Privacy Policy

1. About this policy

This Privacy Policy explains how StashGuard, the household inventory and reminder app published by Vensio AS in Norway, handles information. Vensio AS is responsible for personal information it receives in connection with StashGuard. For privacy questions or requests, contact contact@vensio.no.

StashGuard works without an account. Your inventory and household database is stored locally on your device, and Vensio does not receive or have remote access to that database. Online product lookups, files you choose to export or share, device backups, and messages you send us are explained below.

• Go to data retention and deletion instructions

2. Information stored on your device

The app processes the information you enter to organise supplies, calculate stock and nutritional estimates, record consumption, and schedule reminders. Depending on the features you use, this includes:

• Inventory and product names, barcodes, quantities, expiration dates, categories, storage locations and sub-locations, and nutritional information.
• Household member names, optional ages and gender, calorie and water needs, and pet information.
• Medication names, instructions, doses, schedules, stock, and dose or task history for household members and pets. Information about a person's medication can be sensitive health information.
• Tasks, shopping lists, consumption records, notes, and preferences such as units, theme, and reminder settings.

These records remain in the app's local storage unless included in a backup or export as described below. Enter information about other people only when you are entitled to do so. Storage locations such as Home or Cabin are labels you enter; StashGuard does not request GPS location or access your contacts, microphone, HealthKit, or Health Connect.

3. Barcode lookups and Open Food Facts

When you scan or look up a barcode, StashGuard checks your local product records first. If there is no match, it can send the barcode over HTTPS to Open Food Facts to retrieve product and nutritional information. You can use manual item entry without performing an online barcode lookup.

The request contains the barcode, not your household profile, medication records, inventory database, or camera images. As with any internet request, Open Food Facts also receives your IP address and ordinary connection information, such as request time and headers. These may be handled in its server logs under its own privacy policy; Vensio does not control those logs or their retention.

A barcode and the returned product information may be saved locally with your inventory. StashGuard does not send a separate scan history to Vensio. Open Food Facts is an independent service, and its product information may be incomplete or inaccurate.

• Open Food Facts privacy policy

4. Camera, notifications, and file access

Camera access is optional and used to recognise barcodes. StashGuard does not take, save, or upload photos or video from the camera. You can refuse or revoke camera permission and enter items manually.

With permission, the app schedules local expiration, task, medication, and stock reminders through your device's operating system. It does not register a remote push token or send reminder content to a Vensio notification server. Reminder text may contain item, task, or medication details and may appear on your lock screen or connected devices according to your system settings. You can disable notifications or hide their previews in device settings. Android may also request permission to schedule exact alarms for reminder timing.

When restoring a backup, you choose a file through the system file picker. When exporting or sharing, you choose the destination through your device's sharing controls. StashGuard does not request general access to your photo library or all your files.

5. Exports, backups, and sharing you control

You can export selected records as CSV or PDF files. Settings → Export Backup creates a JSON backup containing the app database and supported preferences, including household and medication information you have entered. These files are created on your device. They are not encrypted or password-protected by StashGuard.

If you save or share a file to email, cloud storage, another app, or another person, that destination receives its contents and handles them under its own terms and privacy practices. Only share files with recipients you trust. Vensio does not automatically receive your exports or backups.

The app does not provide a Vensio cloud account or automatic Vensio cloud sync. However, your operating system's device backup or transfer service may include StashGuard data, depending on your settings. The iOS app permits its local database to be included in device backups. Manage these copies through your device or backup provider. Restoring a backup can restore previously deleted records.

6. Information Vensio receives and why

StashGuard does not include advertising, cross-app tracking, advertising identifiers, third-party analytics, or an automatic crash-reporting service. It does not upload your inventory or medication records to Vensio or to an AI service. Vensio does not sell your personal information or use it for targeted advertising.

If you contact us, we receive your email address, message, and any attachments you choose to send. We use this information to answer you, provide support, and handle privacy requests. Please avoid sending medication records or full backups unless needed for your request. Our email service providers process correspondence to deliver and store those messages.

When you visit this policy or the Vensio website, our hosting provider, Vercel, processes ordinary web request information such as IP address, browser information, requested page, and request time to deliver and secure the website. This is separate from the app's local database.

For personal information Vensio receives, our legal bases under applicable European data protection law are our legitimate interests in responding to enquiries and operating a secure service, performance of a contract where necessary to provide requested support, and compliance with legal obligations when handling rights requests or records we must retain. We rely on consent where required; consent can be withdrawn without affecting processing already lawfully carried out.

Access is limited to people and service providers who need information for these purposes. Providers acting on our behalf must protect it under applicable data protection requirements and our instructions. We may disclose information we hold when required by law. If our providers process that information outside the EEA, applicable transfer safeguards, such as an adequacy decision or standard contractual clauses, are required. Contact us for information about safeguards relevant to your request. Independent services you use, including Open Food Facts, app stores, and backup or sharing destinations, describe their own processing in their privacy policies.

• Vercel privacy policy

7. Data retention and deletion

StashGuard has no user accounts or Vensio-hosted inventory database, so there is no online account to delete. Your local records remain until you delete them, clear the app's data, or remove the app and its data. Vensio cannot remotely read, recover, or erase those records.

To delete the active StashGuard database, open Settings → Delete All Data, type DELETE, and select Delete Everything. This resets the inventory, household, medication, task, shopping-list, and history records and cancels scheduled reminders. It does not remove separately created export or backup files, device backups, or all app preferences.

To remove remaining local app files and preferences, delete the app and its data using your device settings (on iOS, choose Delete App rather than Offload App; on Android, clear the app's storage or uninstall). Separately delete exported CSV/PDF files, JSON backups, shared copies, and cloud or device backups using the relevant file manager or service. Copies held by recipients or independent providers must be handled with those recipients or providers.

For support emails or other personal information Vensio holds, email contact@vensio.no with the subject StashGuard privacy request and describe what you want deleted. We may ask for proportionate information to verify your request; do not send passwords or a full inventory backup. We retain correspondence only as long as needed to resolve the request, manage related issues, meet legal obligations, or establish, exercise, or defend legal claims. Any information retained for those reasons is limited to what is necessary.

We respond to applicable data protection requests without undue delay, normally within one month. If a lawful extension or an exception to deletion applies, we explain it. The retention of independent providers' logs and your own device backups is governed by those providers and your settings.

8. Security and your choices

StashGuard uses the device's app storage protections; it does not add its own encryption or password protection to the database or exported files. Protect your device with a passcode and current operating-system updates, and safeguard your backup files. Online Open Food Facts requests use HTTPS. No storage or transmission method can be guaranteed completely secure.

You can edit or delete local records in the app, export your information, revoke optional permissions through device settings, and stop online lookups by using manual entry. For personal information Vensio holds, applicable law may give you rights to access, correction, erasure, restriction, portability, objection, and withdrawal of consent. Contact contact@vensio.no to exercise them. You may complain to Datatilsynet, the Norwegian Data Protection Authority, or your local supervisory authority.

• Datatilsynet — Norwegian Data Protection Authority

9. Children and changes to this policy

StashGuard is intended for users aged 13 and older. Users under 18 should have a parent or guardian's permission. Household records about children are entered and managed by the adult using the app; they are not child accounts. If you believe a child has sent personal information to Vensio, contact us so we can address it.

We will update the date on this page when this policy changes and provide additional notice or request consent where required. Any future change to the app's collection or sharing of information must be reflected in the policy and the relevant in-app disclosures before that processing starts.