Privacy Policy
Stash is a personal notebook. You sign in, stash text and images, and our server turns those notes into structured summaries. This page describes what we collect, who processes it, and how to delete it.
Account
Sign-in is handled by WorkOS (Sign in with Apple or Google). We store a Stash user id and the WorkOS subject id. We do not receive or store your password. Apple or Google may share the email or name associated with that sign-in with WorkOS; we use it only to identify your account.
Your notes and images
Note text, tags, summarized markdown, reminders, and compressed images are stored on Cloudflare (Workers, D1, R2) so summarizing can finish after you close the app and so a new device can restore your notebook. Images are compressed on the device before upload. Original-quality files are not kept.
Note text, titles, summaries, tags, and summarized markdown are encrypted with AES-256-GCM before they are written to our database, so a database dump does not contain readable note bodies. We hold the encryption key so the server can summarize, research, restore, and deliver reminders. This is not end-to-end encryption: our servers decrypt notes while providing those features, and note content for a summary, research run, or Pro Ask is sent to Anthropic (Claude) and, for the web search decision, TypeSafe (Jev), via OpenRouter. Cloudflare also encrypts disks at the infrastructure layer. Traffic uses TLS.
OpenRouter
When a note is summarized, you run Deep Research, or you use smart search (Pro Ask), we send the relevant note text and image URLs to Anthropic (Claude), via OpenRouter. OpenRouter routes those requests to Anthropic's Claude models. Summaries and research also use OpenRouter's web search. Image URLs are short-lived presigned links. We do not send your account password or payment details to OpenRouter.
To decide whether a summary should use web search, we send up to 2,000 characters of the note to TypeSafe (Jev), via OpenRouter.
Connected agents
If you connect an agent to Stash (for example Claude, Cursor, or ChatGPT), that client can ask our server to search your notes, read a note, create a note, update or delete a note you choose, run research, and answer questions over your notes. Asking questions over your notes requires Stash Pro.
To do that work, our servers decrypt the note text. That is the same decryption we already use to summarize a note, run research, restore a device, and answer Pro Ask. It is not zero-knowledge encryption, and it is not end-to-end encryption. The connected agent receives the decrypted content the tool returns. We do not send your password or payment details to the agent. Anthropic (Claude) and, for the web search decision, TypeSafe (Jev), via OpenRouter, may still see note content when a summary, research run, or Pro Ask uses a model, as described above.
A record of an agent call stores the action, the note id, and the client id. It does not store the note body or the question text.
You can stop a connected agent by revoking that connector in the app that holds it, or by deleting your Stash account in Settings. Deleting the account removes your user row, notes, images, share links, and related server data. A connector you leave in place can keep calling tools until you revoke it or the grant ends.
Push notifications
If you allow notifications, we store an Expo push token so we can hint your device to refresh when a summary, reminder, or research job finishes. Push payloads do not include secret tokens or full note bodies.
Purchases
Stash Pro is billed through the App Store via RevenueCat. RevenueCat and Apple see your App Store account and subscription status. We store only whether your Stash user is on the Pro plan and, if applicable, when a temporary grant expires. We do not store card numbers.
Share links
If you create a share link, anyone with the URL can import a copy of that summarized note into their own Stash account. The public landing page does not show the note body. Revoking the link or deleting the note stops new imports. Existing copies stay with the people who already imported them.
Device data
The app keeps a local SQLite cache of your notes, compressed images, and auth tokens in the iOS Keychain / App Group (so the share extension can post while offline). Clearing the app or signing out removes the local cache; server data remains until you delete the account.
Retention and deletion
We keep your notes until you delete them or delete your account. Settings → Delete account permanently removes your user row, notes, images, share links, and related server data. This cannot be undone.
Children
Stash is not directed at children under 13, and we do not knowingly collect data from them.
Copyright complaints
Notes, images, and share links can include material someone else owns. To ask us to remove it, follow the DMCA notice.
Contact
Email support@graftedsoftware.com, or use the in-app Settings links. This policy may change; the date above is the latest revision.