Privacy Policy

Last Updated: December 23, 2025

1. Introduction

Welcome to HelpStash. This Privacy Policy explains how we collect, use, and protect your information when you use our iOS application ("App").

Key Point: HelpStash is designed with privacy as a core principle. We collect minimal data, and everything is stored locally on your device.

2. Information We Collect

2.1 Information You Provide

  • Timer Data: Purchase amounts, categories, duration preferences, and timer outcomes (resisted/purchased)
  • User Statistics: Streak count, money saved totals, timer completion history
  • Settings: Notification preferences, haptic feedback settings, custom timer presets

2.2 Information We DO NOT Collect

  • ❌ Personal identification information (name, email, phone number)
  • ❌ Location data
  • ❌ Device identifiers
  • ❌ Browsing history or external app usage
  • ❌ Contacts or photos

2.3 Privacy Manifest Compliance

Per Apple's May 2024 requirement, all iOS apps must include a Privacy Manifest file (PrivacyInfo.xcprivacy) declaring data collection practices and required-reason API usage.

HelpStash's Privacy Manifest declares:

  • Data Collection: None (NSPrivacyCollectedDataTypes: empty array)
  • Tracking: None (NSPrivacyTracking: false)
  • Tracking Domains: None (NSPrivacyTrackingDomains: empty)
  • Required Reason APIs:
    • UserDefaults (CA92.1) - Used to store app preferences and state
    • File Timestamps (C617.1) - Used by SwiftData for data persistence

You can view this privacy information yourself in iOS Settings → Privacy & Security → App Privacy Report after installing HelpStash.

Reference: Apple Privacy Manifest Documentation

3. How We Store Your Data

3.1 Local Storage Only

All your data is stored locally on your device using Apple's SwiftData framework. We do not transmit your personal data to external servers.

3.2 iCloud Sync

Current Status: iCloud sync is NOT enabled. Your data remains exclusively on your device.

If iCloud sync is added in the future, you will be notified and given the option to opt in. iCloud data is encrypted and subject to Apple's Privacy Policy.

3.3 App Groups & Widget Data Sharing

HelpStash uses App Groups (com.apple.security.application-groups) to enable home screen widgets and lock screen widgets to display your timer and streak data. This is a standard iOS feature that creates a shared container for data exchange between the main app and its widget extensions.

What this means for your privacy:

  • Your data remains entirely on your device in a shared local container
  • App Groups only enable data sharing between HelpStash app and its own widgets
  • No third parties have access to this shared container
  • No cloud sync or external servers are involved
  • Widgets can read timer data, streak information, and savings statistics to display updates

Apple's SwiftData framework automatically migrates your existing data to the app group container when you first install widgets. This migration happens entirely on your device and does not transmit any data externally.

Reference: Apple SwiftData Documentation

4. Subscription & Payment Information

HelpStash uses Apple's StoreKit 2 for in-app purchases. When you subscribe:

  • Apple processes your payment information (we never see your credit card)
  • Apple provides us with a receipt to verify your subscription status
  • We do not store or have access to your payment details

Your payment information is governed by Apple's Privacy Policy.

5. Analytics & Usage Data

We do NOT collect any analytics or usage data. HelpStash is a local-only app - all your data stays on your device and is never transmitted to our servers or third parties.

This means:

  • ❌ No tracking of feature usage
  • ❌ No crash reports sent to us
  • ❌ No behavioral analytics
  • ❌ No third-party analytics services (no Google Analytics, Facebook Pixel, etc.)

Why? Your financial behavior is private. We designed HelpStash to never require an internet connection or server infrastructure.

5.1 Apple Intelligence & On-Device AI Processing

HelpStash Premium includes "Private AI Reflection," a feature that uses Apple's on-device Foundation Models framework to analyze your spending patterns and provide personalized insights. This feature is only available on iPhone 15 Pro or later running iOS 26.0+ with Apple Intelligence enabled.

What Data is Analyzed

Private AI Reflection analyzes the following data stored locally on your device:

  • Your pause timer history (amounts, categories, durations, outcomes)
  • Urge journal entries (triggers, emotions, notes, resistance strategies)
  • Spending patterns over time (completion rates, successful resistances)

How AI Processing Works

100% On-Device Processing: All AI analysis happens exclusively on your iPhone using Apple's foundation language models. Your personal data is NEVER transmitted to external servers, third-party AI services, or HelpStash's servers.

Per Apple's Intelligence & Privacy policy, the Foundation Models framework:

  • Processes data entirely on your device
  • Does NOT collect, store, or transmit your personal data to Apple
  • Does NOT use your data to train AI models
  • Only works when you explicitly enable Apple Intelligence in Settings

Third-Party AI Disclosure

Per Apple's November 2025 App Review Guidelines, we explicitly disclose: HelpStash does NOT share your personal data with any third-party AI services. The AI features use only Apple's first-party, on-device Foundation Models framework. No external AI providers (OpenAI, Google, Anthropic, etc.) have access to your data.

Your Control

  • You must explicitly enable Private AI Reflection in the app (opt-in, not automatic)
  • You can disable the feature at any time in app settings
  • If you disable Apple Intelligence system-wide in iOS Settings, AI features stop working immediately
  • When you delete the HelpStash app, all AI-generated insights are permanently removed with your local data

References:
• Apple Intelligence and Privacy on iPhone
• Apple Foundation Models 2025 Updates

6. Data Sharing & Disclosure

We cannot share your data because we do not collect it. Since HelpStash stores all data locally on your device (not on our servers), we have no data to sell, rent, share, or disclose.

Legal Requests: If law enforcement requests user data, we cannot provide it because we don't have it. Any legal process would need to be directed at you and your device, not us.

Apple Subscription Data: The only information we have access to is your subscription status (via Apple's receipt verification). This is governed by Apple's Privacy Policy, not ours.

7. Your Rights & Data Control

7.1 Access Your Data

All your data is visible within the app's Stats and Settings screens. You have complete control over your information.

7.2 Delete Your Data

To delete all your data:

  • Uninstall the app from your iPhone
  • All local data will be permanently deleted

(Note: A "Delete All Data" button will be added to Settings in a future app update)

7.3 Export Data

Currently, data export is not available. You can manually review all your data within the Stats screen.

8. Children's Privacy

HelpStash is not directed to children under 13, and we do not collect personal information from users.

9. Data Security

We implement industry-standard security measures:

  • Data stored locally on your device (protected by iOS security)
  • Encrypted communication with Apple services (StoreKit)
  • No transmission of personal data to external servers

Note: No method of storage is 100% secure. Protect your device with a passcode or biometric authentication.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via:

  • In-app notification
  • Update to "Last Updated" date at the top of this page

Continued use of the app after changes constitutes acceptance of the updated policy.

11. GDPR Compliance (EU Users)

If you are located in the European Union, you have rights under GDPR. However, because HelpStash stores all data locally on your device (not on our servers), most GDPR data requests do not apply to us:

  • Right to Access: We have no data about you to provide. All your data (purchase history, stats, streaks) is stored locally on your device. You can view it anytime in the app's Stats screen.
  • Right to Rectification: We do not store your data on our servers, so there is nothing for us to correct. Your data is stored locally on your device. To modify your data, you can delete the app and reinstall it to start fresh, or wait for the specific entry to be removed naturally over time.
  • Right to Erasure: We have no data to delete. To delete your local data, see Section 7.2 (uninstall the app from your iPhone).
  • Right to Data Portability: We cannot export your data because we do not collect or store it. Your data never leaves your device.

Apple Subscription Data: The only information related to you that we can access is your subscription status (via Apple's receipt verification). This is governed by Apple's Privacy Policy. To exercise GDPR rights regarding your Apple ID or subscription data, contact Apple directly.

Questions about this policy? Contact us at support@helpstash.app. Please note we cannot fulfill data access/deletion requests for data we do not have.

12. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). Here's how HelpStash complies:

  • Right to Know: We do not collect or store any personal information about you. All data is stored locally on your device.
  • Right to Delete: We have no data to delete. To delete your local data, uninstall the app from your iPhone. (A "Delete All Data" option will be added to app Settings in a future update.)
  • Right to Opt-Out of Sale: We do not sell your personal information. We never have, and never will.
  • Non-Discrimination: We do not discriminate based on exercise of CCPA rights.

Apple Subscription Data: For CCPA requests regarding your Apple ID or subscription data, contact Apple directly.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us:

Response Time: We typically respond within 48 hours.