01Overview
Stash is a personal finance management app. It is designed with a privacy-first, local-first architecture: structured financial data is stored on your device in an encrypted database. Stash does not operate an application backend that stores your transactions, budgets, Gmail message contents, or notification contents.
Optional features may communicate directly with external services: Gmail import connects to Google after you authorize it, and online exchange-rate refresh contacts a public rate provider after consent. These connections are described below.
02Data You Provide
When you use the app you may enter:
- Financial transactions (amounts, categories, dates, merchants, comments)
- Budget periods, categories, and cashboxes
- Goals and scheduled contributions
- Manual exchange rates
These structured records are stored locally on your device in an encrypted database (SQLCipher with Android Keystore). Stash does not upload them to a Stash-operated backend. Data can leave the app when you explicitly export or share it, and connected external features exchange only the information described in this policy.
03Gmail Access
If you choose to connect your Gmail account, the app requests read-only access to Gmail via Google OAuth 2.0. This access is used to identify eligible financial transaction emails and parse transaction details from them on your device.
- We do not read, store, or transmit the content of non-financial emails.
- Fetched email content is stored locally on your device only, encrypted.
- Your Gmail OAuth token is stored locally on your device, encrypted with the Android Keystore.
- We do not share any Gmail data with third parties.
- You can disconnect Gmail at any time from the app’s Settings screen, which deletes the locally stored token.
Our use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements. See the dedicated Gmail Access page for a complete explanation.
04Push Notification Access
If you grant Notification Access, the app can read push notifications from banking apps you explicitly select from a whitelist. This is used to parse transaction alerts from those apps.
- Only notifications from apps you have whitelisted are read.
- Notification content is stored locally on your device only, encrypted.
- You can revoke Notification Access at any time in Android Settings → Notifications → Notification access.
05Exchange Rate Data (Optional)
If you enable automatic exchange rate refresh (opt-in, disabled by default), the app contacts a public exchange rate API to fetch currency rates. No personal data is sent in this request — only a request for publicly available rate data.
06Google Play Billing
If you purchase a PRO subscription, the transaction is handled entirely by Google Play. We receive only a purchase confirmation token from Google Play to verify your entitlement. This token is stored locally on your device, encrypted. We do not operate a payment backend.
07Data We Do Not Collect
We do not collect the following from the mobile app:
- Analytics or usage statistics
- Crash reports
- Advertising identifiers
- Location data
- Financial records or Gmail message contents uploaded to a Stash-operated backend
08Data Storage and Security
All app data is encrypted on-device using SQLCipher (AES-256) with keys managed by the Android Keystore, bound to your device’s screen lock. Encrypted backup files are protected by a separate password you set at export time.
09Data Deletion
To delete all your data, uninstall the app. Uninstalling removes the encrypted database, all tokens, and all locally stored content. Any backup files you exported to your device storage must be deleted manually.
To disconnect Gmail and delete the stored token without uninstalling: Settings → Gmail → Disconnect.
10Children
This app is not directed at children under 13 and does not knowingly collect data from children.
11Website Analytics and Download Links
The website’s servers process ordinary request information to deliver and operate the site. Google Play download links also record the request time and the button location so we can count requests. These separate download events contain no IP address, user agent, referrer, financial data or visitor identifier, and do not set cookies.
If you choose “Allow analytics”, the website loads Google Analytics to measure page visits, engagement such as scrolling, and Google Play button clicks, including the button location. Google receives website usage information, such as the page path, referring website, browser and device information, and cookie identifiers. Page addresses sent by our analytics configuration omit query strings and fragments. This website measurement does not receive your Stash app’s transactions, bank notifications, emails or financial data.
Analytics is off until you allow it. Your choice is stored in your browser for up to 180 days. When allowed, Google Analytics can set first-party cookies (_ga and _ga_HBQ9FSRLR4) for up to 180 days. We disable Google signals and advertising personalization. Google processes analytics information under its Privacy Policy.
You can decline or withdraw consent at any time using “Analytics settings” in the footer. Withdrawing stops future analytics collection and removes these analytics cookies from this website; it does not erase information already collected. If browser storage is unavailable, the choice applies to the current page only. Declining analytics does not affect use of the website or app.
The separate server-side download request counts continue without analytics consent. They may include repeated or automated requests and do not identify people or confirm app installations. Opening Google Play takes you to a Google service governed by its own policies.
12Changes to This Policy
If we make material changes, we will update the “Last updated” date above. Continued use of the app after changes constitutes acceptance.
13Contact
Questions or data requests: support@stashbudget.app
Related documents: Gmail Access and Terms of Service.