At STSH, we respect your privacy and are committed to protecting the personal data you stash in your vaults. This Privacy Policy describes how we collect, use, store, and share your information when you use our web landing page, cloud synchronization service, and native macOS and iOS applications (collectively, the "Services").
1. Information We Collect
Depending on how you interact with our Services, we may collect the following categories of information:
- Account Information: When you register for an account, we collect your email address, username, and encrypted password credentials.
- Vault Contents (Stashed Items):
- HOME: Details about items in your household, locations, categories, tags, and custom metadata.
- DRIP: Fitting metrics, apparel tags, purchase histories, and cataloged wardrobe assets.
- SNKRS: Sneaker sizes, models, condition states, and cataloged sneaker collections.
- HLTH: Vital metrics (e.g. resting heart rate, blood pressure) and medication histories. This data is subject to enhanced encryption.
- Device & Application Data: We collect hardware configurations, operating system versions, native application logs, and diagnostic telemetry from our macOS and iOS apps to fix bugs and improve performance.
- Biometric Data (Native Apps Only): Our native iOS and macOS apps support FaceID, TouchID, or local device passcodes. We do not have access to, collect, or store your biometric data; all biometric verification is handled securely by the underlying operating system.
2. How We Use Your Information
We use the information we collect for the following business and operational purposes:
- To operate, maintain, and provide the core functions of the STSH platform.
- To sync your personal vaults securely across your web client, macOS app, and iOS devices.
- To process transactions and manage subscription plans.
- To diagnose application bugs, perform performance analysis, and deploy native software patches.
- To communicate service notifications, security alerts, and system updates.
3. Data Protection and Encryption
Security is the absolute core of STSH. We implement robust industry-standard safeguards to protect your personal vault data:
- Encryption in Transit: All communications between our client apps and cloud synchronization servers are encrypted using Transport Layer Security (TLS/SSL).
- Encryption at Rest: Database repositories on our cloud servers utilize advanced AES-256 server-side encryption standards.
- End-to-End Encryption Options: Sensitive vaults (such as your HLTH modules) can be encrypted client-side using custom cryptographic keys generated from your master passphrase. STSH staff cannot read, decrypt, or recover data encrypted with these keys.
4. Sharing and Disclosure
We do not sell, trade, rent, or lease your personal data, health metrics, or wardrobe inventory to third parties. We only share information in the following limited circumstances:
- Household Sharing: When you explicitly choose to invite and share a stash/vault with other household members using our Multi-Household Sync feature.
- Service Providers: We may share diagnostic information with trusted third-party providers (such as hosting and analytics services) to support application operations, subject to strict confidentiality agreements.
- Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority.
5. Your Rights and Data Deletion
You retain absolute ownership over your stashed data. You have the right to:
- Access, download, or export your entire vault database in standard JSON or CSV formats.
- Correct or update any incorrect item listings or personal details directly in the application.
- Delete your account. When you request account deletion, all account information and stashed vault contents are immediately and permanently erased from our active databases and backup logs within 30 days. Cryptographic keys are destroyed, rendering any stored files unrecoverable.
6. Children's Privacy
Our Services are not designed for or directed at children under the age of 13. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.
7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our software or operational practices. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
8. Contact Us
If you have any questions, security concerns, or requests regarding this Privacy Policy, please reach out to our privacy compliance team at stash.app.team@gmail.com.