Privacy Policy

Last updated: April 12, 2026

Stash ("we", "our", or "the app") is a mobile application that helps users save, organize, and share shopping product links. This privacy policy explains how we collect, use, and protect your information.

1. Information We Collect

Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google. This is used to create and identify your account.

Shopping lists and items: We store the lists you create, the product links you save, product names, images, prices, and any notes you add. This data is necessary to provide the core functionality of the app.

Shared content: When you share a product link to Stash from another app, we receive the shared text or URL. We use this to save the product to your list.

Usage data: We may collect anonymous usage statistics such as app opens and feature usage to improve the app. This data is not linked to your identity.

2. How We Use Your Information

To provide and maintain the app's core features — saving, organizing, and sharing shopping lists
To authenticate your account via Google Sign-In
To sync your lists and items across devices
To enable list sharing and collaboration with other users
To extract product information (name, image, price) from shared URLs
To improve the app and fix issues

3. Data Storage and Security

Your data is stored on Supabase, a cloud database platform with industry-standard security practices including encryption at rest and in transit. Your authentication session is stored securely on your device.

We do not sell, rent, or trade your personal information to third parties.

4. Data Sharing

We do not share your personal information with third parties except in the following cases:

Shared lists: When you choose to share a list, the list name and its items (product links, names, images, prices) become viewable to anyone with the shared link. You control when a list is shared.
Collaborators: When you invite someone to collaborate on a list, they can view and edit items in that list.
Service providers: We use Supabase for data storage and Google for authentication. These providers have their own privacy policies.
Legal requirements: We may disclose information if required by law.

5. Third-Party Services

The app integrates with the following third-party services:

Google Sign-In: For account authentication. Subject to Google's Privacy Policy.
Supabase: For data storage and real-time sync. Subject to Supabase's Privacy Policy.

When you tap a product link in the app, you are directed to the respective shopping platform (Shopee, Lazada, Amazon, etc.), which are subject to their own privacy policies.

6. Your Rights

You have the right to:

Access your data — all your lists and items are visible in the app
Delete your data — you can delete individual items, entire lists, or your account
Export your data — you can share any list which includes all product links
Withdraw consent — you can sign out and stop using the app at any time

To request complete deletion of your account and all associated data, contact us at the email below.

7. Children's Privacy

Stash is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes through the app. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or your data, contact us at:

Email: privacy@stashapp.link