Stashlet
The short version
- Stashlet has no accounts and no servers. Your vault never leaves your iPhone.
- Photos, videos, documents and the item list are encrypted on the device with AES-256-GCM.
- We don't collect, sell or share personal data, and the app contains no ads, analytics or tracking SDKs.
- The only information that reaches us is what you choose to send through the feedback form.
What we don't collect
The Stashlet app does not collect or transmit any of the following to us or to any third party:
- The photos, videos, documents or any other files you add to your vault, or their thumbnails
- Text recognised inside your documents, or the results of the Exposure Scan
- Your vault PIN or decoy PIN
- Your Face ID data. Face ID is handled entirely by iOS and the Secure Enclave; Stashlet only learns whether the check succeeded.
- Intruder photos and unlock-attempt records
- Your contacts, location, advertising identifier or browsing activity
Stashlet works fully offline. It does not need an internet connection to lock, unlock, import, scan or search.
What stays on your iPhone
To work, Stashlet stores the following only on your device:
| Data | How it's protected |
|---|---|
| Vault items (photos, videos, documents, thumbnails) and the vault's item list | Encrypted with AES-256-GCM. Each vault (real and decoy) has its own 256-bit key. |
| Encryption keys | Generated on the device and kept in the iOS Keychain, readable only while the iPhone is unlocked and never synced to other devices. |
| Vault PIN and decoy PIN | Never stored. Only a salted PBKDF2-SHA256 hash (200,000 rounds) is kept, in the Keychain. |
| Intruder photos and unlock-attempt log (if enabled) | Encrypted with your real vault's key. |
| App preferences (for example auto-lock and panic-lock settings) | Stored in the app's local settings. They contain no personal content. |
Vault files use iOS "complete" file protection and are excluded from iCloud and computer backups. This means we cannot recover your vault if you delete the app, lose your device or forget your PIN.
When you view an item, it is decrypted in memory for display. Videos use a temporary decrypted copy that is deleted when you close the viewer and whenever the app locks. If you save or share an item, the copy you create outside the vault is no longer encrypted by Stashlet and is handled by the app you send it to.
Permissions and why we ask
| Permission | Used for |
|---|---|
| Photos | Importing photos and videos you choose, and running the optional Exposure Scan. The scan reads your library on the device to find IDs, bank papers and password screenshots. Nothing is uploaded, and results are kept in memory until you move items into the vault. You can choose Limited Access instead. |
| Photos (add only) | Saving copies back to your library when you ask. |
| Camera | Taking photos and videos, and scanning documents, straight into the vault. If you turn on Intruder Photo, the front camera captures a picture after three wrong PINs in a row; the picture is encrypted in your vault. |
| Microphone | Recording sound with videos you shoot inside Stashlet. |
| Face ID | Confirming it's you before the PIN step. Handled by iOS. |
You can change any of these at any time in your iPhone's Settings.
Purchases
Subscriptions and one-time purchases are processed by Apple through the App Store. We don't receive your name, Apple ID, email or payment details. Apple's handling of purchase information is described in Apple's Privacy Policy.
Diagnostics
Stashlet includes no analytics or crash-reporting SDKs. If you have chosen in iOS Settings to share analytics with app developers, Apple may provide us with anonymous crash reports and usage statistics. These never include the contents of your vault. You can turn this off in Settings › Privacy & Security › Analytics & Improvements.
Feedback & support
If you send us a message through the feedback form on this website, we receive:
- the topic you choose and the text you write;
- a reply address, only if you enter one;
- the page of this website you sent it from.
The form is delivered to us by email using FormSubmit, a form-forwarding service that processes the message for that purpose only. We use your message to understand feedback and, if you asked, to reply. We don't add you to any mailing list, and we delete messages on request. Please don't include passwords, ID numbers or other sensitive information in feedback.
This website
This website uses no cookies, analytics or advertising trackers. Fonts, images, videos and scripts are served from this site itself. Like any web server, our hosting provider may keep standard technical logs (such as IP address and browser type) for security and reliability.
Children
Stashlet is not directed at children under 13, and we don't knowingly collect personal information from children. Because the app doesn't collect personal data, no child's data is sent to us through the app.
Your choices and rights
Because your vault exists only on your device, you're always in control: you can export items, delete them, or delete the app, which permanently removes the vault and its keys. If you've sent us feedback, you can ask us to access or delete it through the support form. Depending on where you live (for example under the GDPR or CCPA), you may have further rights, and we'll honour them.
Changes to this policy
If we change how Stashlet handles data, we'll update this page and the effective date above. Material changes will also be noted in the app's release notes.
Contact
Questions about privacy? Reach us any time through the support form. We read every message.