Stashio knows nothing about you

Effective October 28, 2026 · the Stashio app for Android and this website

Stashio is an encrypted vault for photos, videos and files. It’s built so that it doesn’t need to know anything about you or what you keep in it: it has no account, no server and no internet permission. Here is exactly what happens to which data.

Who is behind Stashio

The controller of personal data is Nexem Trading s.r.o., company ID (IČO) 07189435, Svadilov 35, 664 44 Ořechov, Czech Republic. For anything to do with privacy, write to us at support@stashioapp.com.

Data in the app

• The content of your vaults (photos, videos, documents, their names, folders and capture dates) is stored only in the app’s storage on your phone, encrypted with AES-256-GCM. The key is derived from your pattern and a key stored in the phone’s hardware. No copy leaves the phone on its own.
• Your pattern isn’t stored anywhere, not even encrypted. The app shows the recovery code only once, when the vault is created, and doesn’t store it.
• App settings (appearance, auto-lock delay, showing the pattern line, Stashio Pro status) and counters of wrong attempts are kept on the phone unencrypted. They contain nothing from your vaults and nothing about how many vaults you have.
• Android backup is turned off. The app’s data doesn’t go into Google’s backup or into a transfer to a new phone. You move it to a new phone only with your own encrypted backup.
• Deletion: uninstalling the app or “Delete everything and start over” removes all of the app’s data from the phone. Copies you saved outside the vault or to backups stay where they are.

App permissions

Camera

Only for the camera inside the vault. Photos and videos go straight into the vault and never reach the phone’s gallery.

Microphone

Only for sound in videos recorded in the vault. Without it, videos are recorded without sound.

Foreground service

So that the system doesn’t interrupt the encryption of a long import or backup. On Android 12 and older a notification is shown meanwhile. Newer versions require permission to show notifications, which the app doesn’t ask for, so the running job appears only in the system’s list of active apps.

Hide overlay windows

While the vault is on screen, other apps can’t draw anything over it.

Google Play billing

To buy Stashio Pro.

Network state, wake lock, start after reboot

Added by the system library for background tasks. The app sends nothing with them; it has no internet permission.

You pick the photos and files to add in the system picker. The app has no access to your whole gallery or to the other files on the phone. After import, the originals stay where they were until you delete them yourself.

The app asks the keyboard not to learn from anything you type. Gboard respects this; keyboards from other makers may ignore it.

Backups

Manual and automatic backups are written to a file you choose in the system dialog: on the phone, on a memory card or with a storage provider such as Google Drive. The file is encrypted and only the vault’s recovery code opens it. If you save it to the cloud, the provider’s app uploads it under the provider’s terms. The provider sees the file’s size and when it changed, not its content. We have no access to your backup.

Stashio Pro purchases

• Payment is handled by Google Play under its terms and privacy policy. We don’t see your payment details.
• In the developer console, Google gives us order details such as the order number, product, price, date and country. We use them to handle refunds and support and to keep our accounts. The legal basis is performance of a contract and our legal obligations; we keep them for as long as accounting and tax rules require.
• The app on your phone only checks the signature with which Google Play confirmed the purchase, and sends nothing while doing so.
• You’ll see the purchase in your Google account’s order history. It isn’t linked to your vaults or files.

Diagnostics and statistics

The app contains no analytics, ads or crash reporting of its own. If you’ve turned on sharing usage and diagnostics data with Google in Android’s settings, Google may collect aggregated data about app crashes and show it to developers in Android vitals. This follows your phone’s settings and Google’s policies. The app writes no file names or vault content into such reports. Google Play also gives us aggregated install statistics that don’t identify anyone.

This website

This website uses no cookies, no analytics, and no fonts or scripts from other servers. The hosting provider Vercel Inc. (USA) may log ordinary technical data about visits (IP address, time, requested page and browser type) for operation and security, and delete it after a short time. Vercel is certified under the EU-U.S. Data Privacy Framework, which covers the transfer of this data to the United States.

When you write to us

We use your email address and the content of your message only to reply, and delete them once they’re no longer needed. Never put your pattern or recovery code in a message. We never ask for them, and couldn’t do anything with them anyway.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access the data we hold about you, to have it corrected or erased, to restrict its processing, to data portability and to object. Write to us at the contact email above. You can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz) or with the data protection authority in the country where you live.

Only you control the data in the app: it’s encrypted on your phone and we have no access to it, so we can neither hand it over nor delete it.

Changes to this policy

If this policy changes, we’ll publish the new version here with a new effective date. If something important changed, for example if the app started sending any data, we’d also say so in the app and in its Google Play listing.