HSA Stash Privacy Policy

Last updated: November 14, 2026

HSA Stash ("the app") is made by Igor Buzato ("we"). This policy explains what happens to your information when you use the app.

The short version

HSA Stash does not collect your data. Your receipts stay on your iPhone. We have no servers, no accounts and no analytics, and we never see your receipts, amounts, notes or backups. Nothing leaves your device unless you choose to share a file.

What the app stores

The receipts you add (provider, amount, date of service, who it was for, category, notes, reimbursement status), the original images and PDFs of those receipts, your contribution entries, the date you opened your HSA, family member names and your settings (such as whether the app lock is on) are stored only on your device, in the app's private storage. They are included in your device backups (iCloud Backup or computer backups) under your control.

HSA Stash never connects to your HSA provider, bank, employer, the IRS or any other service. The app makes no network requests of its own.

Camera and text recognition

When you scan a receipt, the app uses the iOS document scanner, which uses the camera. The scan is saved inside the app. To suggest the amount, date and provider, the app reads the text in the image with Apple's Vision framework. This text recognition runs on your iPhone. The image and the text are never sent anywhere. You review and edit what it suggests before anything is saved.

Photos and files

When you add a receipt from your photo library or the Files app, the app reads only the photos or files you choose. A copy is stored inside the app. The original stays where it was, untouched.

App lock

HSA Stash can lock with Face ID, Touch ID or your device passcode. This is optional and off until you turn it on. The check is done by iOS. The app only learns whether it succeeded; it never receives your face data, fingerprint or passcode.

Backups and exports you create

Backups and yearly exports are files created on your device. They leave it only when you choose to share or save them, for example with AirDrop, Files, iCloud Drive or Mail, using the iOS share sheet. A backup contains all your receipts and their original images, so keep it somewhere safe. Whoever you send a file to handles it under their own terms.

Purchases

HSA Stash Pro is sold through Apple's App Store. Apple processes the payment; we never see your payment details. The app checks your purchase with Apple's StoreKit on your device.

What we collect

Nothing. The app contains no analytics, advertising or tracking code, and no third-party software development kits (SDKs) that collect data. We do not track you across apps or websites.

Apple may provide us with aggregated, anonymous statistics about app installs and crashes if you have chosen to share them with developers in your device settings. That information is governed by Apple's Privacy Policy.

Not tax advice

HSA Stash organizes the records you keep. Totals, limits and projections are estimates for your records, not tax advice, and a projection is not a promise. Tax rules depend on your situation; see IRS Publications 969 and 502 or ask a tax professional.

Children

HSA Stash is not directed at children under 13 and does not knowingly collect any information from anyone. If you enter family member names, they stay on your device.

Deleting your data

Delete receipts in the app, or delete the app to remove everything it stored on your device. Deleting a receipt also deletes its files. Backup files you exported are separate files that you manage yourself.

Changes

If this policy changes, we will update the date above and publish the new version at the same address.

Contact

Questions: igor@buzato.dev.br