Privacy First · Zero Knowledge
Privacy Policy
Effective Date: August 2026 | Compliant with Philippine Data Privacy Act of 2012 (RA 10173)
Executive Summary: Stash is an independent personal finance and net worth tracking ledger. We do not sell your personal financial data, display third-party advertisements, monetize transaction histories, or connect to automated bank account scrapers. Your financial records belong strictly to you.
1. Information We Collect
To provide personal budgeting, balance sheet calculation, and trajectory modeling, Stash collects:
- Identity & Account Details: Name, email address, and encrypted 4-digit device unlock PIN hash.
- Financial Ledger Records: Manually entered or imported asset accounts (e.g., BPI, BDO, Maya, Pag-IBIG MP2), liabilities and loans (e.g., Pag-IBIG Housing Loan, CIMB REVI, Tonik, Home Credit, Atome), transactions, and budget categories.
- Authentication Tokens: OAuth tokens from Google Sign-In used exclusively to verify account identity.
2. Architecture & Data Security
Stash utilizes an encrypted local-first and PostgreSQL cloud infrastructure hosted via Supabase:
- Row-Level Security (RLS): Every database row is isolated at the database level so only authenticated session holders can access their own financial records.
- Local Device Passcode Hash: Your 4-digit device PIN is salted and hashed before persistence, enabling secure offline biometrics and passcode unlocking.
- Zero Bank Scrapers: Stash never requests or stores your online banking passwords, OTPs, or debit/credit card CVV numbers.
3. Google API Services & OAuth Limited Use Disclosure
Stash's use and transfer of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements:
- Scope Minimization: Stash requests only essential non-sensitive identity scopes (
openid, email, profile) to authenticate your identity.
- No Sensitive Data Access: Stash does not request or access Gmail messages, Google Drive documents, contacts, or calendar data.
- No Ad Targeting or AI Training: Google user data is never used for serving advertisements, sold to data brokers, or used to train generalized AI/ML models.
4. Data Ownership, Export & Total Deletion
Under Republic Act No. 10173 (Philippine Data Privacy Act), you retain complete sovereignty over your data:
- Data Export: You can export your full transaction ledger and vault accounts at any time in structured JSON format from the Settings view.
- One-Click Account Purge: You can permanently delete your profile and purge all cloud database records and local device storage by selecting "Delete Account" in the settings modal.
5. Contact Information
For questions or data protection inquiries, contact the maintainer at: jomarphilip.balane@gmail.com