Stashio ("Stashio", "we", "us") is a personal save-and-rediscover app. This Privacy Policy explains what information we collect, how we use and protect it, and the choices and rights you have. It applies to the Stashio mobile apps and the browser extension.
1 Who this covers
This policy covers everyone who uses Stashio. It does not cover the third-party websites, apps, or services you save from — when you save a link, the content on the other end is governed by that site's own policies.
2 Anonymous by default
By default, Stashio identifies your library with an anonymous device identifier — a random value generated on your device the first time you open the app and held in the device's secure store (iOS Keychain / Android Keystore-backed storage). It works as your private key to your own library.
- We do not require — or, by default, collect — your name, email address, phone number, or a password.
- Because the identifier is the credential to your library, keep your device secure. A new installation may create a new identifier if its existing secure identity cannot be recovered. Use Linked devices before switching devices; support cannot restore a lost library from a name alone.
3 What we collect
- Content you save — the links, text, images, screenshots, documents, audio and video you send to Stashio, and the publicly-accessible web content fetched from links you save.
- Derived data — summaries, tags, categories, extracted facts (dates, places, prices, action items), transcripts of voice notes, text recognized in images, and search embeddings, all generated so you can find and reuse what you saved.
- Anonymous device identifier — sent with each request to authenticate it to your library.
- Premium status — whether you have an active subscription, validated with Apple/Google (we never receive your card or payment details).
- Push registration — an Apple/Google push token, device platform and notification-permission state. Registration may occur before you allow visible notifications. Your operating system controls whether notifications can appear.
- Profile and collaboration — an optional display name, handle, avatar and bio; linked-device records; Space memberships, chat messages, shared files, plans, tasks, goals and votes. Your Account ID identifies your server-backed library.
- Expense settlement — optional receiving-bank name/account number, payout links, expense amounts, participants, receipt images, contributions and settlement records. These are separate from App Store/Google Play billing.
- Questions and AI reports — questions and conversation context sent for Ask; when you report an answer, the submitted question, answer, reason and platform are stored for review.
- Feedback you send — if you use "Send feedback", the rating and message you write (plus your platform and app version) so we can act on it.
- Usage analytics & crash reports — we use Google Firebase (Analytics and Crashlytics), configured without advertising identifiers, to collect app-usage events (e.g. which screens and features are used), a device identifier, device model, OS and app version, and crash traces. This tells us what's broken and what's worth improving; it is never used for advertising or cross-app tracking.
- Location — only if you grant it, and only for the two features described below. See the note under this list for exactly what is sent and what stays on your phone.
- Basic technical data — your request must include an IP address and app/OS version to function; these are used to serve and secure the request. Limited security and diagnostic logs remain until their configured rotation; they are not used for advertising or cross-app profiles.
- Nearby reminders stay on your device. If you allow background ("Always") location, your phone watches for the places you saved and nudges you when you are near one. That matching is done by your phone's operating system and by Stashio on the device. Your coordinates are not sent to us for this, and there is no background stream of where you are.
- Directions are sent to us. When you open the map for a saved place or start directions, the app sends that trip's start and end coordinates to Stashio so we can draw the road route, and we pass them to a routing provider. The computed route is cached on our servers under a one-way hash of the rounded coordinates, with no identifier attached to it. We do not keep a history of where you have been.
4 How your content is processed
Automated processing can summarize, tag and categorize saves; extract facts and image text; transcribe audio/video; build search indexes; answer questions from relevant saves; translate text; and generate a reading voice. Saved material may itself contain names, contact details, locations or other personal information.
Your choice. Settings → AI and your data identifies configured external AI services and asks permission before sending content to them. The choice covers existing and future saves. You can decline or withdraw and continue saving, organizing and reading with processing available on your device or Stashio servers. Withdrawal prevents new external requests, including queued work; it cannot recall a request already sent. A change in recipients requires a new choice. Shared contributions require the contributors’ permission too.
- Stashio servers. Storage, deterministic extraction and configured self-hosted AI run on infrastructure operated for Stashio. Search embeddings and audio/image processing can use self-hosted models.
- External AI. The receiving providers are identified in the permission screen before you allow processing. Depending on the configured service, relevant text, links, photos, original audio/video, transcripts, questions and answer context may be sent. We do not add an advertising ID; the content itself can contain personal information. Provider terms and privacy links are available with that disclosure. Stashio does not use your content to train its own models. Provider retention and model-training terms depend on the identified service and contract; permission to process is not a promise that third parties retain nothing.
The original media you save (photos, voice recordings) is kept by Stashio so you can view or play it back, until you delete it.
5 What we don't do
- We don't sell or rent your personal data.
- We don't show ads, don't use advertising SDKs or advertising identifiers, and don't track you across other apps or websites. Our crash reporting and usage analytics (Section 3) are configured without advertising IDs.
- We don't share your content with anyone beyond the service providers described in Section 4 — except with the people you choose. A shared Space is exactly that choice: content you add to a Space is visible to its members. If you publish a Space or profile, the selected content can be accessible through its public link. Leaving stops your access and future contributions; it does not automatically erase content already shared. Deletion behavior is described below.
- We don't ask for permissions we don't need.
6 Storage & security
- Your content and derived data are stored on our servers and object storage, associated with your identifier.
- Network traffic is encrypted in transit (HTTPS/TLS).
- Your access token is stored in the device's secure keystore (iOS Keychain / Android Keystore-encrypted storage) and is sent only in request headers — never embedded in shareable URLs.
- Private media requires authorization. Space members may access shared media; deliberately published content and public links follow the visibility you selected. Service operators may access data when needed to provide support, maintain the service, investigate abuse or meet legal obligations.
No system is perfectly secure, but we apply industry-standard safeguards and design the service to minimize what we hold about you.
7 Content moderation
Stashio provides abuse reporting, blocking and operator review. Automated safety checks may supplement review when configured; they are not a guarantee that every harmful image or message is detected. Confirmed illegal material may be removed and reported to the appropriate authority when required. A scanner outage is not treated as a confirmed abuse match.
Because a shared Space can carry content other people added, you also have two controls of your own:
- Report. Any saved or fetched item can be reported from inside the app — including one another member added to a Space you are in. Reporting your own item hides it from you immediately; every report is queued for human review. We aim to act on reports promptly and may remove content and restrict the account responsible.
- AI answers. Use Report answer on an Ask response to send that answer and your reason to Stashio for review. This does not send the report to the AI provider.
- Block. You can block another member from a Space's member list, or manage everyone you have blocked in Settings → Blocked accounts. Blocking works in both directions — neither of you sees the other's messages — and nobody is removed from the Space by it.
8 Notifications
Push registration and permission status support processing updates, reminders, shared activity and notification preferences. Tokens may be registered even when visible notifications are disabled. You can turn notifications off at any time in your device settings.
9 Payments
Stashio Premium is sold as an in-app purchase through the Apple App Store and Google Play. Payment is handled entirely by Apple/Google — we do not receive your store payment-card details. We receive only a purchase receipt/token, which we validate with the store to confirm your entitlement.
10 Data retention & deletion
- Delete an item. Removing a save also deletes its stored media.
- Delete your account. Use Settings → Delete Account, or request help through account deletion. Confirmed deletion removes your active library identity, private content, profile, credentials, authored Space messages and attachments. Media objects are queued for physical deletion; storage failures are retried. Account deletion does not cancel an Apple/Google subscription; manage that separately in your store account.
- Shared Spaces. A Space with remaining members can continue with a new owner. Shared expense amounts, descriptions and settlement history remain for those members; the deleted participant is replaced by an unnamed entry so others’ balances do not change. Profile identity and the departing user’s receipt images are removed. Content independently saved or exported by other people cannot be recalled.
- Files kept only on your device. The device-only Vault is separate from your cloud account; remove its files from the Vault on that device. Older local saves, shopping lists, reading progress or checklists that have no reliable account ownership are retained separately for recovery. The app warns about this data and does not silently assign it to another account. Account deletion removes local data identified as belonging to the deleted account; unassigned data requires separate recovery or removal.
- Backups and reports. Deleted data may remain in encrypted backup generations until rotation. Backup copies are restricted to recovery and are not used to serve the app. AI response reports are eligible for deletion after 90 days, or earlier with account deletion; other records subject to a specific legal preservation obligation can be retained for that obligation. Contact support about retention or a deletion request.
- Export. Use Settings → Export my data to download an archive, or contact support if you cannot access your account. Never send support your access token, password or purchase token.
- We keep your content only as long as you keep it in Stashio; limited records may be retained where required by law (e.g. moderation/legal obligations).
11 Your rights
Depending on where you live (e.g. EU/UK GDPR, California CCPA/CPRA, Vietnam's PDPD), you may have rights to access, correct, export, delete, or restrict processing of your personal data, and to object to certain processing. Stashio is built so you can exercise the core of these directly in the app (delete items, delete account, export in Settings). To make any other request, contact us — we will respond within the timeframe your law requires. You also have the right to complain to your local data-protection authority.
12 Age eligibility
Stashio is not directed to, and is not intended for, children under 13 (or the minimum age required in your country). The same product features are available to eligible users aged 13–17 and adults. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us data, contact us so we can investigate and delete it.
13 International transfers
Stashio operates online and your data may be processed on servers in a country other than your own. Where required, we rely on appropriate safeguards for such transfers. The service provider responsible for your data is Stashio, operated by Uranashel, contactable at the address below.
14 Changes to this policy
We may update this policy as the app evolves. When we do, we'll revise the "Last updated" date above and, for material changes, provide a more prominent notice in the app.
15 Contact
Questions, requests, or privacy concerns: