Privacy policy

Last updated 24 October 2026

Your notes are yours. They stay on your devices and in your own iCloud account, and we never see them.

What we collect

Nothing. Stash has no account, no analytics, no advertising and no tracking. We don't run servers that receive your notes, and Stash contains no third-party code that collects data.

Where your notes are kept

• On your device, in Stash's own storage.
• In your private iCloud database, so they sync between your devices. iCloud is provided by Apple under Apple's privacy policy. Stash stores the content of your notes in CloudKit's encrypted fields, which are encrypted with keys tied to your Apple Account.

What happens on your device

• Categories and summaries are made on your device, with Apple's on-device model where Apple Intelligence is available. Your notes aren't sent anywhere for this.
• Voice capture on iPhone uses the microphone only while you're recording. Your speech is turned into text on the device, and the audio isn't saved.
• Spotlight, Siri and Shortcuts. Stash adds your thoughts to your device's Spotlight index so you can search them, and you can turn this off in Stash's settings. Siri and Shortcuts read or add notes only when you ask them to.

Links you save

When you save a link, Stash fetches the page and its preview image from the website, so it can show a title and picture. For GitHub repository links, it also asks GitHub's public API for the repository's details. These requests go straight from your device to that site. The site sees an ordinary request from your device, as it would if you opened the link in a browser. Nothing else from your notes is sent with them.

Browser extensions

Stash's Safari extension, and its Chrome extension on Mac, send the page you choose to save (its address, title and any text you selected) to Stash on the same device. They don't send anything anywhere else, and they don't read pages you don't save.

Deleting your data

When you delete a thought, it moves to Trash. Empty Trash to remove it from your devices and iCloud. Deleting the app removes its data from that device, and you can remove its iCloud data in your device's iCloud settings.

Children

Stash isn't aimed at children, and it collects no information from anyone.

Changes and contact

If this policy changes, we'll post the new version here with a new date. If you have a question about it, email stash@johnston.app.