Privacy Policy

Who we are

Stasher and its apps (GymStash and NutriStash) are operated by Tournahub Solutions Private Limited (India). This Privacy Policy explains what we collect when you use a Stasher app or stasherapps.com, why we collect it, and the rights you have over it.

What we collect

We only collect what is necessary to run the app and keep your account secure.

• Account: your email and sign-in provider (Apple, Google, or email).
• Saved content: the video links you share to a Stasher app, and the workout or meal we extract from each one (in GymStash: title, exercises, sets, reps, form cues, equipment and notes; in NutriStash: title, ingredients, portions and macros).
• Meal capture (NutriStash): when you choose to log a meal without a reel, you may submit a photo, a scanned barcode, or a short voice note. We process each only to produce that one meal and do not browse, store or index your photo library or microphone otherwise.
• Organization: the catalogs you create, your weekly schedule, and your completions and streaks.
• Notifications: a push-notification token and your notification preferences, used only to tell you something is ready or to send a reminder you have enabled.
• Subscription state: whether you have an active plan or trial (held by our payments provider, keyed to your account).
• Anonymous product analytics: events such as screen views, paywall taps and purchase outcomes, keyed to a non-reversible internal id, never your email or name.
• Crash & performance telemetry so we can find and fix problems.
• Website feedback (optional): if you sign in on stasherapps.com to leave feedback, we store your message, the display name and avatar from your sign-in provider, and the time you posted. Your feedback and display name are shown publicly on the feedback page; your email is never shown.

What we do not collect

• Your location.
• Your contacts.
• Your photo library, camera or microphone in the background. NutriStash accesses the camera or microphone only at the moment you tap to capture a meal, and only for that capture.
• Third-party advertising identifiers (IDFA / GAID).
• The videos themselves, we never rehost media. We store only the link you shared and the workout or meal we extracted from it.

How extraction works

To turn a saved video, photo or voice note into a structured workout or meal, Stasher uses our own in-house AI extraction engine, running on trusted, security-vetted cloud infrastructure. It reads the footage, any on-screen text and any spoken words, and returns the structured result. Our infrastructure providers process your content solely to deliver this feature and are contractually prohibited from using it to train their own models. We do not sell your data.

How we use it

• To extract workouts and meals, build your library, and run the player.
• To run subscriptions, trials and entitlements.
• To send a “ready” or reminder notification when you have it enabled.
• To detect crashes and improve the app.
• To understand which parts of the experience help (anonymous product analytics, never tied to your identity).
• To respond to support requests at business@tournahub.com.

Where it lives

Account, workout, meal, schedule and completion data live in MongoDB Atlas (encrypted at rest). Authentication is handled by Supabase. The third-party processors we rely on to run the service are: MongoDB Atlas (database), Supabase (authentication, and the feedback store on stasherapps.com), RevenueCat (subscription state), Expo (push notifications), and our analytics and crash-diagnostics providers (anonymous events and scrubbed telemetry only). The stasherapps.com website uses Vercel Analytics for anonymous, cookieless traffic counts.

Retention

• Account, workouts, meals, catalogs and schedule: kept while your account is active.
• Account deletion: when you delete your account in the app, your account, saved links, workouts, meals, catalogs, schedule and completions are permanently removed. There is no recovery window.
• Website feedback: you can delete your own feedback at any time from the feedback page; we can also remove it on request.
• Anonymous analytics: retained in aggregate only, not tied to you.

Your rights

• Delete: Settings → Delete account permanently removes your account and all associated data. The action is final and immediate.
• Access, correction, portability, restriction and objection: write to business@tournahub.com and we will respond within 30 days.
• EU / UK / India: you may also lodge a complaint with your national data-protection authority.

Children

Our apps are intended for users 18 and older. We do not knowingly collect data from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us data, contact business@tournahub.com and we will delete it.

Changes

Material changes to this policy will be surfaced in-app on the next launch and posted at stasherapps.com/privacy with an updated revision date. Continued use after a change indicates acceptance.

Contact

Questions, requests or complaints: business@tournahub.com. Postal: Tournahub Solutions Private Limited, India.