Stash is a desktop app for Mac and Windows that finds receipts in your email and saves them as files in a folder you choose. This policy explains what data Stash accesses, how it is used, where it is stored, and the choices you have. "Stash", "we" and "us" refer to the developer of the Stash app, operated by Jess Kirsch.
1. Information Stash accesses
Email account access
When you connect an email account, you grant Stash read-only access:
| Account | Permission requested | Why |
|---|---|---|
| Google (Gmail) | gmail.readonly (read your email messages and settings), plus your email address |
To search your mailbox for receipt emails and read their contents and PDF attachments. |
| Microsoft (Outlook, Microsoft 365) | Mail.Read, User.Read, offline_access |
To search your mailbox for receipt emails, read them, and show which account is connected. |
| Other email (IMAP) | The app-specific password you enter | To sign in to your mail server and read receipt emails. |
Stash cannot send, delete, move or modify email. It does not access your contacts, calendar or files in your Google or Microsoft account.
What Stash reads in your email
Stash searches for messages that look like receipts (for example, subjects containing words like "receipt", "order" or "invoice", or Gmail's Purchases category). For those messages, it reads the sender, subject, date, body and PDF attachments to decide whether the message is a receipt and to determine the merchant, date and total. Spam, drafts and sent mail are never scanned; Trash is scanned only if you turn that option on.
2. How your information is used
Information from your email is used only to provide Stash's receipt features:
- identifying which emails are receipts;
- extracting the merchant, date and amount;
- saving each receipt as a PDF named and filed by year, month and merchant in the folder you choose;
- showing your receipts and spending totals inside the app.
We do not use your information for advertising, do not sell it, do not use it to build user profiles, and do not allow humans to read your email, except where you ask us to for support and give us explicit permission, where necessary for security purposes, or where required by law.
3. Where your information is processed and stored
On your computer
By default, all processing happens on your own computer. Your email is downloaded directly from your email provider to the app and is not sent to us.
- Receipt files are saved only to the folder you choose. If that folder is inside a cloud service such as iCloud Drive, Dropbox, Google Drive or OneDrive, that service syncs it under its own terms and privacy policy.
- Sign-in tokens and app passwords are stored encrypted using your operating system's secure storage (macOS Keychain or Windows Data Protection).
- App data such as your settings, a list of recently saved receipts (merchant, date, amount and file location) and identifiers of emails already processed is stored in the app's folder on your computer so the same receipt isn't saved twice.
Smart reading (optional)
If the "Smart reading" setting is on, and only when Stash's built-in rules cannot read a particular email, Stash sends that single email to the Stash extraction service over an encrypted (HTTPS) connection. What is sent: the sender, subject, date, the email's text and, if present, its PDF receipt attachment. Also sent is a random install identifier, used only to prevent abuse of the service and not linked to your name or email address.
The service uses Anthropic's Claude API, acting as our service provider, to identify the merchant, date and total, and returns only those fields to the app. We do not store the email content on our servers. Anthropic processes the content under its commercial terms, which prohibit using it to train its models, and retains it only for a limited period for trust and safety purposes. You can turn Smart reading off at any time in Settings, after which no email content leaves your computer.
4. Google API Services: Limited Use disclosure
Specifically, information Stash receives from Google APIs:
- is used only to provide and improve Stash's user-facing receipt-finding and filing features;
- is transferred to others only as necessary to provide those features (for example, to the extraction service described above when Smart reading is on), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users;
- is never used or transferred for serving advertisements, including retargeting, personalized or interest-based advertising;
- is never sold, and is never used to determine creditworthiness or for lending purposes;
- is not read by humans, except with your affirmative consent for specific messages, when necessary for security purposes such as investigating abuse, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations;
- is never used to develop, improve or train generalized artificial intelligence or machine learning models.
Microsoft account data is handled with the same commitments.
5. Sharing
We share information only with the service providers needed to run the optional Smart reading feature (our hosting provider and Anthropic), only as described above, and when required by law. We do not sell or rent personal information.
6. Retention and deletion
- Remove an account: In Stash, go to Accounts and remove it. Its sign-in token or password is deleted from your computer.
- Revoke access: At any time, revoke Stash's access from your Google Account permissions or your Microsoft account apps.
- Delete app data: Uninstalling Stash and deleting its app folder removes all data stored by the app. Receipt PDFs remain in your chosen folder until you delete them.
- Smart reading: email content sent for extraction is not stored by us after the request completes.
7. Security
Connections to email providers and to the extraction service use encryption in transit (TLS). Credentials are encrypted at rest with your operating system's secure storage. Email is rendered to PDF with scripts disabled. No method of storage or transmission is completely secure, but we work to protect your information and will notify affected users of any breach as required by law.
8. Children
Stash is not directed to children under 13, and we do not knowingly collect information from children.
9. Your rights
Depending on where you live, you may have rights to access, correct or delete personal information we hold, or to object to its processing. Because Stash stores your data on your own computer, you can exercise most of these directly in the app. For anything else, contact us below.
10. Changes
If we change this policy, we will update the effective date above. If the change materially affects how we use information from your email accounts, we will notify you in the app before it takes effect.
11. Contact
Questions or requests: hello@jesskirsch.com