Privacy Policy — Stash
Last updated: June 30, 2026
This policy describes how the Stash mobile app (“App”) processes personal data. By using the App you accept the practices below.
1. Data controller
The data controller is the developer of Stash. For privacy requests contact trasimeni@hotmail.it.
2. Data we collect
- Account: email, username, display name, authentication credentials.
- Saves: place names, categories, notes, ratings, addresses and coordinates you provide.
- Location: GPS coordinates only when you use “My location” or pick a point on the map.
- Social: friendships, friend requests, share links.
- Preferences: custom categories, filters, private category settings.
- In-app purchases: transaction identifiers and slot counts (payments are handled by Apple/Google).
- Technical data: session and service operation data.
3. Purposes
We use data to provide the App, sync your content, show maps, manage friends and shares, deliver IAP slot packs, provide support, and prevent abuse.
4. Legal bases (EU/GDPR)
Contract performance, consent where required (e.g. location), legitimate interests (security), and legal obligations.
5. Third-party services
- Supabase — auth and database.
- Google Maps Platform — maps and geocoding when configured.
- Apple App Store / Google Play — in-app purchases.
- Netlify — static web pages for share/auth bridges (no profiling).
6. Retention
Data is kept while your account is active. You can delete individual saves or delete your account in Profile → Delete account.
7. Your rights
You may access, export, rectify, or delete your data, withdraw consent, and lodge a complaint with your supervisory authority. Contact trasimeni@hotmail.it.
8. Security
We use reasonable technical measures (encrypted connections, authenticated access, per-user data isolation). No system is fully risk-free.
9. Children
The App is not intended for children under 13 (or the minimum age in your jurisdiction).
10. Changes
We may update this policy. The date above shows the latest revision. Continued use after changes means you accept the updated policy.