StashPick Privacy Policy

1. Your inventory stays on your device

The following information is stored only in the app's private storage on your device:

• item names, optional SKUs and notes
• item photos (taken with the camera or picked from your photos)
• bins / locations: names and descriptions
• item status (stored / picked) and dates
• app settings (appearance, "Remember last bin", "Show picked items", the analytics setting)

StashPick has no account and no sign-in. It does not sync your inventory to the cloud. We have no server that receives your inventory. We cannot see, access or recover your inventory.

Operating-system device backups. If you turned on your phone's own system backup (Android backup to your Google account, or iCloud Backup on iPhone), the operating system may include StashPick's app data in that backup. The backup is managed by Google or Apple under your account and their terms. StashPick does not send it anywhere itself. The app's temporary safety copy made before a restore is excluded from Android system backups.

2. Anonymous usage analytics (TelemetryDeck)

To learn whether the app is useful, for example whether people come back, add items, search and find them, StashPick sends limited anonymous usage events through TelemetryDeck, a privacy-focused analytics service. This is turned on by default and you can turn it off at any time (see section 3).

What an event contains:

• the event name only: item_created, bin_created, search_started, search_result_opened, item_found, item_moved, rapid_session_started, rapid_session_completed, rapid_session_abandoned, qr_scanned, csv_import_completed, csv_export_completed, backup_created, backup_restore_completed, feedback_opened
• a few fixed-value details chosen from a closed list, for example source = rapid, has_photo = true, result = success, type = bug, or a rough count range such as items_added_bucket = 5_9
• technical information added by the TelemetryDeck SDK:
• app version and build
• operating system and version
• device brand and model, CPU architecture, screen size, density and orientation
• language, region, locale and time zone
• a few accessibility and display settings (for example font scale and dark mode)
• whether the app was installed from an app store
• calendar context (day of week, hour of day)
• session and retention counters (number of sessions, days used, session length)
• an anonymous identifier, explained below

Anonymous identifier. The app creates a random identifier on your device when analytics first starts. It is not linked to your name, email, phone number, advertising ID or any account. TelemetryDeck receives it only in hashed form, and uses it to count distinct installs and sessions.

What is never sent:

• item names, SKUs, notes
• bin names or descriptions
• photos or photo file names
• search text
• QR code contents
• CSV or backup files, their contents or file names
• anything you type into the app or into the feedback form
• email address, phone number, contacts, location, advertising ID

The app's code only allows the event names and fixed values listed above.

TelemetryDeck processes this data on our behalf as an analytics provider. Its own privacy information: https://telemetrydeck.com/privacy/. Like any internet service, TelemetryDeck's servers receive your device's IP address when events are uploaded. See TelemetryDeck's documentation for how it handles IP addresses.

If your device is offline, the app keeps working normally. Events may be held on the device and sent later, or discarded.

3. Turning analytics off

Go to Settings → Privacy → Anonymous Usage Analytics and turn it off. While it is off:

• StashPick does not start the analytics SDK.
• No usage events are sent, including the SDK's automatic session events.
• Every feature keeps working.

Events recorded before you turned analytics off, and not yet uploaded, are held on the device. They are sent only if you turn analytics on again. Deleting the app's data or uninstalling the app removes them.

4. Camera and photos

• Camera: used only to photograph items and to scan StashPick bin QR labels. The app asks for camera permission only when you open a camera screen. You can refuse and still use the app: add items without a photo, pick a photo instead, and choose bins by hand. Photos and camera frames are processed on the device. They are not uploaded.
• Photo selection: on Android, StashPick uses the system photo picker. The app only receives the photos you choose and does not request access to your whole photo library. On iPhone, StashPick uses the system photo picker. It asks for "add to photos" permission only if you choose to save a QR label image to your photo library.
• QR scanning happens entirely on the device.

5. Files you create: CSV, backups, QR labels

StashPick creates files only when you ask:

• CSV export contains item names, SKUs, notes, bins, status and dates.
• Backup (.stashpick file) contains all items, bins, photos and settings.
• QR label image, PDF or printout.

You choose where these files go: Files, Google Drive, iCloud Drive, a share target or a printer. Once you save or share a file outside the app, the service or person you chose holds it under their own terms. StashPick does not upload these files anywhere. CSV import and backup restore read only the file you pick.

6. Beta feedback (Google Form)

Settings contains Send beta feedback and Report a problem. These links open a Google Form in your web browser, outside the app. The app does not fill in the form or attach any inventory, logs or device data. Anything you submit is collected by Google Forms and seen by the developer, under Google's Privacy Policy. Please don't include personal information you don't want to share.

If analytics is on, StashPick records only that the form was opened and which link was used (feedback_opened, type = general or bug). It never records anything you write in the form.

7. What StashPick does not do

• No advertising and no advertising ID
• No sale of data
• No location, contacts, microphone, phone, SMS or call-log access
• No marketplace account connection
• No in-app purchases or payments
• No account creation

8. Deleting your data

• In the app: Settings → Delete all data permanently removes all items, bins and photos from this device.
• Delete one item or bin: from its detail screen.
• Remove the app: uninstalling, or on Android clearing the app's storage, deletes everything StashPick stored on the device, including any analytics events that were not yet sent.
• Analytics data already sent: this data is anonymous and not linked to you, so we usually cannot find "your" events. If you have a request, contact us at support@boxroutetech.com.
• Files you exported (CSV, backups) are under your control. Delete them where you saved them.

9. Children

StashPick is a general inventory tool for adults (for example resellers). It is not directed at children.

10. Security

Inventory is kept in the app's private storage, which other apps cannot access. Analytics events are sent over encrypted connections (HTTPS). Exported files are not encrypted by StashPick. Store them somewhere you trust.

11. Changes

If the app's data handling changes, we will update this policy and its effective date before releasing that version.

12. Contact

Questions or requests: support@boxroutetech.com