Privacy Policy

Account information. When you sign in with Google we receive your name, email address, and profile picture. This is used to identify your account.

Stashes, items, and notes. We store the stashes and items you create — titles, notes, links, page content, and metadata. This data is required for the core functionality of the app.

Media and files. Photos, videos, and files you save to a media or files stash stay on your device. We do not upload your media to our servers.

Shared content. When you share a link to Stash from another app, we receive the URL and fetch its title and thumbnail so you can find it again later.

Usage data. We may collect anonymous usage statistics (app opens, feature usage) to improve reliability. This data is not linked to your identity.

• Provide the core features — saving, organizing, sharing.
• Authenticate you via Google Sign-In.
• Sync your stashes across your signed-in devices.
• Enable sharing and collaboration with people you invite.
• Extract previews from URLs you save.
• Diagnose and fix issues.

Your stashes, notebook pages, links, tags, contributors, and sharing settings are stored on Supabase, which provides encryption in transit and at rest. Photos, videos, and files you save stay on your device — we never receive a copy. We never sell, rent, or trade your personal information.

• Shared stashes. You can make notebook and link stashes public. When you do, the stash name and its items become viewable to anyone with the share link. Media and file stashes cannot be shared publicly — they stay on your device. You can revoke access at any time.
• Contributors. People you invite to collaborate on a stash can view, add, or edit items in that stash, depending on the role you grant them.
• Service providers. We rely on Supabase for data storage and Google for authentication. These providers have their own privacy policies.
• Legal. We may disclose information if required by law.

• Google Sign-In for authentication — Google Privacy Policy.
• Supabase for data storage and real-time sync — Supabase Privacy Policy.
• RevenueCat for processing the one-time Pro purchase and verifying receipts with Apple / Google — RevenueCat Privacy Policy.

You can access, export, or delete your data at any time from within the app (Profile → Account). Deleting your account permanently removes all your stashes, items, tags, and contributor records from our servers. Media and files stay on your device — delete them from there to fully wipe them.

Stash is not intended for children under 13. If you believe a child has given us personal information, contact us so we can delete it.

We may update this policy from time to time. Material changes will be announced in-app before they take effect.

Questions or concerns? Email trackhero.cc@gmail.com.