Privacy Policy

Last updated 12 October 2026

• 1. Who is responsible
• 2. Your library
• 3. What happens on your device
• 4. Permissions
• 5. When Stashy uses the internet
• 6. Crash reports
• 7. Tips
• 8. When you write to me
• 9. This website
• 10. Legal bases
• 11. Service providers and other countries
• 12. How long data is kept
• 13. Your rights
• 14. Children
• 15. Changes

1. Who is responsible

Stashy is made and published by one person. I am the controller for the data described here:

This policy covers the Stashy apps for iPhone, iPad, Mac and Apple Watch, their share extensions and widgets, and this website. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

2. Your library

Your library is everything you put into Stashy: links, page titles, pictures and saved page text, photos, PDFs and other files, notes, voice memos and their transcripts, scans, categories, reminders, and what Stashy writes about each item (summaries, keywords, suggested events and cards).

It is stored in two places, both of them yours:

• On your device, in Stashy’s own storage.
• In your private iCloud database, if the device is signed in to iCloud. Stashy uses Apple’s CloudKit to keep your iPhone, iPad and Mac in step. The data sits under your Apple Account, and Apple’s systems are built so that I, as the developer, cannot open it. Apple handles it under its own privacy policy.

If you are not signed in to iCloud, or you switch iCloud off for Stashy in your device’s iCloud settings, the library stays on that device only.

Shared categories

If you share a category with someone, the items in it are visible to the people you invite, and they can add and remove items. A shared category is stored in the iCloud of the person who shared it. Everyone taking part can see the others’ names as iCloud provides them, or the email address or phone number an invitation was sent to. You can stop sharing at any time. Nothing is shared unless you start it.

Apple Watch

The watch app keeps no library of its own. Your iPhone sends it a short list of recent items, and notes or voice memos you make on the watch travel straight to your iPhone.

3. What happens on your device

Everything Stashy does to understand a save runs locally, using software Apple builds into the system:

• Summaries, categories, keywords, titles, cards, event suggestions and answers to your questions are produced by Apple’s on-device language model. The text is not sent to me or to an AI service.
• Voice memos are transcribed with on-device speech recognition. Stashy requires the on-device mode, so the audio is not sent to Apple for recognition.
• Text in photos, scans and PDFs is recognised on the device.
• System search. Your saves are added to the Spotlight index on your device so you can find them without opening Stashy. That index stays on the device.
• Reminders are local notifications scheduled on your device.
• Settings are stored on your device.

4. Permissions

Stashy asks for each of these only when you first use the feature that needs it. All are optional, and you can change them at any time in the system’s settings.

• Camera, to take a photo or scan a document into your library.
• Microphone, to record voice memos.
• Speech recognition, to turn voice memos and the speech in some saved videos into searchable text on your device.
• Calendar, add only, to add an event you have approved. Stashy cannot read your calendar.
• Notifications, for reminders and for news about categories shared with you.
• Photos. Stashy uses the system’s photo picker and only receives the pictures and videos you choose. It has no access to the rest of your photo library.

Stashy does not ask for your location, your contacts or permission to track you.

5. When Stashy uses the internet

Fetching what you save

When you save a link, your device loads that page itself, the way a browser would, to get its title, picture and readable text. Later it may load the page again, for example to show the reader view or to fetch missing artwork. For some sites Stashy also asks the site’s own public services for details:

• YouTube, TikTok, Instagram, X and Reddit, for a post’s title, preview, caption or subtitles. For short videos on TikTok and Instagram without subtitles, the video may be downloaded to your device, transcribed there, and then deleted.
• GitHub, for the description of a repository you saved.

These requests go directly from your device to the website concerned. As with any visit, that site sees your IP address and technical details about the request, and handles them under its own privacy policy. The requests do not pass through me, and I do not learn what you save.

Apple services

• iCloud, for sync and sharing as described in section 2. Apple also sends your devices silent notifications so they know when to sync.
• Apple Maps. When a save contains a list of places, Stashy asks Apple’s map service where they are so it can show them on a map. The names of those places are sent to Apple for that lookup.
• The App Store, when you leave a tip or rate the app.

Links you open

Opening a saved page, or tapping an action such as searching the web for a title or tracking a parcel, takes you to that website or app. From there its own privacy policy applies.

6. Crash reports

The iPhone and iPad app uses Firebase Crashlytics, a service of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, together with its affiliates, among them Google Ireland Limited), to tell me when the app crashes and why. The Mac and Apple Watch apps do not include it.

A crash report contains:

• what the app’s code was doing at the moment of the crash (a stack trace);
• the device model, system version, screen orientation and whether the app was in the foreground;
• free memory and storage at the time, and whether the device is jailbroken;
• the app version, and the date and time;
• a random identifier that Firebase creates for this installation of the app, so that repeated crashes on one device are counted as one device. It is not your name, your Apple Account or an advertising identifier, and it is replaced if you reinstall the app.

Crashlytics also records that the app was opened, without any detail of what you did in it, so it can work out what share of sessions end in a crash. Google receives your IP address when a report is sent, as with any internet connection.

Crash reports do not contain your library: no links, titles, notes, photos, files, recordings or summaries. I cannot tell from a report who you are. Google keeps crash reports and the identifiers attached to them for 90 days and then deletes them. Stashy does not use Google Analytics or any other analytics product.

7. Tips

Stashy is free. If you choose to leave a tip, the payment is handled entirely by Apple through the App Store. I never see your payment details, your name or your Apple Account.

To offer the tips and confirm a purchase, Stashy uses RevenueCat (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA). RevenueCat is only contacted once you open the tip screen. It then receives:

• a random identifier it creates for this installation of the app;
• what was bought, the price, the currency, the time and the country of your App Store account;
• Apple’s receipt and transaction identifiers for the purchase;
• the app version, device model and system version.

As with any internet connection, RevenueCat’s servers also see your IP address.

If you never open the tip screen, none of this is sent.

8. When you write to me

If you send feedback or a question by email, I receive your email address and whatever you write. I use it to reply and to fix what you reported. My mailbox is provided by Google (Gmail).

Separately, Apple shows me anonymous, aggregated figures about the app, such as the number of downloads. If you have agreed in your device settings to share analytics with app developers, that includes anonymous usage and crash statistics collected by Apple. You can change this under Privacy and Security, Analytics and Improvements.

9. This website

This website sets no cookies, uses no analytics and loads no fonts, scripts or other content from third parties. There are no forms and nothing to sign up for.

Like every website, it is delivered by a hosting provider whose servers process your IP address, the page requested, the time and your browser type in order to deliver the page and keep the service secure. I do not use this information to identify visitors.

The download buttons lead to Apple’s App Store, and Apple’s privacy policy applies there.

10. Legal bases

Where the GDPR applies, I rely on these legal bases:

• Providing the app you asked for (Art. 6(1)(b) GDPR): sync through iCloud, fetching pages you save, map lookups, and processing a tip.
• Legitimate interests (Art. 6(1)(f) GDPR): crash reports, because I need to know when the app fails in order to fix it, the secure delivery of this website, and answering your emails.
• Your consent (Art. 6(1)(a) GDPR): the system permissions in section 4. You can withdraw each one at any time in the system’s settings.

11. Service providers and other countries

The providers named in this policy are Apple (iCloud, Maps, App Store), Google (crash reports, email), RevenueCat (tips) and the hosting provider of this website. They may process data outside Switzerland and the European Economic Area, in particular in the United States.

For transfers to the United States I rely on the provider’s certification under the Swiss-U.S. and EU-U.S. Data Privacy Frameworks where it has one, and otherwise on the standard contractual clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner.

I do not sell personal data, and I do not pass it to anyone else.

12. How long data is kept

• Your library is kept until you delete it. Deleted items wait in the Bin and are removed after seven days, or after the period you choose in Settings.
• Crash reports are deleted by Google after 90 days.
• Tip records are kept by Apple and RevenueCat for as long as they need them to document the purchase.
• Emails are kept for as long as the conversation needs, and deleted on request.

To remove everything: delete your items in Stashy, or delete the app, which removes the library from that device. To remove the copy in iCloud, open your Apple Account in the system’s settings, go to iCloud, choose Storage, select Stashy and delete its data.

13. Your rights

You can ask me for a copy of the personal data I hold about you, and to have it corrected, deleted, restricted or handed over in a common format. You can object to processing that rests on legitimate interests, and withdraw a consent you have given.

In practice I hold very little. Your library is in your hands and not in mine, and you can take all of it with you at any time with Export Library in Stashy’s settings. Crash reports and tip records carry random identifiers that I cannot match to a person. What I can look up and delete is any email you have sent me.

To use any of these rights, write to hinrichbomsdorf@gmail.com. You also have the right to complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner, and in the EU the authority of the country where you live.

14. Children

Stashy is not aimed at children, and I do not knowingly collect personal data from them. As described above, the app does not ask anyone for a name, an email address or an account.

15. Changes

If Stashy starts handling data differently, this page will be updated before the change ships, and the date at the top will change with it.