. Everything you enter stays on your iPhone unless you choose to sync or export it.

What Stash stores, and where

Transactions, accounts, categories, budgets, recurring rules, tags, notes and receipt photos are stored in a local database on your device. Stash has no user accounts, no servers of its own, no analytics, no advertising and no third-party tracking SDKs. We never see your data.

When information leaves your device

iCloud sync (optional, off by default)

If you turn on Sync with iCloud in Settings, your Stash data is stored in the private CloudKit database of your own iCloud account, so your other devices can read it. It is transferred and stored encrypted by Apple and is not accessible to us. Apple's handling of iCloud data is described in Apple's privacy policy. Turning sync off stops further uploads; you can delete the synced copy from iCloud settings on your device.

Store logos

When a transaction has a store name, Stash fetches that brand's logo from logo.dev. The request contains only the store name (for example "Netflix"), never amounts, dates or anything that identifies you. Logos are cached on the device. Leave the store field empty and no request is made.

Siri and Shortcuts

Voice requests are processed by Apple according to Apple's privacy policy. What you say is turned into an entry on your device using the on-device model; Stash sends nothing to a server.

Apple Watch

The watch app exchanges summaries and new entries with the iPhone app directly, over Apple's device-to-device connection, only between your own devices.

Exports, backups and sharing

CSV exports, backup files and anything you pass to the share sheet are files you create and control. Where they go is up to you.

Features that use system permissions

• Face ID / Touch ID for the optional app lock is handled entirely by iOS. Stash only learns whether the check succeeded.
• Camera and Photos are used only to attach a receipt photo when you ask. Photos stay in the app's storage on the device.
• Notifications (bill reminders, budget alerts, daily reminder) are scheduled locally on your device. No push server is involved.
• Apple Intelligence parses text you type or dictate into an entry, on the device.

Children

Stash is not directed at children under 13 and collects no information from anyone.

Deleting your data

Settings › Data › Delete All Data removes every transaction. Deleting the app removes everything it stored on the device. Synced data can be removed from iCloud in your device's iCloud settings.

Changes

If this policy changes, the new version is published on this page with a new effective date.

Contact

Questions about privacy: [email protected].