StashmunkPrivacy Policy
Stashmunk is built to keep your library yours. There's no account and no cloud sync, and the things you save stay on your device. This policy explains exactly what does leave your device, who receives it, and why. It applies to the Stashmunk app and its share extension, widgets and Shortcuts actions (together, “Stashmunk” or “the app”).
Smart Apps Lab, LLC (“Smart Apps Lab”, “we”, “us”) is responsible for the data described here (the “controller” under European data protection law). Our contact details are at the end of this policy.
Summary
- No account, no sign-up, no cloud sync. We never receive your library.
- Sorting happens on your device.
- To show previews and play what you saved, your device contacts the sites and platforms your links point to.
- The app sends anonymous usage events, crash reports and performance data to Amplitude and Google (Firebase). These are not linked to your identity and are not used for advertising or tracking.
- We don't sell or share personal information, and we don't track you across other companies' apps or websites.
What stays on your device
- Your library: the links you save, their titles, descriptions, thumbnails, collections, keywords, sorting rules, saved searches and search history. It's stored only on your iPhone or iPad. We never receive it.
- Sorting: deciding which collection an item belongs in happens on your device, with Apple Intelligence where available or a small model built into the app. Your saves are not sent to us or to any AI service for sorting.
- The share-sheet queue and widget snapshot: links you share to Stashmunk while it's closed, and the small copy of recent saves the widget shows, are kept in your device's keychain so the app, share extension and widget can read them. Items in locked collections are never written to the widget snapshot.
- The Diagnostics log (Settings › Help › Diagnostics): a record of each link's journey through the app, including links, titles, the collection chosen and, for Shortcuts automations, up to the first 300 characters of the text the automation passed in. It stays on your device and is never uploaded by the app; it's shared only if you choose to share it (for example, attach it to an email to us). The same entries are also written to iOS's system log on your device, which can be included in diagnostic reports you choose to share with Apple.
What leaves your device
| What | Sent to | Why |
|---|---|---|
| The link you saved, and requests for its preview image | The site the link points to (for example YouTube, TikTok, Instagram, X, a news site) and that platform's public preview service (oEmbed) | To fetch the title, preview image, description and public category information. It's the same kind of request a browser makes when you open the link. |
| Requests to play or display content | The platform that hosts the content (its embedded player or web page) | To show the content you saved, using that platform's own player or page. |
| Anonymous usage events | Amplitude, and Google Analytics for Firebase | To understand which features are used and where people get stuck, so we can improve the app. |
| Crash reports and performance data | Firebase Crashlytics and Firebase Performance Monitoring (Google) | To find and fix crashes, errors and slow screens or network requests. |
| Purchase requests | Apple (App Store) | To process purchases and check what you've bought. |
| Emails you send us | Smart Apps Lab | To answer you. |
Any server your device contacts, including each service above, necessarily receives your device's IP address and basic technical information (such as the app's or browser's user agent). These services may use the IP address to estimate an approximate location, such as country or city. We don't use IP addresses to identify you.
Sites and platforms your links point to
When you save a link, the app contacts that site (and, for some platforms, its public oEmbed service) directly from your device to fetch public information about it, and loads the preview image from where it's hosted. The widget does the same to show thumbnails. When you view an item, the app uses the platform's own embedded player or web page, and articles open in reading mode or Safari view.
These sites and platforms receive your IP address and the request itself, and embedded players and pages may set cookies or use similar technologies, which can be stored on your device between sessions. Reading mode loads articles in a private, non-persistent session. What these third parties do with the information is governed by their own privacy policies, not this one. We aren't affiliated with them and don't control them.
Anonymous usage events
Events describe what kind of thing happened, never what you saved. For example: “a link was saved from the share sheet; it was a YouTube video; it was filed automatically.” Specifically, they can include:
- Product interaction: which screens and features are used, and counts, categories (for example “YouTube”, “video”, a default category name such as “Music”), rounded numbers (such as library size in ranges) and durations.
- Purchase history: that a purchase screen was shown, a purchase was started, completed or failed, which product (for example “lifetime” or “yearly”, or a tip size) and which screen it came from. Google Analytics for Firebase may also record App Store purchase events automatically (for example the product and price). None of this includes your name or Apple Account.
- Device identifiers: a random ID created when you install the app, and Firebase's own random app-instance ID. These aren't your device's advertising identifier (IDFA) or vendor identifier (IDFV); we don't collect either. Deleting the app deletes the random install ID.
- Technical information: app version, iOS version, device model, language and region settings, and session timing.
Events never include the links you save, their titles, captions or descriptions, creator names, what you type in search, your collection names, or your name, email, contacts or precise location.
Crash reports and performance data
- Firebase Crashlytics receives crash reports and records of non-fatal errors: stack traces, device and app state at the time (such as model, iOS version, free memory and disk space), a Crashlytics installation ID, and the names of recent app events. It doesn't receive your saved content.
- Firebase Performance Monitoring measures app start time, screen rendering and network requests the app makes. For network requests it records the web address with the query string removed (the domain and path), response time, size and status. Because the app fetches previews for links you save, this can include the domain and path of those links. This data is used only in aggregate to measure speed and reliability and isn't linked to your identity.
Clipboard, share sheet and automations
- Clipboard: while the app is open, it checks whether the clipboard appears to contain a web link, using an iOS feature that doesn't reveal the clipboard's contents to the app. It reads the clipboard only when you tap to save a copied link (iOS's Paste button), run the Save Copied Link action, or open a
stashmunk://save-clipboardlink. You can turn link detection off in Settings. - Share sheet: the app receives only what you choose to share to it.
- Shortcuts automations: if you set up an automation (for example, for Messages or Mail) that runs the Save Link action, iOS passes the text you configured the automation to pass. Stashmunk finds the links in it on your device, applies your Apps & Sites filters, and saves the links like any others. The text itself isn't sent anywhere by the app (see the Diagnostics log above for what's kept on your device). Usage events record only counts, such as how many links were found and saved.
Purchases
Stashmunk Pro, the yearly plan and tips are sold through Apple's App Store. Apple handles payment under its own privacy policy; we never see your name, Apple Account or payment details. The app checks what you've bought with Apple on your device. See “Anonymous usage events” for the purchase information our analytics record.
Face ID, widgets and your settings
- Face ID: locked collections use Apple's Face ID or your passcode through iOS. Stashmunk never sees your face data; iOS only tells the app whether unlocking succeeded.
- Widgets: the Home Screen widget shows your latest saves from the on-device snapshot described above, and loads each preview image from the site it came from.
- Sorting rules, saved searches and imports stay on your device. An imported file is read on your device and its links are saved like any others.
Emails and support
If you email us (for example with Settings › Send Feedback), we receive your email address, your message and anything you attach, such as screenshots or the Diagnostics log. We use it only to answer you and to fix problems you report, and we keep it as long as needed for that and to keep a record of the conversation. Please don't send us sensitive information you don't want us to have.
Why we use data, and our legal bases
If you're in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Fetching previews and showing content you saved; processing purchases | Performance of our agreement with you (providing the app you asked for) |
| Anonymous usage events, crash reports and performance data | Our legitimate interests in keeping the app working, secure and improving, balanced against your interests. We limit these to content-free, non-identifying data and never use them for advertising or tracking. |
| Answering your emails | Our legitimate interest in answering you, or taking steps you ask for |
| Complying with law and protecting our rights | Legal obligation and legitimate interests |
Who receives data
We use these service providers, which process data on our behalf under their terms and data processing agreements:
- Amplitude, Inc. (United States): usage analytics.
- Google LLC (United States): Google Analytics for Firebase, Firebase Crashlytics and Firebase Performance Monitoring. Google Analytics' advertising personalization signals are turned off.
Apple processes purchases and provides iOS features (such as Apple Intelligence, Face ID and the keychain) under its own terms and privacy policy. Sites and platforms you save links from receive requests as described above. We may also disclose information if required by law or valid legal process, to protect the rights, safety or property of our users, us or others, or in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to it.
No sale, no targeted advertising, no tracking
We don't sell personal information, and we don't “share” it for cross-context behavioral advertising as those terms are defined in the California Consumer Privacy Act (as amended by the CPRA) and similar U.S. state laws. We don't show ads, don't use data for targeted advertising or profiling, and don't track you across other companies' apps or websites, which is why the app never asks for App Tracking Transparency permission. We don't collect sensitive personal information.
Retention
- Your library and the Diagnostics log stay on your device until you delete items or the app. The Diagnostics log keeps only its most recent entries.
- Google Analytics for Firebase is currently configured to keep event-level data for 2 months.
- Firebase Crashlytics keeps crash reports for 90 days. Firebase Performance Monitoring keeps data for a limited period set by Google.
- Amplitude keeps usage events until we delete them. We keep them only as long as they help us understand and improve the app, and delete them when they no longer do.
- Emails are kept as described under “Emails and support”.
Your choices and rights
- Your library: export everything you've saved from Settings › Export Your Library, delete items at any time, or delete the app to remove your library from your device.
- Analytics: the app doesn't currently have a setting to turn off usage events, crash reports or performance data. Deleting the app stops all of them and deletes the random install ID. You can also email us to object to this processing or to ask us to delete data (see below).
- Clipboard detection and automations: turn off link detection in Settings, and remove or edit Shortcuts automations in the Shortcuts app.
Depending on where you live (including the EEA, UK, Switzerland, California and other U.S. states with privacy laws), you may have the right to know or access the personal information we hold about you, and to have it corrected or deleted, to receive it in a portable form, to object to or restrict processing, to withdraw consent where we rely on it, and to appeal our decision on your request. We won't discriminate against you for exercising these rights.
To exercise them, email support@smartappslab.com. Because usage data is tied only to random IDs and not to your name or email, we may be unable to find data that relates to you; if so, we'll tell you, and we'll do what we reasonably can with any information you provide. We'll respond within the time required by applicable law. You may use an authorized agent where the law allows, and we may ask for reasonable proof of the agent's authority. If we deny your request, you can appeal by replying to our response. If you're in the EEA, UK or Switzerland, you can also complain to your local data protection authority.
International transfers
Smart Apps Lab and its service providers are based in the United States, so data described in this policy is processed in the United States and possibly other countries whose laws may differ from yours. Where European data protection law applies, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and, where the recipient is certified, the EU–U.S. Data Privacy Framework and its UK and Swiss extensions.
Security
Your library is protected by iOS's built-in data protection, the share-sheet queue and widget snapshot by the iOS keychain, and data sent to our service providers is encrypted in transit. No method of storage or transmission is completely secure, so we can't guarantee absolute security. Your device's passcode and security settings are the main protection for your library.
Children
Stashmunk isn't directed to children under 13 (or the minimum age required in your country), and we don't knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we'll delete it.
This website
This website is hosted on Google Firebase Hosting (and mirrored on smartappslab.com), and it loads fonts from Google Fonts. Like any web host, these services receive your IP address and standard request information (such as your browser's user agent and the page requested) when you visit, and may keep it in server logs. The website itself doesn't use cookies, analytics or advertising.
Changes
If this policy changes, we'll update the date above. For material changes, we'll also tell you in the app or on this page before they take effect, and where the law requires your consent, we'll ask for it.
Contact
Smart Apps Lab, LLC · [MAILING ADDRESS] · support@smartappslab.com
[EU/UK REPRESENTATIVE, IF APPOINTED: NAME AND ADDRESS]