Privacy policy

Stashwise is a private, offline-first money-and-stock tracker for small traders and side hustles. This policy explains, in plain language, what happens to your information.

Who is responsible

If you have a question about this policy or your data, contact: privacy@stashwise.org.

What stays on your device

Everything you record in Stashwise — sales, stock, expenses, accounts, contacts, balances, and profit — is stored only on your phone, in a database that is encrypted at rest (SQLCipher). It is not uploaded to us, it is not synced to a server, and we cannot see it. If you uninstall the app without making a backup (see below), that data is gone.

Stashwise has no user accounts. You never give us an email, phone number, or password to use the app. There is no sign-in.

What we do not collect

• No analytics, telemetry, or usage tracking.
• No advertising and no advertising identifiers.
• No third-party analytics or tracking SDKs.
• No location tracking.
• No selling or sharing of your data with anyone, for any purpose.

Voice entry (optional)

Stashwise lets you add entries by speaking. This works in two stages, and it matters where each stage happens:

1. Your audio is transcribed on your device. The recording of your voice is turned into text on the phone itself and is never uploaded. Stashwise does not store voice recordings.
2. The text is interpreted. To turn the transcript into a structured entry (for example, recognising an item or a person’s name you said), the text can be sent to the Stashwise voice server. When this happens, the request contains:
   • the text transcript of what you said;
   • your device’s time zone and currency;
   • a catalogue snapshot to help recognise names you speak — your item names, account names, category names, and the given names only of your contacts.
   • the stops on your active route, when one is running.

The Stashwise voice server is self-hosted. Your transcript is not sent to any third-party AI service (such as OpenAI, Google, or Anthropic). The server uses the transcript only to answer that one request and does not retain transcripts.

Voice entry is optional. If it is turned off, or no voice server is configured, Stashwise runs fully on-device and nothing is sent.

Encrypted backups (optional)

Stashwise can create an encrypted backup so you can restore your data on a new phone. Backups are off by default and only ever created when you choose to.

• The backup is encrypted on your device before it leaves the phone. The server that stores it receives only ciphertext and cannot read it. The decryption key is derived from your recovery phrase, which never leaves your device.
• Backups are identified by a random storage ID derived from your recovery phrase, sent in an authorization header (never in the web address). Possession of that ID lets you fetch or delete your backup; it does not let anyone read it.
• The backup service records a small metering log to prevent abuse: a timestamp, a salted hash of the storage ID, a hashed IP address, the operation, and the size in bytes. It does not store your IP address in the clear and cannot link this to your identity.
• You can delete your backup at any time from within the app.

Backups are hosted on Cloudflare infrastructure (R2 storage). Cloudflare acts only as a hosting provider for the encrypted blob and cannot read its contents.

Camera (optional)

Stashwise requests camera access for one purpose only: scanning a backup QR code when you transfer data to a new phone. Stashwise does not take photos, and no image is stored or transmitted.

Data sharing

We do not share your data with anyone. There is no advertising network, no data broker, and no analytics provider in Stashwise. The only data that ever leaves your device is what you explicitly trigger through the optional voice and backup features described above.

Children

Stashwise is a business tool and is not directed at children. It is intended for users aged 18 and over.

Your controls

• Reset all data — erase everything in Stashwise from your phone (Settings).
• Delete backup — remove your encrypted backup from the server (Settings).
• Turn off voice — decline the voice feature so nothing is transmitted.

Security

Your on-device data is encrypted at rest, and the app can be protected with a passcode or biometric unlock. Backups are end-to-end encrypted. No system is perfectly secure, but Stashwise is designed so that neither we nor any hosting provider can read your ledger or your backups.

Changes to this policy

If we change this policy, we will update the “Last updated” date above and, for material changes, note it in the app’s release notes.