Privacy policy

Who operates the apps

Paul Frye develops ServerStash and ServerStash+. Contact pefrye@gmail.com with privacy questions. This policy covers the apps and this informational website.

Information you enter

The apps store records locally on your device. ServerStash records jobs, shifts, times, tips, sales, tip-outs, pace, steps, schedules, and notes. ServerStash+ also records account names and balances, bills, categories, payment status, spending, deposits, and transfers. These records support the summaries, calculations, and charts you see in the apps.

Device backups managed by Apple may also contain local app data, depending on your device settings. Account labels and balances entered in ServerStash+ do not give the app access to a bank account.

HealthKit and steps

If you grant permission, the apps can read HealthKit step counts for a shift and store the count with that shift. You can use manual step entry instead. Manage or revoke Health access through Apple's Health privacy settings.

Recorded steps, their source, and pace are included in shift exports and optional Google Sheets backups. A backup can therefore contain information originally read from HealthKit. Review your records before exporting and choose who can access the resulting file or spreadsheet.

Google sign-in and spreadsheet access

When you choose Create Google Sheet or Sync, Google handles sign-in and asks you to authorize spreadsheet access. The current apps request the Google Sheets permission that can see, edit, create, and delete your spreadsheets. The backup feature uses that permission to create a backup spreadsheet and write records to the configured backup spreadsheet; it does not require you to share your Google password with the apps.

The apps send backup requests directly to Google's Sheets API over HTTPS. Access tokens authorize these requests and are used in memory during the operation. The apps retain the backup spreadsheet URL in local settings.

ServerStash uploads jobs, shifts, and schedules. ServerStash+ uploads accounts, shifts, bills, spending, deposits, and transfers. Depending on the app, this includes names, dates, work times, hours, monetary amounts, categories, payment indicators, notes, step counts, step source, and pace. Google stores the resulting spreadsheet in your Google account under Google's policies and your sharing settings.

Google user data is used to provide the spreadsheet features you request. It is not sold or used for advertising or to train general-purpose AI models. ServerStash and ServerStash+ comply with the Google API Services User Data Policy, including its Limited Use requirements.

Imports, exports, and schedules

You can import files or supported spreadsheet links and export records. An import from a spreadsheet link sends a request to the service hosting that spreadsheet. Fetching a schedule feed contacts the provider at the URL you configure. Files you choose to share through Apple's share sheet go to the destination you select.

ServerStash+ contains legacy Apps Script configuration. If a build or workflow uses an Apps Script backup endpoint, that Google-hosted script receives the records supplied by that workflow. The current Create Google Sheet and manual Sync actions use Google's Sheets API directly.

Retention, deletion, and disconnecting

Local records remain until you delete them, reset the app, or remove the app's local data. Backups and exported files are separate copies. Deleting a record locally, resetting the app, or uninstalling does not automatically delete those copies.

Current Sync writes records into spreadsheet tabs. It does not automatically clear every older row when local records are removed. To remove backed-up information, delete the relevant rows or spreadsheet in Google Sheets or Drive, and separately remove any exports or device backups you keep.

You can revoke the apps' Google access through your Google Account's connections settings. Revoking access stops future authorized operations but does not delete an existing spreadsheet. You can keep using local logging without Google backup.

This website and support

This website is hosted by Cloudflare. Hosting a request involves technical information such as your IP address and request details, subject to Cloudflare's privacy policy. The site has no added advertising trackers or analytics scripts.

If you email support, your message and any information you include are used to respond to your request. Avoid sending passwords or unnecessary financial or health details. Contact the support address to request deletion of support correspondence under the developer's control.

Changes

This page will be updated if the apps' data practices change. The date above identifies the current policy.