Privacy Policy

Overview

Media Stash ("the App") is an encrypted media vault for Android. It is designed with a privacy-first architecture: your data stays on your device, encrypted under keys only you hold. This policy explains what data the App collects, how it is used, and your rights.

Data That Stays on Your Device

All media files, stash containers (.stash files), PINs, and encryption keys are stored exclusively on your device. The App does not transmit, upload, or share your media or encryption keys with any server operated by Media Stash or any third party.

• Media files are encrypted with AES-GCM and stored in a single container file.
• PINs are processed through PBKDF2 or Argon2 key derivation and never stored in plaintext.
• Decryption happens in memory. No temporary files or thumbnail caches are created.

Cloud Backup

If you choose to enable cloud backup, your stash file is uploaded to your own cloud storage account (e.g., Google Drive). The uploaded file remains encrypted — it is the same .stash container stored on your device. Media Stash does not operate backup servers and does not have access to your cloud storage credentials beyond the OAuth scope you grant.

You can revoke cloud access at any time through your cloud provider's account settings.

Data We Collect

Media Stash does not collect personal information, usage analytics, or telemetry. The App does not contain third-party analytics SDKs, advertising frameworks, or tracking pixels.

The Google Play Store may independently collect download statistics, crash reports (if you have opted in to share diagnostics with Google), and device metadata. This collection is governed by Google's Privacy Policy, not ours.

Permissions

The App requests the following Android permissions:

• Storage — to read and write .stash files and to import/export media.
• Internet — required only for cloud backup functionality. No data is sent to Media Stash servers.

Third-Party Services

Media Stash integrates with Google Drive for optional cloud backup. When you authorize backup, the App uses Google's OAuth 2.0 to access your Drive storage. The App requests the minimum scope necessary to create, read, and update backup files in a dedicated application folder. No other Drive data is accessed.

Children's Privacy

Media Stash is not directed at children under 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this policy to reflect changes in the App or legal requirements. Updates will be posted on this page with a revised effective date.

Contact

If you have questions about this privacy policy, contact us through the Google Play Store listing.