Privacy Policy - DocuStash

DocuStash is made by Double L Solutions Limited, a small independent studio, not a big company that makes money from selling data. This policy explains in plain English what happens to your information when you use the app. The short version: your documents and details are yours, we don't sell them, and there are no advertisers or data brokers involved.

The short version

Your stuff is yours. The documents and details you put in DocuStash belong to you. We don't claim ownership of them.
We don't sell your data. No advertisers, no data brokers, nobody buying or receiving your information. That's not how we make money. The app pays for itself through its subscriptions.
We can't read your documents, or the details you type. Your files and the information you enter about them (names, policy or reference numbers, notes, and any custom fields) are encrypted on your phone with AES-256 before anything is uploaded. The key comes from your passphrase, which never leaves your device, so what reaches our servers is scrambled data that even we can't read.
We can tell something's due, not what it is. To remind you before a renewal, we keep only the renewal date and category readable. So we can tell you something expires in 15 days and that you should open DocuStash to see what, without ever knowing what the item actually is. Only your phone can unlock the details.
You can leave any time. Export everything or delete your account whenever you want, and your data goes with you.

Does DocuStash work completely offline?

Yes. DocuStash has an Offline-only mode (Settings, then Data Mode, then “Offline only”). When you turn it on, the app stops syncing to our cloud entirely. Your documents, files, and the details you type are saved only in the app's storage on your own device, and nothing is uploaded to our servers.

That means we never receive a copy and have no way to see any of it. You don't need us, an account sync, or even an internet connection to use the app this way. It just runs on your phone. If you ever want backup and sync across devices, switch back to Online mode, and nothing syncs until you do.

What we collect

If you use DocuStash in the normal Online mode with cloud backup, here's what we handle:

Your account. Your email address and password, so you can sign in and we can keep your account working.
Your documents and their details. The files you upload (insurance policies, MOT certificates, warranties, memberships, and so on) plus the details you add. Both the files and the content you type (names, policy or reference numbers, notes, and any custom fields) are encrypted on your device before upload, so what sits on our servers is unreadable to us. The only parts we keep readable are the renewal date and category, so the app can remind you in time and keep things organised, never the content itself.
Payment information. If you subscribe, your payment is handled by the app store's billing, so we never see or store your card details.
Basic device and usage data. Standard technical information such as device type, operating system, app version, IP address, and anonymous usage and crash statistics. We use this to keep the app secure, fix bugs, and see which features people use. It never includes your document content, and we don't use it to identify you personally beyond your account.

In Offline-only mode, none of your documents or their details are uploaded at all. See the offline section above.

We don't sell your data or share it with advertisers or data brokers. The only companies that ever touch it are the trusted providers that host the app and process payments on our behalf, and they only handle the encrypted or minimal data needed to do their job. We'd also hand over data if the law genuinely required it, such as a valid court order, or if the business were sold, in which case your data would move with the app under this same policy.

How long we keep it

We keep your information for as long as you have an account. When you delete your account, we delete your data from our active systems. Some information may stay briefly in encrypted backups before those roll over, and we may keep the minimum required by law (for example, basic records for tax), but nothing longer than we have to.

Keeping it safe

Your files and the details you type about them are encrypted on your device with AES-256 before upload, and the key is derived from a passphrase only you know. It never reaches our servers. On top of that we use sensible technical and organisational safeguards. No online system can promise to be 100% unbreakable, but the end-to-end encryption means that even in a worst case, including someone breaking into our systems or us being forced to hand over what we hold, your content stays unreadable without your passphrase.

There's an honest trade-off in that. Because only you hold the key, if you lose your passphrase we can't recover your data. Not even we can unlock it. That's the price of real privacy, and we think it's the right one, so keep your passphrase somewhere safe.

Children

DocuStash isn't meant for children. We don't knowingly collect information from anyone under 18. By using the app you confirm you're at least 18 (or a parent or guardian consenting for a minor). If we learn we've collected data from someone under 18, we'll delete it and close the account. If you think that's happened, email us at doublelsolutionsltd@gmail.com.

Your rights

Wherever you live, and especially under UK and EU GDPR, you have real control over your information. You can:

See it. Use “Download My Data” in Settings to export your account data and files at any time.
Correct it. Edit your details directly in the app.
Delete it. Delete individual documents, or close your account entirely, which permanently deletes your data.
Take it with you. Your export is in a standard, portable format.
Withdraw consent. Where we rely on your consent, you can change your mind at any time.

To exercise any of these, email doublelsolutionsltd@gmail.com or use our contact page. If you're in the UK or EEA and think we've got something wrong, you also have the right to complain to your data protection authority. In the UK that's the ICO.

Changes to this policy

If we change this policy, we'll update the date at the top and flag anything significant. It's worth a look now and then.

Contact us

Questions about your privacy, or want to review, update, or delete your data? Email us at doublelsolutionsltd@gmail.com, use our contact page, or write to us:

Double L Solutions Limited
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom