Legal

Privacy Policy

Last updated: May 12, 2026 · Effective: May 12, 2026

Stashful is a personal-archive iOS app. It has no backend server. Your content lives on your device and in your own iCloud private database. This page explains, in plain language, exactly what data is touched, where it goes and what we don't do.

1. At a glance

Stashful does not operate any server. There is no vendor backend.
Your content is stored on your iPhone and in your CloudKit Private Database (container iCloud.com.anapps.Stashful) under your Apple ID.
The developer cannot read your content. Apple manages the storage; we do not have access.
No analytics SDKs. No IDFA. No App Tracking Transparency prompt. No tracking across apps.
Only two user-facing iOS permission prompts: Microphone (for voice notes) and Photos (when you pick photos to attach).

2. Data Stashful collects

Stashful processes only the content you explicitly create or select. We describe each category below.

2.1 Microphone audio

When you record a voice note, audio is captured locally and saved as an attachment in the app's container. The file is then synced via your iCloud account. Voice recordings are never sent to a developer-managed server.

2.2 Photos and videos selected via the Photos picker

Stashful uses the standard iOS Photos picker. The app reads only the items you explicitly select. A copy of the selected photo or video is stored on-device and in your iCloud. Stashful does not scan or index your photo library in the background.

2.3 Files added via the Files picker or Share Extension

Any document, archive or media file you add to a chat — either through the in-app attach button or via the iOS Share Sheet — is stored on-device and in your iCloud.

2.4 Text you type

Text messages and notes you type into chats are stored on-device and in your iCloud. Text is plain by design (no rich text or Markdown rendering in v1).

2.5 Link previews

When you paste a URL, Stashful fetches the link's metadata — page title, description and thumbnail — directly from the link's origin server in order to render an inline preview. This is a one-time HTTP request made by your device to the destination web server. The link or its contents are not sent to Stashful's developer or to any third-party preview service.

3. Permissions Stashful requests

Microphone (NSMicrophoneUsageDescription) — to record voice notes.
Photos (NSPhotoLibraryUsageDescription) — to let you select photos and videos to attach.

Stashful does not request or use: camera, location, contacts, calendar, reminders, health, motion, or Face ID / Touch ID.

Stashful does not send marketing or user-visible push notifications and does not ask for notification permission.

4. Where data is stored

4.1 On your device

Stashful keeps your archive in a SwiftData store and an attachments directory within the app's iOS container. Standard iOS data protection and sandboxing apply.

4.2 In your iCloud

Stashful syncs your archive to your CloudKit Private Database, in a container named iCloud.com.anapps.Stashful. Only your Apple ID can read this database. Apple manages the storage; the Stashful developer cannot access it.

4.3 No vendor backend

Stashful does not run a server of its own. There is no developer-controlled cloud storage of your content.

5. Third-party SDKs and endpoints

Stashful uses a small set of open-source UI and media libraries that run entirely on your device and do not call any external service: ActivityIndicatorView, AnchoredPopup, Kingfisher, libwebp-Xcode, MediaPicker, ZIPFoundation. None of these libraries phone home.

Beyond those, the following third-party endpoints can be contacted from your device, only in the situations described:

Apple (iCloud / CloudKit, StoreKit, MetricKit) — for sync, subscription billing and OS-level crash reporting. Standard Apple platform services.
RevenueCat — for App Store receipt validation and subscription entitlement management when a subscription is purchased, restored, or checked. RevenueCat receives the purchase and subscription data needed for billing and entitlement status; Stashful does not send user content to RevenueCat.
The destination web server when you paste a link, in order to fetch the link's title, description and thumbnail for the inline preview.

6. Analytics and tracking

Stashful contains no analytics SDK. No Firebase, no Mixpanel, no TelemetryDeck, no Amplitude, no Sentry, no Bugsnag.
Stashful does not use the IDFA and does not present an App Tracking Transparency prompt. Stashful does not track you across apps or websites.
Crash reports are limited to what Apple collects via the OS-level MetricKit framework, and only if you have opted in under iOS Settings → Privacy & Security → Analytics & Improvements → Share with App Developers.
Local diagnostic logging uses Apple's os.Logger. These logs live in the system log on your device and are never transmitted to the developer.

8. Data retention and deletion

You can delete any chat or message at any time from inside the app. Deletions remove the item from on-device storage and from your iCloud at the next sync.

Uninstalling Stashful does not delete the iCloud copy of your archive. This is standard iOS behaviour: iCloud-stored data is owned by your Apple ID, not the app. To fully remove your Stashful data from iCloud, go to:

iOS Settings → [your Apple ID] → iCloud → Manage Account Storage → Stashful → Delete Data from iCloud.

9. Children

Stashful is rated 4+ in the App Store and is suitable for general audiences, but it is designed for adult productivity use. The app has no children-specific features and does not knowingly collect data that would require COPPA-style disclosures.

10. Changes to this policy

Material changes will be reflected in the in-app About section and on this page at stashful.anapps.store/privacy. The "Last updated" date above will move forward when the policy changes.

11. Contact

Questions about this Privacy Policy:

anapps.team@gmail.com