Privacy Policy

Who we are

Our Stash is operated by [legal name of the person or company that operates Our Stash](“we”, “us”). We decide how and why the personal information described here is used, which makes us the “controller” under laws like the GDPR. You can reach us at the address in the Contact section below.

What we collect

• Account details: your name, email address and profile photo, from the sign-in method you choose (email and password, or Google).
• Your household’s inventory: items, quantities, categories, tags, notes, prices, expiration dates, shopping-list entries, and the history of changes (who added or changed what).
• Home upkeep: the maintenance tasks and bills you add, including names, amounts, due dates, notes and completion or payment history.
• Receipts and shelf photos: when you scan one, the photo is sent to an AI service that reads the items on it. We do not keep the photo.We keep the lines it read (item names, quantities, prices, the store) as your scan history. If a receipt can’t be read, we may keep up to a few thousand characters of the text the reader returned, to help fix the problem.
• Barcodes: when you scan one, the number is looked up in the public OpenFoodFacts database. Nothing else about you is sent.
• Household membership: which households you belong to, your role, and the invite codes used to join.
• Notifications: if you turn on push notifications, the device subscription your browser gives us, plus your notification preferences and quiet hours.
• Support messages: anything you send us through the Support page.
• Technical data: standard server logs (such as IP address, browser and the pages requested), used to run and secure the service.

Cookies, browser storage and analytics

Always on (strictly necessary).A sign-in cookie that keeps you signed in, and small items in your browser’s storage for your preferences and for remembering the analytics choice below. The app can’t work without these.

Off unless you say yes (analytics).If you allow it, we use Google Analytics to see which pages are used and how, so we can improve the product. Google Analytics is not loaded at all until you choose “Allow analytics”, and we treat a browser-level Global Privacy Control signal as a “no” unless you tell us otherwise. Everything in Our Stash works the same either way.

You can change your answer at any time from Settings, or change it here.

Why we use it, and our legal basis

• To provide the app you asked for (account, inventory, scanning, alerts, sharing a household): necessary to perform our agreement with you.
• To keep the service secure and working (logs, abuse prevention, fixing bugs): our legitimate interest in running a safe product.
• Analytics and push notifications: your consent, which you can withdraw whenever you like.

We do not sell your personal information, and we do not use it to show advertising.

Who we share it with

We use a small number of service providers, only for the jobs below:

• Google (Firebase Authentication): signs you in and verifies your identity. Google Analytics only if you opt in.
• Anthropic: reads receipts and shelf photos you choose to scan.
• OpenFoodFacts: looks up barcode numbers.
• Railway: hosts the application and its database.
• Your browser’s push service (Apple, Google or Mozilla): delivers notifications you turn on.

Households are shared spaces. Anyone in a household can see and, depending on their role, change its inventory, shopping list, upkeep tasks, bills and history. Only invite people you trust.

We may also disclose information if the law requires it.

Where your information is processed

Our providers process information in the United States and other countries. Where the law requires a safeguard for transfers out of the EU, UK or similar regions, we rely on the transfer mechanisms our providers offer, such as standard contractual clauses.

How long we keep it

• Your information is kept while your account is active.
• Items you delete wait in Trash for 30 days so you can undo, then are removed.
• When you delete your account, households where you are the only member are deleted with everything in them. In households shared with other people, you are removed and what you added stays with that household, shown as “Former member”. Your name, email, photo, notification devices and support tickets are erased.
• Backups kept by our hosting provider age out on their normal schedule.

Your rights and choices

Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have the right to access, correct, delete, export or object to the use of your information, and to withdraw consent.

• Access and export: download your inventory as a CSV from Settings, under Your data.
• Correct: edit anything in the app directly.
• Delete: use Settings, then Privacy and data, then Delete account. It takes effect immediately. If you own a household other people use, hand it over first.
• Withdraw consent: change the analytics choice or turn off notifications in Settings.
• Anything else: email us and we will respond within 30 days. You also have the right to complain to your local data protection authority.

Security

We use HTTPS, verify who you are on every request, and limit what each household role can do. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been accessed by someone else.

Children

Our Stash is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their information. A parent or guardian may add a child to their own household.

Contact

Questions about this policy or your information? Email [privacy contact email].