Privacy Policy — Stash

Last updated: 2026-05-30

Stash ("the app", "we", "us") is a private photo and video vault published by Zaamworks. This policy explains what data the app handles and how.

Summary

• Your photos and videos imported into the vault are encrypted on your device and never leave it. We operate no servers and cannot see, access, or recover your vault contents.
• The only data that leaves your device is sent to Google AdMob to show ads (free tier) and to Apple / Google to process in-app purchases.
• We do not sell your data.

What stays on your device (never collected by us)

Data	Handling
Photos & videos added to the vault	Encrypted with a key derived from your PIN and stored only in the app's private storage. Never uploaded.
Your PIN / decoy PIN	Stored in the device secure enclave / keystore. Never transmitted.
Folder names, vault structure	Stored in an encrypted manifest on-device only.

Because there is no backend, losing your device or forgetting your PIN means the vault cannot be recovered by us.

What is sent off your device

Advertising — Google AdMob (free tier only)

On the free tier, the app shows ads via Google AdMob. AdMob may collect device identifiers (including, with your permission, the iOS advertising identifier / IDFA), approximate usage, and diagnostics to deliver and measure ads. On iOS you are asked for tracking permission (App Tracking Transparency) before the IDFA is used; if you decline, ads are shown without it. Paid tiers show no ads.

Google AdMob privacy: https://policies.google.com/privacy

In-app purchases — Apple App Store / Google Play

Purchases (Private subscription, Pro lifetime) are processed by Apple or Google. We receive a purchase receipt/entitlement but not your payment details.

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy

Permissions the app requests

Permission	Why
Photo library	To import photos/videos you choose into the vault, and to export them back if you ask.
Camera (optional)	Only if you capture media directly into the vault.
Face ID / biometrics	To unlock the vault.
Tracking (iOS, optional)	To show relevant ads; declining still lets you use the app.

Children

The app is not directed at children under 13 (under 16 in the EEA). We do not knowingly collect data from children.

Your choices

• Remove ads and ad-related data collection by upgrading to any paid tier.
• On iOS, deny tracking in the system prompt or Settings.
• Delete all on-device data by deleting the app.

Changes

We may update this policy; the "Last updated" date will change accordingly.

Contact

[email protected]