Stash is a personal savings-goal and budgeting app for iOS, developed by Ferda Nahit Fidancı. This Privacy Policy explains what data the app processes, how it is used, and your rights. Stash is built to be privacy-first: your money data stays on your device. If you do not agree with the terms below, do not use the app.
1. Data we collect
1.1 Your financial data stays on your device
Everything you enter into Stash — savings goals, income sources and amounts, expenses and budgets, deposits and withdrawals, transaction history, and app settings — is stored locally on your device only, using Apple's on-device database (SwiftData). Stash has no account, no login, and no server backend, and does not use iCloud sync. This data never leaves your device and we cannot see it. Amounts you enter are self-reported numbers; Stash is not connected to any bank, card, or financial institution.
1.2 Personal data
We do not ask for your name, email, phone number, or any other directly identifying personal information. Stash does not require an account. A first name you optionally enter during onboarding is stored on-device only and is not transmitted to us.
1.3 Subscription data
When you purchase Stash Plus, the following are processed by Apple's App Store and our subscription processor RevenueCat:
- Apple In-App Purchase transaction identifier
- Product identifier of the purchase
- Subscription / purchase state (active / expired / lifetime)
- Anonymous user identifier (
$RCAnonymousID:...) generated by RevenueCat
We do not receive your Apple ID, payment method, or billing address. Apple processes the payment; we only learn whether your Plus entitlement is active.
1.4 Analytics data
Stash uses Mixpanel to understand how the app is used and to improve it. Each install is identified by an anonymous identifier (the same RevenueCat anonymous id); we do not link analytics to your real-world identity.
Events we record include:
- App opened, onboarding steps viewed, paywall shown / dismissed
- Purchase started / completed / failed, trial started, purchases restored (with the product id)
- Goal created, viewed, milestone reached, and goal completed — these include the name you gave the goal
- Deposit made — this includes the numeric amount of the deposit and its source (manual, quick-add, etc.)
Because goal names and deposit amounts are sent with some events, if you prefer those values not to be processed by Mixpanel, avoid putting sensitive personal information in goal names. Mixpanel also collects standard mobile analytics metadata (app session, device model, OS version, and app version). Mixpanel does not receive your name, email, precise location, advertising identifier (IDFA), or contacts.
1.5 Notifications
If you allow notifications, Stash schedules local reminders on your device (for example payday reminders and gentle savings nudges). These are generated and scheduled entirely on-device — there is no push server and no notification content is sent to us.
2. Data we do NOT collect
- Real name, email, phone, address
- Apple ID, password, or payment card information
- Bank, card, or any linked financial-account data
- Location data (GPS or otherwise)
- Photos, contacts, calendar entries
- Advertising identifier (IDFA)
- Microphone or camera input
- Health, fitness, or biometric data
3. How data is used
- Provide the service: your on-device data powers goals, budgets, deposits, insights, and reminders.
- Provide subscriptions: the anonymous subscription identifier ties your purchase to Stash Plus features.
- Improve the app: aggregated, anonymous Mixpanel analytics help us understand which features matter and where users drop off.
We do not sell or share your data with advertisers, data brokers, or unrelated third parties.
4. Data sharing
| Service | Purpose | What we share | Region |
|---|---|---|---|
| Apple | App distribution + purchase processing | In-app purchase transactions only | Global |
| RevenueCat | Subscription validation + entitlements | Anonymous subscriber id, transaction id, product id | US |
| Mixpanel | Anonymous product analytics | Anonymous distinct id + event properties (incl. goal names, deposit amounts) | US |
Stash has no backend server of its own — there is no Stash database in the cloud. The only data that leaves your device is the subscription and analytics data described above.
5. Data retention
- On-device data: persists until you delete it in the app or uninstall Stash. Deleting the app removes all of your financial data from your device.
- Subscription state on RevenueCat: retained for the lifetime of your entitlement plus up to 24 months for compliance and refund handling.
- Mixpanel analytics: retained for up to 36 months, then automatically purged.
6. Your rights
- Delete all your data: delete individual goals/records in the app, or uninstall Stash to remove everything from your device.
- Cancel your subscription: Settings → Apple ID → Subscriptions → Stash Plus → Cancel.
- Stop analytics: uninstalling the app stops further analytics. You may also request deletion of analytics + subscription data tied to your anonymous id.
- Access / deletion requests: email us at the address below; include any anonymous id shown in the app if you have it.
We will respond to deletion requests within 30 days.
7. Children
Stash is rated 4+ and contains no objectionable content. We do not knowingly collect data from children under 13. If you believe we hold such data, contact us and we will delete it.
8. Security
Your financial data never leaves your device, so it is protected by your device's own security (passcode, Face ID / Touch ID, and iOS sandboxing). All network traffic to Mixpanel and RevenueCat uses HTTPS (TLS 1.2+). Subscription receipts are validated by RevenueCat and Apple.
9. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected at this URL with an updated "Last updated" date.
10. Contact
For questions, deletion requests, or any privacy concerns: support@growstash.app.
App bundle id com.nahitfidanci.stash