Terms of Service
Stash: Private Photo Vault
Last updated: March 1, 2026
These Terms of Service ("Terms") govern your use of "Stash: Private Photo Vault" ("Stash", "the App"), published by Eduard Bruch. By downloading, installing, or using the App, you agree to be bound by these Terms. If you do not agree to these Terms, do not use the App.
1. Description of the App
Stash is a privacy application that provides encrypted on-device storage for files including photos, videos, documents, audio files, and other file types. The App features three disguise modes (calculator, fitness tracker, music player), a decoy vault, intruder detection, a private browser, and secure notes. All data is stored exclusively on your device using AES-256 encryption.
2. Security Disclaimer
While Stash uses AES-256 encryption, cryptographically secure key generation, and industry-standard security practices to protect your data, no security system is impenetrable. You acknowledge that:
- No method of electronic storage or encryption is 100% secure
- We cannot guarantee the absolute safety of your content against all possible threats
- Physical access to an unlocked device may compromise vault security
- The disguise modes are designed to deter casual observation but are not guaranteed to withstand forensic examination
3. Data Loss and Recovery
All data is stored only on your device. The App does not offer cloud backup, cloud sync, or any remote storage capability. If you uninstall the App, forget your PIN, perform a factory reset on your device, or lose or damage your device, your encrypted data cannot be recovered — by you, by us, or by anyone else.
You are solely responsible for maintaining any backups of your original files before importing them into the vault. Eduard Bruch is not liable for any data loss resulting from device failure, uninstallation, operating system updates, PIN loss, hardware malfunction, theft, or any other cause.
4. PIN Responsibility
You are solely responsible for creating, remembering, and keeping your PIN confidential. We do not have access to your PIN — it is stored as a one-way cryptographic hash (SHA-256) on your device. We cannot reset, retrieve, or bypass your PIN under any circumstances. If you forget your PIN, your encrypted data becomes permanently inaccessible.
If you share your PIN with others, grant physical access to your unlocked vault, or use an easily guessable PIN, you do so at your own risk. We recommend using a PIN that is at least 4 digits long and not easily associated with you.
5. Decoy Vault
The decoy vault feature allows you to set up a secondary PIN that opens a separate vault with different content. This feature is provided for privacy purposes. You acknowledge that:
- The decoy vault is intended to provide plausible deniability and may not withstand forensic analysis of the device
- We make no representations regarding its effectiveness in any specific legal, law enforcement, or personal safety situation
- Use of the decoy vault is your sole responsibility
6. Intruder Detection
When enabled, the intruder detection feature captures photographs using the front-facing camera upon failed PIN entry attempts. By enabling this feature, you acknowledge and agree that:
- You are responsible for compliance with applicable laws regarding photographing individuals in your jurisdiction
- Intruder photos are stored locally on your device and are your responsibility to manage and delete
- Eduard Bruch is not liable for any legal consequences arising from the use of this feature
7. Disguise Modes
Stash offers three disguise modes (calculator, fitness tracker, music player) that make the App appear as a different application on your home screen. These disguises include functional surface-level features (e.g., a working calculator, simulated step tracking, a music library). You acknowledge that:
- Disguise modes are designed to deter casual observation, not to guarantee concealment
- The App may still be identifiable through system-level inspection (e.g., storage settings, App Store purchase history)
- The fitness tracker disguise shows simulated data and is not a medical device or health tracker
8. Subscriptions and Payments
8.1 Free Tier
The free version of the App allows you to store up to 25 items with full AES-256 encryption. Certain features (intruder detection, all disguise modes, decoy vault, unlimited storage) require a premium subscription.
8.2 Premium Subscriptions
- Payment will be charged to your Apple ID or Google Play account at confirmation of purchase
- Subscriptions automatically renew unless canceled at least 24 hours before the end of the current billing period
- Your account will be charged for renewal within 24 hours prior to the end of the current period at the rate of the selected plan
- You can manage and cancel subscriptions through your device's account settings (App Store or Google Play)
- Any unused portion of a free trial period will be forfeited upon purchasing a subscription
8.3 Lifetime Purchase
A one-time lifetime purchase option grants permanent access to all premium features. This is a non-recurring payment. Lifetime access applies to the App as it exists at the time of purchase; future entirely new products are not included.
8.4 Refunds
Refund requests are handled by Apple (App Store) or Google (Google Play) according to their respective refund policies. We do not process refunds directly. If you experience a technical issue, please contact us at support@eduardbruch.com and we will assist you.
9. Acceptable Use
You agree to use the App only for lawful purposes. You are solely responsible for the content you store in the vault. We do not monitor, review, access, or moderate your stored content. You agree not to:
- Use the App to store, distribute, or facilitate access to content that violates applicable law
- Reverse-engineer, decompile, disassemble, or attempt to derive the source code of the App
- Circumvent, disable, or interfere with any security features of the App
- Redistribute, sublicense, or create derivative works based on the App
10. Intellectual Property
All app designs, user interface elements, graphics, icons, software code, and documentation are the intellectual property of Eduard Bruch and are protected by applicable copyright and intellectual property laws. Your personal content (photos, videos, documents, notes, and files) stored in the vault remains your property at all times. We claim no ownership or license over your content.
11. Disclaimer of Warranties
The App is provided on an "as is" and "as available" basis without warranties of any kind, either express or implied, including but not limited to:
- Implied warranties of merchantability, fitness for a particular purpose, and non-infringement
- Warranties that the App will be uninterrupted, error-free, or free of viruses or harmful components
- Warranties that the encryption will withstand all possible attacks or that your data will never be compromised
- Warranties regarding the effectiveness of disguise modes in any specific scenario
12. Limitation of Liability
To the maximum extent permitted by applicable law, Eduard Bruch shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to:
- Loss of data or encrypted content
- Loss of privacy resulting from device compromise
- Damages arising from inability to access encrypted content due to forgotten PIN
- Damages arising from reliance on the disguise or decoy features
- Any damages arising from the use or inability to use the App
Your sole and exclusive remedy for dissatisfaction with the App is to stop using it and uninstall it from your device.
13. Indemnification
You agree to indemnify, defend, and hold harmless Eduard Bruch from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising from or related to your use of the App, your violation of these Terms, or your violation of any applicable law.
14. Termination
You may terminate your use of the App at any time by uninstalling it. Upon uninstallation, all locally stored data is permanently deleted. We reserve the right to terminate or restrict access to the App if you violate these Terms, though given the App's on-device nature, enforcement is limited to removal from app stores.
15. Governing Law and Jurisdiction
These Terms are governed by and construed in accordance with the laws of the Federal Republic of Germany, without regard to its conflict of law provisions. If you are a consumer within the European Union, you also benefit from mandatory consumer protection provisions of the law in your country of residence. The exclusive place of jurisdiction is Hamburg, Germany, except where mandatory consumer protection law provides otherwise.
16. Severability
If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.
17. Entire Agreement
These Terms, together with the Privacy Policy, constitute the entire agreement between you and Eduard Bruch regarding your use of the App, and supersede all prior agreements and understandings, whether written or oral.
18. Changes to These Terms
We may update these Terms from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated Terms. If material changes are made, we will make reasonable efforts to notify you through the App or App Store update notes.
19. Contact
For questions or concerns about these Terms, contact: