StandupStash privacy policy
Updated October 6, 2026. Developer: Nathan Fennel. The optional direct AI features described below are prepared for an update and may not be present in your installed version. Earlier versions use the separate service flow described below.
Your standups and iCloud
StandupStash stores your answers, questions, saved entry versions, holidays, time-off dates, and app preferences on your device. When iCloud is available, the app uses your private Apple CloudKit database to synchronize this information across supported devices signed into the same Apple account. These records are not a public feed and are not shared with other app users. Synchronization needs an available iCloud connection and may take time.
Appearance preferences and the choice to enable reminders on a particular device are also stored locally. Apple device backups can contain app data under your backup settings. StandupStash does not require a separate developer account.
Prepared optional AI summaries
Writing, history, and sharing work without AI. On eligible devices, the prepared update offers an optional Apple Intelligence summary processed on the device. Availability depends on supported hardware, operating-system version, and Apple Intelligence settings. If it is unavailable or fails, the app does not silently send your text to OpenAI.
The separate OpenAI option is off by default. To use it, you enter your own OpenAI API key and enable the provider. Before every request, the app displays the selected saved version's questions and answers and asks you to confirm sending that text. If the displayed input changes, confirmation must be renewed. Opening history, saving a key, or cancelling the confirmation does not send a summary request. Review the text carefully if it contains workplace or personal information.
After confirmation, the app sends those selected question-and-answer pairs directly to OpenAI's API with your API credential and the model selected in settings. It does not route the new request through a developer summary server or automatically include other entries, holidays, time-off records, entry counts, or device details. OpenAI also receives ordinary connection and request information, and can associate requests and API usage with your OpenAI API account. The resulting summary does not replace the original saved answers.
API credentials and provider retention
Your key is stored in the device's protected Keychain and is not configured to sync through iCloud. API usage is billed to your OpenAI API account, separately from a ChatGPT subscription. Turning the provider off blocks future requests but keeps the saved key. Remove Key deletes the local key and disables the provider. Neither action revokes the credential in your OpenAI account or recalls information already sent.
Requests use OpenAI's store: false option. That option does not guarantee zero retention: OpenAI may retain submitted content, results, and technical information under its current API data controls and your account settings. Cancelling a request or deleting local entries cannot remove a request already received by a provider.
Earlier versions' summary service
Earlier versions send a requested summary through the StandupStash service to OpenAI after showing the AI explanation and requiring acceptance of the service agreements. Their availability check sends device type, operating-system version, app version, and number of saved entries; entry text is sent separately only for the requested summary.
That service runs on Vercel. The summary route does not maintain an application database of standups, but hosting, diagnostic, and AI provider records may retain connection, request, or error information. There is no single guaranteed deletion deadline across those services. Vercel's handling is described in its privacy notice, and OpenAI's API data controls apply to the submitted text. The prepared direct API flow does not perform the earlier service-availability check.
Voice input
Voice input uses Apple's speech recognition or system dictation. On Mac, the app asks for microphone and speech-recognition permission when you use its voice controls. On Apple Watch and other supported devices, system text-input controls may offer dictation. Depending on your device, language, and Apple settings, Apple may process audio and related information on its servers. Apple's Siri and Dictation privacy information explains its system dictation practices. Transcribed text becomes your standup answer and is then handled like other saved answers, including private iCloud sync.
The app does not create a library of audio recordings or send microphone audio to the StandupStash summary service. You can use typed input instead and manage microphone, speech, and dictation permissions in Apple settings.
Reminders and sharing
Reminders use Apple's local notification system. They are off until you enable them on a device and allow notification access. You can choose days, times, sound or quiet delivery, and whether to skip holidays and time off. Reminder enablement stays on each device; schedule preferences may sync with iCloud. Reminder delivery also follows your operating system's notification and Focus settings, including Apple Watch mirroring where enabled.
Copying or sharing an entry sends the text you choose to the clipboard or the destination you select. Other apps, recipients, or clipboard synchronization can retain those copies. Opening support, privacy, or other website links shares ordinary web-request information with the website you visit.
Your choices and deletion
You can edit answers and manage questions, holidays, time off, and reminders in the app. Saved entry versions can retain earlier answers. Manage iCloud app data and backups through your Apple account settings. Removing the app from one device does not necessarily erase iCloud records, backups, exported copies, clipboard content, or information already processed by service providers.
StandupStash contains no advertising or analytics SDK, does not track you across other companies' apps or websites, and has no in-app purchases. If you contact the developer, the information you provide is used to respond to your request. Avoid sending private standup text unless it is needed for that request.
Contact and changes
This policy will be updated when the app's data practices change.