StashWe don't have your data
Not as a promise about how carefully we look after it — as a description of the architecture. There is no account, no server holding your records, and nothing for us to look at even if we wanted to.
This page describes the web app. The Android app works differently in two places — it has no push server, and its database is encrypted on the device — so it has a policy of its own.
The short version
- No account. You never give us an email address or a name we can see.
- Everything stays on your device. Items, photos, receipts, documents, subscriptions — all of it lives in your browser's own storage.
- No analytics, no trackers, no ads. None. Not a page-view counter.
- Two exceptions, both optional and both described in full below: reminders, and backups you choose to send somewhere.
What Stash it stores, and where
Everything you put into the app is written to your browser's local database on the device you are holding. It is not uploaded, synced or mirrored. Uninstall the app or clear the browser's storage and it is gone — which is why the app keeps asking you to make a backup.
That includes:
- Items you record, their prices, dates, warranty terms, rooms and notes.
- Photographs and documents you attach.
- Documents you track — passports, licenses, insurance and so on: dates, general details, and a scan if you choose to take one. Scans require a backup passphrase, which the app asks for before the first one and will not let you remove while any remain. There is still no field for a document number.
- Subscriptions and their amounts.
- Your settings, and the name you gave Scout to call you.
The two exceptions
1. Reminders, if you turn them on
Reminders are off until you switch them on. Delivering a notification to a phone with the app closed is the one thing that cannot happen on the device, so it is the one place where something leaves it. What leaves is this, and nothing else:
| What | Why |
|---|---|
| A delivery address | A long anonymous URL your browser generates, which is how Google or Apple know which phone to wake. It is not tied to your identity and we cannot read anything from it. |
| A list of moments | The times a reminder is due — nine in the morning, your time, on each day something needs attention. |
What the reminder says never leaves your phone. The wording is worked out on your device and kept in your browser's own cache. The message that arrives on the day is empty; your phone fills it in. Nobody in the middle — including us — can read a notification they did not write.
Worth knowing anyway, because it is true and rarely said:
- The delivery address lives on Google's or Apple's servers, so they can see that your phone was pinged and when.
- Our sender sees your IP address each time the list of dates is refreshed. That happens weekly in one batch rather than whenever you edit something, specifically so it cannot be used to watch you use the app.
- The times give away roughly which part of the world you are in, because that is what makes a reminder arrive in your morning rather than at three.
Turn reminders off and the app tells the sender to delete its record before it drops the subscription. Nothing is kept.
2. Backups you choose to send somewhere
"Back up now" makes one file containing everything and hands it to your phone's share sheet. Where it goes — Google Drive, Files, an email to yourself — is your choice and happens outside Stash it. We never receive it, and it is not encrypted, so treat it like any other file with your records in it.
What we never do
- No analytics or telemetry of any kind. We do not know how many people use this.
- No advertising, and no data sold or shared with anyone.
- No third-party trackers, tags or embedded scripts. The website loads a font from Google Fonts; the app loads nothing from anywhere.
- No crash reporting.
Children
Stash it is not directed at children and collects nothing from anyone, including them.
Payments
Stash it is free. If you choose to chip in, the app opens Venmo with an amount filled in and you confirm it there — no payment details ever pass through Stash it, and we see only what Venmo shows any recipient.
Your rights over your data
Because we hold nothing, there is nothing for us to hand over, correct or erase on your behalf, and no request you need to make of us. Your copy is yours: export it from Settings at any time, and delete it by removing the app or clearing its storage.
Changes
If this ever changes in a way that means something new leaves your device, it will be said plainly in the app before it happens — not amended quietly here.
Contact
Questions about any of this: nuno927@gmail.com.
Last updated 18 August 2026.