Terms of Service
Last updated: May 30, 2026
1. Agreement
These Terms govern your use of Stash, a free iOS app developed by Stash Diabetes, Inc. ("we," "us," "Stash"). By downloading, installing, or using Stash, you agree to these Terms. If you don't agree, don't use the app.
2. Who Can Use Stash
You must be at least 13 years old to use Stash, or be using it on behalf of a person in your care as their parent or legal guardian. By using Stash, you confirm that you meet this requirement.
3. What Stash Is — and Isn't
Stash is a personal logistics tool for managing diabetes supplies: inventory tracking, trip packing, recall alerts, community-shared lot notices, and the optional Stash Community Network (described in §6).
Stash is not a medical device. It does not provide medical advice, diagnosis, treatment, dosing recommendations, or anything else that should be relied upon for medical decisions. Decisions about your supplies, your insulin, or your health are yours and your healthcare providers' — not Stash's.
Stash is also not a registered Class I, II, or III device under FDA regulations. It is software that helps you keep track of physical inventory you already own.
4. No Account Required
Stash does not require an account. Your supply data is stored on your device and may sync via Apple's iCloud to your other devices under your Apple ID. We do not have a copy of your supply data, and we cannot access it.
The single exception is the optional Stash Community Reporting Network (§6). If — and only if — you explicitly opt in, Stash periodically transmits anonymized excerpts of your local data (lot numbers, serial numbers when available, wear sessions, inventory snapshots, and the regimen fields described in §6) to our servers. The transmission is tied to a per-install pseudonymous identifier and is never linked to your name, email, Apple ID, or any other personal identifier. You can leave the Network at any time in Settings → Community Reports.
5. Acceptable Use
When using Stash, you agree not to:
- Use Stash for any unlawful purpose
- Reverse-engineer, decompile, or attempt to extract source code beyond what is permitted by applicable law
- Submit Community Reports containing personally identifiable information about yourself or others
- Submit false or misleading Community Reports, including reports designed to misrepresent a manufacturer, lot, or product, or to retaliate against any party
- Attempt to manipulate community-aggregated signals (Lot Notices, shortage alerts, regional patterns) by repeated, automated, or coordinated submissions
- Use Stash in any way that interferes with its operation or the experience of other users
6. Stash Community Reporting Network (Optional Contribution)
The Stash Community Reporting Network ("the Network") is an optional, opt-in system for contributing anonymized data about supply failures. You join the Community Network by tapping Join Community Reports on the in-app announcement, by toggling Community Reports on in Settings → Community Reports, by completing the wizard's Community step, or by submitting your first Community Report (which is itself a join action — clearly disclosed at the moment you tap Send).
You do not have to join the Community Network. The rest of the app works fully without it, but you may not receive Community Reports about affected devices.
Naming note: "Stash Insights" is the brand we use for the published analysis Stash Diabetes, Inc. may produce based on aggregated Community Reporting Network data — for example, trend reports, manufacturer briefings, or public health summaries. The user-facing contribution feature in the app is called Community Reports; the external-facing analysis product is Stash Insights. The terms below apply to your contribution and to any aggregated downstream use.
6.0 Age requirement
You must be at least 16 years old to join the Community Reporting Network or to submit a Community Report. This threshold is higher than the app-wide minimum (see §2) because joining transfers a perpetual license to Stash for the contributed data (see §6.6) and because the downstream uses of aggregated Network data — including manufacturer briefings and public health summaries — are commercial-research uses that warrant a higher capacity-to-contract threshold than personal use of the app itself.
By joining the Community Reporting Network or by submitting any Community Report, you confirm that you are at least 16 years old. Users between 13 and 15 can use Stash fully but cannot join the Network or submit reports.
6.1 What we never collect, even after you join
- Your name, email, account ID, or any user-identifying field
- Your Apple ID, advertising ID, or any device identifier
- Your GPS coordinates, ZIP code, or street address (city / state / country are captured only when you explicitly tap "Use my location" on a single report)
- Your blood glucose data, time-in-range, or any sensor reading values
- Your insulin doses, basal/bolus units, MDI counts, or GLP-1 dose strengths
- Your body-map placement coordinates (zone names only — never x/y)
- Your trip names, destinations, or packing list contents
- Your GLP-1 product, dose, or titration history (only a boolean: "uses GLP-1")
- Any free-text notes you typed outside of an explicit incident report
6.2 What you contribute when you join
Once you join the Community Reporting Network, your device may transmit the following kinds of submissions:
Incident reports. When you swipe-left on an active supply and tap Report Issue (or use the manual report flow in Settings → Community Reports → Submit a Report), Stash sends a single report with: the supply category, manufacturer, lot number (or serial number when only that is available — some packaging like the Dexcom sensor applicator carries a serial but no lot), wear time, the category of issue (from a fixed list), severity tier, optional notes you typed, and — only if you tap "Use my location" — your approximate city, state, and country.
Wear-session records. When a supply ends (a sensor expires, a pod gets changed out, an infusion set gets pulled, a pen runs dry), Stash records the total wear duration and outcome (full wear, ended early, etc.). These records are used to validate the integrity of the incident reports. These are never submitted in real time, and never with per-session timestamps.
Inventory snapshots. Along with wear-session records, Stash sends a snapshot of the reported supply categories and lots in your inventory at that moment. We use this to track lot lifecycles, detect supply shortages, and compute community-wide failure rates with an actual denominator of successful sessions.
Device context. Each submission carries a small contextual bundle consisting of: lot numbers in your inventory for the reported category, aggregate wear-time, placement zones, your therapy regimen (pump or MDI), insulin types. The bundle is scoped to the reported supply category and does not reveal cross-product behavior, doses, glucose data, or any identifying information.
6.3 Anonymity and identifier rotation
Each submission is tied to a per-install pseudonymous identifier ("install_id") that is generated on your device the first time the app launches. The identifier is not tied to your name, account, Apple ID, or any other personal identifier. Reinstalling the app rotates this identifier, breaking any link between your old submissions and your new ones.
If multiple devices on your same Apple ID join the Network independently, each device has its own install_id. We do not attempt to dedupe across devices.
6.4 What we do with it
Aggregated, de-identified Community Network data may be used to:
- Surface community-reported Lot Notices and shortage signals to other Stash users
- Deliver personalized alerts to you about recalls, lot notices, and shortages affecting lots in your stash
- Inform our editorial decisions about which lots warrant a notice
- Improve Stash and identify patterns in supply quality
- Share aggregated, non-identifying summaries with manufacturers, researchers, public health bodies, or other parties if doing so could improve supply quality or safety of the community.
6.5 No compensation
You do not receive payment, credit, or personal feedback for any specific contribution to the Community Network.
6.6 License to us
You grant Stash Diabetes, Inc. a non-exclusive, perpetual, irrevocable, royalty-free, worldwide license to use, copy, store, analyze, aggregate, anonymize, and distribute the data you submit through the Community Network for the purposes described above (including any downstream use as part of Stash Insights). Because submissions are anonymous and not linked back to you as an identifiable person, individual submissions cannot be retrieved or withdrawn after submission.
6.7 Leaving the Community Network
You can leave the Network at any time by toggling Community Reports off in Settings → Community Reports. When you leave:
- Future transmissions stop immediately. No further wear sessions, snapshots, or incident reports are sent from your device.
- Personalized push notifications about lots in your stash stop.
- Previously submitted data remains in the anonymized dataset. Because we never linked your submissions to your identity, there is no
install_id → identitymap that would let us identify and remove your prior contributions. If you reinstall the app, your new install_id starts a fresh submission history.
7. Lot Notices
Stash may surface "Lot Notices" — heads-up flags about lots of supplies that other Stash users have reported issues with. You agree that:
- Lot Notices are not recalls. They are not authoritative, not verified by manufacturers, and not endorsed by any regulatory body.
- Lot Notices are not medical advice. They reflect community-reported observations. You decide what to do with that information, in consultation with your healthcare team.
- Stash does not guarantee accuracy or completeness. The absence of a Lot Notice does not mean a lot is safe. The presence of one does not mean a lot is defective.
8. Recall Alerts
Stash surfaces product recall information sourced from manufacturers, FDA databases, and public regulatory bodies. We work to keep this information accurate and current, but you should always verify recall details directly with the manufacturer or your healthcare provider before acting on a recall alert in Stash.
9. Camera, Location, and Other Device Permissions
Stash may request permission to use:
- Your camera, for scanning barcodes on supply packaging. Video is processed on-device in real time; nothing is recorded, stored, or transmitted.
- Your location, only when you tap "Use my location" on an Issue Report. Stash requests a coarse location (~3km accuracy), reverse-geocodes it to a city, state, and country, and immediately discards the raw coordinates. Only the resulting city name and state/country codes are ever sent to our servers.
- Background app refresh (iOS system setting), so the Community Network sync can run on its cadence even when you don't open the app daily. iOS controls how often the app is actually woken; you can disable Background App Refresh for Stash anytime in iOS Settings → General → Background App Refresh.
- Notifications (iOS system setting), only if you join the Community Network and choose to receive personalized alerts about recalls, lot notices, or shortages affecting lots in your stash.
All permissions are explicitly opt-in. The rest of Stash works without any of them.
10. Disclaimer of Warranties
Stash is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, accuracy, completeness, or non-infringement. We do not warrant that Stash will be uninterrupted, error-free, secure, or that any defects will be corrected. We do not warrant that the information in Stash — including inventory counts, expiration calculations, recall data, lot notices, or community-aggregated signals — is accurate or current at any given time.
11. Limitation of Liability
To the maximum extent permitted by applicable law, Stash Diabetes, Inc. and its officers, directors, employees, affiliates, and licensors shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages — including but not limited to loss of profits, revenue, data, use, goodwill, or other intangible losses — arising from or related to your use of Stash, whether based on warranty, contract, tort (including negligence), strict liability, or any other legal theory, and whether or not we have been advised of the possibility of such damages.
In no event shall our aggregate liability to you exceed the amount you have paid for Stash in the twelve (12) months preceding the event giving rise to the claim, which for a free app is zero (US$0.00).
Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities. In those jurisdictions, our liability is limited to the maximum extent permitted by law.
12. Indemnification
You agree to indemnify, defend, and hold harmless Stash Diabetes, Inc. and its affiliates from and against any claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from your misuse of Stash, your violation of these Terms, your violation of any third-party rights, or your submission of any content (including Community Reports or other Network contributions) that is false, misleading, defamatory, or otherwise unlawful.
13. Third-Party Services
Stash uses third-party services to deliver some features. By using Stash, you also accept the terms and privacy policies of these providers:
- Apple (for iOS, CloudKit, iCloud) — apple.com/legal
- TelemetryDeck (for anonymous behavior analytics) — telemetrydeck.com
- Supabase (for Community Network data hosting) — supabase.com/terms
- Loops (for the optional newsletter) — loops.so
See our Privacy Policy for what data, if any, is shared with each provider.
14. Changes to These Terms
We may update these Terms from time to time. The "Last updated" date at the top reflects when the current version was posted. We will make a reasonable effort to notify you of material changes (for example, in-app messaging or via the newsletter if you've subscribed). Continued use of Stash after changes constitutes acceptance of the revised Terms. If you don't agree to revised Terms, stop using Stash.
15. Termination
You may stop using Stash at any time by uninstalling the app. Uninstalling does not delete:
- Data you have already submitted via the Community Network (because those submissions are anonymous and cannot be linked back to you)
- Data synced to your iCloud account (which is managed by Apple, not us)
If you want to stop future Community Network transmissions without uninstalling, toggle Community Reports off in Settings → Community Reports.
We may terminate or restrict your access to Stash at any time, with or without notice, if we reasonably believe you have violated these Terms.
16. Governing Law and Dispute Resolution
These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law principles. Any dispute arising from these Terms or your use of Stash shall be resolved exclusively in the state or federal courts located in New Castle County, Delaware, unless otherwise required by applicable consumer protection laws in your jurisdiction.
If any provision of these Terms is found unenforceable, the remaining provisions remain in effect.
17. Contact
Questions about these Terms? Reach us at support@stashdiabetes.com.