Stash privacy policy.

What Stash stores

Stash stores content you add, including text, links, images, file references, and related information such as dates, favorites, source-app details, and stacks. Stash stores preferences and caches, such as link-preview images, to make the app work.

Text tokenization, selecting and joining fragments, recognizing useful details, and image text recognition run on your device. Optional smart marks use Apple’s on-device model when available; Stash does not send their prompts or your saved text to a developer-operated AI service.

Clipboard and files

Stash reads content when you paste, share, import, or capture it. If you enable Capture when I open Stash, Stash can also read the clipboard when the app becomes active, subject to the operating system’s paste permissions. You can turn this off in Settings → Capture and link previews.

The share extension receives the content you choose to share. File and photo pickers provide the files or images you select. Saving an image or video to Photos uses the permission requested by the system. Stash does not continuously read other apps’ clipboards in the iOS background.

Private iCloud sync

When the optional Stash Plus purchase is verified, Stash uses Apple’s CloudKit to synchronize saved clips and stacks through your private iCloud account. This transfers saved content and its associated information to Apple’s iCloud service. The developer does not have access to your private CloudKit database.

When iCloud storage is unavailable, Stash may use local storage instead. A local-only collection does not establish that its contents have synced. Apple’s handling of iCloud is governed by Apple’s privacy policy and your account settings.

Stash Plus purchases and access

Apple processes the optional Stash Plus purchase, which unlocks iCloud sync and the Paper and Marker app icons. Stash uses StoreKit’s verified transaction status to check purchase ownership, restore access, and respond to refunds or revocations. Stash does not receive your payment-card details or send purchase receipts to a developer-operated server.

Without a verified purchase, your saved collection and text tools remain available locally. Losing sync access does not delete your local collection or its existing iCloud data. Purchase ownership and iCloud account availability are separate: both are needed for sync to operate. Apple’s handling of purchases is governed by its privacy policy and App Store terms.

Keyboard, widgets, and extensions

The main app, share extension, widgets, and Stash keyboard use a shared storage area on your device. It holds the saved content and preferences needed by these features.

The Stash keyboard requires Allow Full Access to read saved Stash clips from that shared storage. The keyboard inserts the text you select into the current app. Its typing and insertion controls do not upload keystrokes or surrounding text to a server. The keyboard itself does not make network requests.

You can disable Full Access or remove the keyboard in iOS or iPadOS Settings. Text you insert into another app is then handled by that app and its privacy policy.

Website and media requests

Link previews are enabled by default. When loading a preview, Stash contacts the linked website and related image hosts to request titles, images, or icons. Explicit link-preview refreshes, media checks, and downloads also contact the relevant website. Those services receive the requested URL and normal connection information, such as your IP address, and may log those requests under their own policies.

Turn off Settings → Capture and link previews → Load link previews to stop automatic preview loading. This does not prevent requests you explicitly make by opening a link, refreshing its metadata, or downloading media.

When displaying a source-app icon, Stash may send that app’s bundle identifier to Apple’s app lookup service and download its icon from the returned image host. Your saved text is not included in this request.

Support and diagnostics you choose to send

Stash does not automatically send your saved clips or support logs to the developer. Send Feedback prepares an email to chen.he@icloud.com. The report can include the app version and build, device and operating-system details, locale, iCloud account availability, and recent diagnostic logs. You decide whether to send it.

If you send a message, the developer receives your email address, message, diagnostic report, and any attachments you include, and uses them to investigate and respond. Review reports and attachments before sending and remove information you do not want to disclose. Support correspondence is kept as needed to resolve the request and maintain support records; you can request deletion by email.

Copy Debug Info puts a report on your clipboard. It does not send the report by itself. Sharing it through another app is your choice.

No advertising or tracking

Stash does not include advertising, sell your personal information, or use your saved collection for third-party tracking. It does not require a separate Stash account. Apple may provide the developer with App Store and diagnostic reports under Apple’s services and your device settings; those services are covered by Apple’s privacy policy.

Retention, backups, and deletion

Saved content remains in Stash until you delete it, a configured history limit removes older items, or you enable age-based auto-purge. Auto-purge is off by default; its age options are 1 day, 1 week, 1 month, and 1 year. It keeps pinned clips, clips in stacks, and clips that are open. Recapturing a clip restarts its age.

You can delete clips and stacks in the app. Deletions, including auto-purge, are synchronized when iCloud Sync is unlocked, available, and working.

Removing the app does not guarantee that its iCloud data or exported backups are deleted. Manage Stash’s iCloud storage through your Apple account settings where available. Local caches are managed by the app and operating system.

Backups can contain your saved text, images, links, and stacks. They are stored where you choose, including an iCloud Drive location if you select one. Backups and copies shared or saved outside Stash must be deleted separately. The developer cannot retrieve or delete your private iCloud collection on your behalf.

Questions and policy changes

For privacy questions or a request concerning information you sent to support, email chen.he@icloud.com.

Changes to this policy will be published here with an updated effective date.