Last updated: 2026-03-06
Your privacy is important to us. Please read this Privacy Policy (“Privacy Policy”) carefully before using the StashIt mobile application. This Privacy Policy describes how Ana Banana Labs (“Company”, “we”, “us”, or “our”) collects, uses, discloses, retains, and protects information when you download, install, access, or use the StashIt mobile application (the “App”) and any related services (collectively, the “Services”). By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Services. Unless otherwise defined herein, capitalized terms used in this Privacy Policy have the same meanings as in our Terms & Conditions.
For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller of your Personal Data is:
The following definitions apply throughout this Privacy Policy:
We may collect certain Personal Data that you voluntarily provide when you use the Services, including:
We only collect Personal Data that is necessary to provide the core functionality of the App. We practice data minimization and do not request information beyond what is needed to deliver the Services.
When you use the App, we may automatically collect certain technical and usage information, including:
This data is collected to help us maintain, improve, and optimize the App’s performance, stability, and user experience.
We want to be transparent about the data we do not collect:
We use the information we collect for the following purposes and legal bases:
StashIt is designed with a privacy-first approach. Your User Content (photographs, screenshots, tickets, gift cards, and other saved items) is stored locally on your Device and, if applicable, within your device’s App Group shared container for features like the Share Extension. This means:
We do not sell, rent, or trade your Personal Data to third parties for their marketing purposes. We may share your information only in the following limited circumstances:
We may engage third-party companies and individuals to facilitate the Services, perform service-related functions, or assist us in analyzing how the Services are used (“Service Providers”). These Service Providers have access to your Personal Data only to perform tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. Examples include analytics providers and crash reporting services.
We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request), or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Services; (d) protect the personal safety of users or the public; or (e) protect against legal liability.
If the Company is involved in a merger, acquisition, asset sale, bankruptcy, reorganization, or similar transaction, your Personal Data may be transferred as part of that transaction. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.
We may share your information for any other purpose with your explicit consent.
We may use third-party Service Providers to monitor and analyze the use of our Services and to improve functionality.
Subscription purchases and payment processing are handled entirely by Apple through the App Store. We do not collect or store your payment card details, billing address, or financial information. Apple’s use of your information is governed by Apple’s Privacy Policy: https://www.apple.com/legal/privacy/
The App may use analytics and crash reporting tools to help us understand how the Services are used and to improve stability. These services may collect anonymized or pseudonymized usage data, device information, and crash logs. We configure these services to minimize the collection of personally identifiable information. You may be able to limit certain analytics data collection through your device’s privacy settings (e.g., Settings > Privacy & Security > Analytics & Improvements on iOS).
We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Specifically:
When your data is no longer needed, we will securely delete or anonymize it. We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, enforcing our Terms).
Your information, including Personal Data, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer data, including Personal Data, to the United States and process it there.
The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or country unless there are adequate safeguards in place, including the security of your data and other personal information. For transfers from the European Economic Area (EEA), we rely on appropriate legal mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.
The security of your data is important to us. We implement commercially reasonable administrative, technical, and physical safeguards designed to protect the Personal Data we collect and process, including:
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. You are responsible for maintaining the security of your device and any credentials associated with your account.
If you are a resident of the European Union (EU) or European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. You have the right to:
To exercise any of these rights, please contact us at support@anabananalabs.com. We may ask you to verify your identity before responding to such requests. We will respond to your request within 30 days, or within the timeframe required by applicable law. Please note that we may not be able to provide certain Services without some necessary data.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include:
To exercise these rights, please contact us at support@anabananalabs.com. We will verify your identity before processing your request and respond within 45 days, as required by law. You may also designate an authorized agent to make a request on your behalf.
In the preceding twelve (12) months, we may have collected the following categories of personal information: identifiers (e.g., email address, device identifiers); commercial information (e.g., Subscription purchase history); internet or electronic network activity (e.g., App usage data, interactions with features); and inferences drawn from the above (e.g., user preferences). We collect this information for the business purposes described in Section 4 of this Privacy Policy.
In accordance with CalOPPA, we agree to the following:
We honor Do Not Track signals. When a Do Not Track browser mechanism or the equivalent App Tracking Transparency setting is enabled on your device, we do not engage in cross-app tracking or serve targeted advertising. You can manage tracking preferences through your device’s Settings > Privacy & Security > Tracking on iOS.
The Services are not directed to anyone under the age of 13 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you become aware that your child has provided us with Personal Data, please contact us immediately at support@anabananalabs.com. If we become aware that we have collected Personal Data from a child under 13 without verification of parental consent, we will take prompt steps to delete that information from our systems. If you are between the ages of 13 and 18, you may only use the Services with the involvement and consent of a parent or guardian.
The App may contain links to third-party websites, applications, or services that are not operated by us. If you interact with any third-party link, you will be directed to that third party’s service. We strongly advise you to review the privacy policy of every third-party service you access. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Personal Data maintained and processed by our affiliates and third-party Service Providers in the United States and other jurisdictions may be subject to disclosure pursuant to a lawful access request by courts or government authorities in those jurisdictions. We will not provide your information to third parties for marketing purposes without your prior consent. To access, update, or correct inaccuracies in your personal information, or if you have a question or complaint about our privacy practices, please contact us using the information in Section 18.
To the extent Mexican privacy laws (LFPDPPP) apply, the following provisions shall prevail over conflicting provisions: We may use your Personal Data for the purposes described in Section 4, which may be considered secondary purposes under Mexican law. You may withdraw your consent to processing at any time by contacting us, though withdrawal may affect our ability to provide certain Services. You may exercise your ARCO rights (Access, Rectification, Cancellation, and Opposition) by contacting us at support@anabananalabs.com. We will respond to valid ARCO requests within 20 business days. To be considered complete, your request must include your full name, contact information, and a clear description of your request.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy within the App with a revised “Last Updated” date and, where required by applicable law, by providing additional notice (such as an in-App notification or email). You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted. Your continued use of the Services after the revised Privacy Policy becomes effective constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: