Privacy Policy

Effective date: July 28, 2026

This Privacy Policy explains how QuelTech, LLC ("Stashel," "we," "us," or "our") collects, uses, and shares information when you use the Stashel mobile application and related services (the "Service").

1. Information we collect

Information you provide:

Account information — such as your name, email address, or the identifier provided when you use Sign in with Apple.
Your Content — photos of items, item names and details, notes, tags, spaces, documents, and other information you add to Stashel.
Household and sharing information — the members you invite and the items or spaces you share with them.
Subscription information — your tier and billing status. Payment card details are handled by our payment processor, not stored by us.

Information collected automatically:

Usage and device data — basic technical information needed to operate the app reliably, such as app version, device type, and error/diagnostic data.

Stashel includes one third-party SDK that sends data off your device: Sentry, used solely for crash diagnostics. Stashel does not include any advertising SDKs or product-analytics SDKs (such as Google Analytics, Firebase Analytics, Amplitude, Segment, Mixpanel, or advertising networks), and we do not track you across other apps or websites.

What Sentry receives. When the app crashes or hits an unexpected error, Sentry receives a technical report: the error type and message, the code location it happened in, your device model and operating-system version, the app version, and a short trail of the app's own recent activity (which screens were opened and which network requests were made) to show what led up to the failure.

What Sentry does not receive. We strip identifying and personal content before anything is sent. Specifically, the report does not include your name, email address, account identifier or IP address; it does not include your items, item names, photos, documents, notes, or household members' details; it does not include the contents of network requests or the addresses of your stored files; and we do not capture screenshots, screen recordings, or session replays. We do not send the app's diagnostic log output, because that output can contain temporary access links to your own files.

How it is used. These reports are used only to find and fix crashes. They are not used for advertising, for profiling you, for measuring your behaviour in the app, or for tracking as defined by Apple's App Tracking Transparency framework — and they are not combined with data from other companies to identify you. Because we remove account identifiers before sending, we generally cannot tell which user a given crash report came from.

Separately, and as before: Apple and our infrastructure providers (for example, Apple's App Store and TestFlight, and Supabase) may collect limited crash, diagnostic, and operational data in the course of delivering and running the Service, as described elsewhere in this Policy.

2. How we use information

We use information to:

Provide, maintain, and improve the Service.
Store and display your items and let you share them with your household.
Process subscriptions and manage your tier.
Respond to support requests.
Keep the Service secure and diagnose problems.
Comply with legal obligations.

We do not sell your personal information, and we do not use Your Content for third-party advertising.

3. How your information is stored

Stashel uses the following service providers to operate:

Supabase — for authentication, database, and file/photo storage.
Sentry — for crash diagnostics. Receives only the technical error reports described in Section 1; it does not receive your account identifiers or Your Content.
Apple In-App Purchase — for subscription billing on iOS. (Stripe may be added for web billing in the future.)

Your Content, including photos and documents, is stored using our infrastructure provider's storage services. Photos and documents are kept in private storage buckets: access is enforced by row-level security, and the app retrieves files through short-lived signed URLs rather than public links, so files are not accessible to anyone outside the household they are shared with. We rely on industry-standard security measures to protect your data, though no method of storage or transmission is completely secure.

4. How we share information

We share information only in these circumstances:

With members of your household — content you choose to share is visible to the people you share it with.
With service providers — such as our infrastructure, crash-diagnostics, and payment providers, who process data on our behalf under appropriate obligations.
For legal reasons — if required by law or to protect rights, safety, and security.
In a business transfer — if the Service is involved in a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell or rent your personal information to third parties.

5. Photos and camera

Stashel uses your camera and/or photo library only to let you add images of your items, and only when you choose to. Images you add are stored as part of Your Content.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete an item, it is removed from your library. When you delete your account, we delete or de-identify Your Content, subject to any retention required by law.

7. Your choices and rights

Access and export — you can export your data from within the app, on any tier.
Deletion — you can delete individual items or your entire account.
Sharing controls — you control who is in your household and what you share.

Depending on where you live, you may have additional rights (for example, under the GDPR or similar laws), including the right to access, correct, delete, or port your data, and to object to certain processing.

8. Children

Stashel is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International users

Stashel's data is stored in the United States — our infrastructure provider, Supabase, hosts this Service in its US West (Oregon) region. Our crash-diagnostics provider, Sentry, also processes these reports in the United States (us.sentry.io). If you use Stashel from outside the United States, your information will be processed in the United States, which may have data-protection laws different from those in your country. Where required, we take steps to protect it consistent with this Policy.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the app or by other reasonable means, and update the effective date above.

11. Contact

Questions about your privacy or this Policy? Contact us at support@stashel.app.