Privacy Policy

Account & identity. When you sign in, we collect the information needed to create your account: your name, email address, and profile photo (from Google or Apple sign-in, where provided), and a phone number if you use phone verification. We do not access your Google or Apple passwords.

Saved content. When you save content, we store the URL you submitted along with AI-generated metadata: title, summary, category, tags, timestamped video steps (where applicable), extracted images, and useful links. You can also add your own personal notes.

AI features.We store the outputs you generate — chat messages and AI responses, wiki entities and the connections between them, build plans, learning guides, and your progress and notes within them.

Notifications. If you enable push notifications, we store a push device token and your notification preferences, including which topics you follow or mute.

Optional platform credentials. If you choose to connect a social platform account for richer imports, we store the associated session cookie in encrypted form. You can revoke this at any time.

Usage & billing.We collect basic usage data (number of saves, chats, and generations per billing period, preferred language, and subscription tier) and billing identifiers from our payment providers (Apple, Stripe, and RevenueCat customer/subscription IDs). We do not store your full payment card details — those are handled by the payment providers.

Your saved content and chat messages are sent to third-party AI services to generate summaries, categories, tags, wiki pages, build plans, learning guides, and chat responses. We currently use OpenAI, Google (Gemini), and Anthropic for text and media analysis, and DeepSeek and OpenRouter for parts of the learning-guide pipeline. Where you request content enrichment, we may send search queries derived from your content to web-search providers (Serper, Brave Search). We do not use your content to train AI models.

Your email and phone number are used for account authentication and transactional notifications (for example, verification and account-related messages). We will never sell your personal information to third parties.

We rely on the following categories of service providers (sub-processors). User data flows to these services only as needed to provide the corresponding feature:

• Authentication — Google, Apple, and Firebase (sign-in, email and phone verification)
• AI processing — OpenAI, Google (Gemini), Anthropic, DeepSeek, and OpenRouter
• Web search (content enrichment) — Serper and Brave Search
• Subscriptions & billing — Apple App Store (iOS in-app purchase), Stripe (web), and RevenueCat
• Push notifications — Expo Push Service
• Storage & hosting — our cloud infrastructure providers and Cloudflare R2 (image storage)

We may add or change individual sub-processors within these categories over time. Each service has its own privacy policy, and we encourage you to review them.

Your data is stored on secure servers. We do not store account passwords ourselves — authentication relies on Google, Apple, and Firebase. Sensitive optional credentials (such as connected platform cookies) are encrypted at rest, and all API communication uses HTTPS encryption.

We retain your data for as long as your account is active. When you delete your account, your data is scheduled for permanent removal (see Section 6).

Stashwise uses authentication tokens stored in your device's secure storage (or in your browser on the web) so you stay signed in. We do not use third-party advertising or cross-site tracking cookies.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and all associated data — directly in the app under Account → Delete account
• Export your wiki as Markdown files from within the app

To request a copy of your other data or to exercise any of these rights, email us at support@stashwise.co.

Stashwise is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of Stashwise after changes constitutes acceptance.

Questions about this policy? Email support@stashwise.co.