The short version. We collect what the app needs to run your hustles, streaks and subscription. We don't sell your data, we don't show ads, and we never ask for bank or card details. You can delete your account and data from inside the app at any time.
1. Who we are
StashMode ("StashMode", "we", "us") is a mobile app for iOS and Android and the website at stashmode.app. It is operated by [LEGAL ENTITY NAME], [POSTAL ADDRESS]. We are the controller of the personal information described in this policy. Contact us at privacy@stashmode.app.
2. What we collect
Information you give us
| Category | Examples |
|---|---|
| Account | Email address, and the name and account ID shared by Sign in with Apple or Google if you use them. With Sign in with Apple you can hide your real email. |
| Age check | Your birth year. We use it only to confirm you are 18 or older. If you are under 18 we don't create an account or store the year. |
| Hustle content | Hustle names and one-liners, the hustle type you pick or describe under "Other", stage progress, tasks you complete or add, focus sessions, check-ins, kill lines, reminders and their notes, lessons learned, and Sunday reviews. |
| Game data | Coins, streaks, streak freezes, shop items and where you placed them, and your mascot's name. |
| Preferences | Your user type, hustle hours, quiet hours, notification cap, time zone, and sound, music and haptics settings. |
| Referrals | Your referral code, and who invited whom. |
| Feedback | Text and optional screenshots you send with the in-app feedback button. |
| Beta sign-up (website) | Your email address and whether you use iPhone or Android. |
| Support | Anything you include when you email us. |
Information collected automatically
| Category | Examples |
|---|---|
| Push notifications | A push token for your device and a log of which notifications we sent, so we respect your daily cap and quiet hours. |
| Subscription status | Which plan you are on, renewal and expiry dates, and store transaction IDs. We never receive your card or payment details; Apple and Google process all payments. |
| Device check | A one-way hashed device identifier, used only to stop the same device from claiming referral rewards over and over. |
| Usage analytics | Events such as "task completed" or "stage reached", app version, device model and OS, and an app-generated ID. We use these to understand which features help people make progress. |
| Crash reports | Technical details about crashes and errors (stack traces, device model, OS version). |
We do not collect your precise location, contacts, photos (other than a screenshot you choose to attach to feedback), advertising ID, or bank, card or income account details. The website uses no advertising or tracking cookies.
3. How we use it
- To run the app: save your hustles and progress, sync across devices, run your streak, and unlock rewards. (Legal basis where applicable: performance of our contract with you.)
- To send notifications you've allowed, within your hustle hours, quiet hours and daily cap.
- To manage subscriptions and referral rewards, and to prevent abuse of them. (Contract; legitimate interest in preventing fraud.)
- To improve StashMode using aggregated usage analytics and crash reports. (Legitimate interest.)
- To answer support requests and feedback.
- To email you about the beta if you signed up on the website. (Consent, which you can withdraw at any time.)
- To meet legal obligations, such as tax records and responding to lawful requests.
We do not sell your personal information, share it for cross-context behavioural advertising, or use it for automated decisions that have legal or similarly significant effects on you.
4. AI features
StashMode uses AI in two narrow, behind-the-scenes ways:
- "Other" hustles. When you describe a hustle type that isn't on our list, the short text you typed (up to 120 characters) is sent from our servers to our AI providers, TypeSafe (Jev) and Anthropic (Claude), to check it and draft a starter task plan. We send only that text, not your name, email or other account details.
- Mascot lines. We use AI to write and refresh the mascot's general encouragement lines. This uses no personal information.
Anthropic's commercial terms do not permit it to train its models on content sent through its API. The AI never sees your other hustle content, and no feature you use day to day waits on a live AI call.
5. Who we share it with
We share information only with service providers that process it on our behalf and under contract, for the purposes above:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and file storage (US region) |
| Apple and Google | Sign-in, app distribution, payments and push delivery |
| RevenueCat | Subscription status and referral rewards |
| Expo | Sending push notifications |
| TypeSafe and Anthropic | AI features described in section 4 |
| PostHog | Product analytics |
| Sentry | Crash reporting |
| Resend | Sign-in link emails |
| Cloudflare | Website hosting and email forwarding |
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition (in which case this policy continues to apply). If you share a StashMode share card, you choose where it goes; it contains only what's shown on the image.
6. How long we keep it
- Account and app data: until you delete your account. Deletion removes it from our live systems immediately; encrypted backups roll off within 30 days.
- Hashed device identifier: kept after account deletion, only to prevent repeat referral-reward abuse. It can't be used to identify you.
- Subscription transaction records: kept after deletion as needed for tax, accounting and dispute purposes, with your account link removed.
- Beta sign-ups: until the beta ends plus 90 days, or sooner if you ask.
- Analytics and crash data: up to 12 months.
7. Your choices and rights
- Delete your account any time in the app: Me → Delete account. See how deletion works.
- Notifications: change hours, quiet hours and daily cap in Me, or turn them off in your phone's settings.
- Access, correct, export or delete: email privacy@stashmode.app from the email on your account. We respond within 30 days (45 days where US state law allows). We may need to verify your identity. You can use an authorised agent where the law allows.
- Object or withdraw consent, for example to analytics or beta emails, by contacting us.
- We will not discriminate against you for exercising any of these rights.
8. Region-specific notices
United States (including California)
In the last 12 months we have collected the categories of personal information listed in section 2 (identifiers, commercial information about subscriptions, internet or device activity, and inferences limited to your chosen user type) for the purposes in section 3, and disclosed them to the service providers in section 5. We do not sell or "share" personal information as those terms are defined under California law, and we do not knowingly collect information from anyone under 18. Residents of California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws may exercise the rights in section 7. If we deny a request, you may appeal by replying to our decision.
United Kingdom and European Economic Area
You have the right to access, rectify, erase, restrict or object to processing, and to data portability. Our legal bases are listed in section 3. You can complain to your local data protection authority (in the UK, the Information Commissioner's Office).
Canada and Australia
We handle personal information in line with PIPEDA and the Australian Privacy Principles. You may request access to or correction of your information, and complain to the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.
9. Adults only
StashMode is only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it. If you believe a minor is using StashMode, contact us.
10. Security and international transfers
Data is encrypted in transit and at rest, and access is locked down per user with row-level security. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach where the law requires. Our servers are in the United States. Where we transfer data from the UK, EEA or elsewhere, we rely on appropriate safeguards such as Standard Contractual Clauses.
11. Changes and contact
If we make material changes, we'll update the date at the top and tell you in the app before they take effect. Questions: privacy@stashmode.app or [LEGAL ENTITY NAME], [POSTAL ADDRESS].