No direct bank login
Stash does not ask for your online-banking username or password. Supported automation uses Android notifications selected by you and optional read-only Gmail access through Google OAuth.
Local financial storage
Structured financial records are stored in an encrypted SQLCipher database on the Android device, with keys managed through Android Keystore. Stash does not operate a backend that stores your transactions, budgets or Gmail message contents.
Network use is limited and explicit
Gmail import communicates directly with Google when you connect it. Optional exchange-rate refresh requests public currency data after consent. These features require a network connection; the core ledger remains local. Receipt images are kept in app-private device storage rather than uploaded by Stash.
No advertising business model
Stash contains no ads and does not use advertising trackers or build advertising profiles from financial data.
Common questions
- Does Stash need my bank password?
- No. Stash does not connect using online-banking credentials.
- Is Stash completely offline?
- No absolute offline claim is made. Optional Gmail import and exchange-rate refresh use network services; financial processing and storage remain on the device.
- Where can I read the full policy?
- See the Privacy Policy and Gmail Access pages for detailed disclosures.