1. Who we are and what this covers

uranashel is a three-person mobile software studio based in Vietnam (ntan, atuan, ktuyen). We are the data controller for the purposes of this policy. You can reach us at any time at uralab95@gmail.com.

This single policy covers every app we publish on the App Store and Google Play, the Stashio browser extension on the Chrome Web Store, and this website. As of the effective date that means:

• Stashio — save and search anything (com.uranashel.stashly)
• Stashio for Chrome — browser extension that saves pages into Stashio (ddifabdjihhojncjaeamfnjadnalmlga)
• Wheria — parking and indoor return navigation (com.uranashel.backtrack)
• Estua — non-repeating ambient sleep audio (com.uranashel.estua)
• Phyzix — pocket physics lab (com.uranashel.pocketphysicslab)
• Sonarish — acoustic measurement and machine diagnosis (com.uranashel.sonari)

Any app we release later is covered by this policy from the day it ships, unless that app links to a policy of its own.

2. What we collect

We do not require an account, a name, an email address, or a phone number to use the core features of our apps. We do not operate advertising SDKs, we do not build advertising profiles, and we do not sell or rent personal information to anyone — for any price, under any framing.

The categories below are the only ones that apply:

Category	What it is	Where it goes
Sensor & measurement data	Accelerometer, gyroscope, magnetometer, barometer, microphone level, light, GPS	Processed on your device. Not transmitted to us.
Content you save	Parking spots, notes, recordings, links, PDFs, images, measurement sessions	Stored on your device. Synced only if you turn sync on (Stashio).
Settings & preferences	Theme, language, units, alarm and reminder settings	Your device, plus your own iCloud/Google backup if you use it.
Purchase status	Whether a paid tier is active	Handled by Apple/Google. We see anonymous transaction state, never your card.
Diagnostics	Crash reports and aggregate performance, if you opted in at OS level	Apple/Google consoles, aggregated and not identifying.
Support email	Whatever you write to us	Our mailbox. Used only to answer you.

3. Data that stays on your device

Our apps are deliberately built so the interesting parts compute locally. This is an engineering choice before it is a legal one: local computation is faster, works offline in a basement garage where there is no signal, and removes an entire class of privacy risk.

• Wheria fuses accelerometer, gyroscope, magnetometer and barometer into a walked path on-device. Your parking locations and traces are stored locally and are never uploaded to us.
• Estua synthesizes audio in real time on your phone. There is no streaming, no listening, and no microphone use.
• Phyzix reads device sensors for live instruments and experiments. Readings are rendered and discarded, or saved locally if you save them.
• Sonarish analyzes microphone input on-device to compute sound level and spectra. Audio is processed in memory for measurement; recordings and reports are written only to your device unless you export or share them yourself.
• Stashio stores your saved items in a local database. Cloud sync and AI organization are described in section 5.

4. Permissions, per app

Every permission we request maps to a feature you can point at. If you decline a permission, the rest of the app keeps working; only the dependent feature is unavailable. You can change these at any time in your device settings.

App	Permission	Why
Wheria	Location (while in use / always)	To anchor your parking spot and correct the walked path outdoors. "Always" is optional and only used for automatic parking detection and reminders.
Wheria	Motion & fitness	Step detection and dead reckoning when GPS is unavailable underground.
Wheria	Notifications	Parking reminders and Live Activity updates.
Wheria	Camera / Photos (optional)	Only if you attach a photo of your parking spot.
Estua	Notifications (optional)	Sleep timer and wind-down reminders.
Phyzix	Motion, magnetometer, barometer	Live sensor instruments and experiments.
Phyzix	Microphone (optional)	Sound-based instruments such as the oscilloscope and frequency meter.
Phyzix	Camera (optional)	Optical experiments and colour/light measurement.
Sonarish	Microphone	Required. This is the measurement input for the noise meter and machine diagnosis.
Sonarish	Files / Storage	To export PDF and CSV reports where you choose.
Stashio	Share sheet / Share extension	To receive links, images, PDFs and text you send from other apps.
Stashio	Microphone (optional)	Voice notes.
Stashio	Photos / Files (optional)	To save items you pick from your library.
All apps	Network	Store purchases, opening links you tap, and — for Stashio only — sync and AI features you enable.

We do not request contacts, calendar, health records, or advertising identifiers in any app.

5. When data leaves your device

There are exactly three situations in which data leaves your phone, and in all three you are the one who triggers it:

1. You export or share something. A Sonarish PDF report, a Phyzix data set, a Wheria location shared to a messaging app. The destination is whatever you picked, and it is then governed by that service's policy, not ours.
2. Stashio sync and AI organization, if enabled. Stashio can sync your saved items across your devices and can use AI to clean, tag and organize what you save so it can be found by meaning. When these features are on, the relevant item content is transmitted over an encrypted connection to our sync service and to the AI processing provider that performs the tagging and embedding. That content is used solely to deliver the feature to you — never to train third-party models, never for advertising, never for resale. Sync and AI organization can be turned off, and Stashio remains fully usable as a local-only app.
3. You email us. Then we have whatever you chose to send.

6. Third parties and stores

We keep the dependency list short on purpose.

• Apple App Store / Google Play handle distribution, purchases and subscriptions. They collect their own data under their own policies, and they give us only aggregated, non-identifying sales and crash statistics.
• Apple / Google platform services — iCloud or Google backup, if you use them — may include our app data in your own encrypted device backup. That backup belongs to you and your platform account, not to us.
• Stashio infrastructure — our sync service and the AI processing provider, used only for the features described in section 5, and only when you enable them.

We have no advertising networks, no analytics SDKs that profile you, no social login, and no data brokers.

7. Legal bases (GDPR)

Where the GDPR applies, we rely on: performance of a contract for the features you asked for (running the app, delivering purchases, syncing when you enable it); consent for optional permissions such as microphone, camera, location and notifications, which you may withdraw in device settings at any time; and legitimate interest for keeping our apps working and secure, using only aggregated, non-identifying diagnostics.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, delete or restrict processing of your personal data, to object to processing, and to lodge a complaint with your data protection authority. Under the CCPA/CPRA you also have the right to know, delete, correct, and to opt out of "sale" or "sharing" — we do neither, so there is nothing to opt out of, and we will never discriminate against you for exercising any right.

Because most of our data never reaches us, the fastest route for most requests is your own device: deleting the app removes its local data. For anything held on our side — Stashio sync content or support email — write to uralab95@gmail.com and we will respond within 30 days.

9. Retention and deletion

On-device data lives as long as you keep it, and is removed when you delete the item or uninstall the app. Stashio synced content is retained while your sync is active and is deleted from our service after you delete the items or request account deletion; residual encrypted backups are purged within 30 days. Support email is kept only as long as needed to resolve your question.

10. Security

Data in transit is encrypted with TLS. Sensitive data at rest on your device is protected by the operating system's own encryption and, where appropriate, the platform keychain. Keeping computation local is itself our main security control: data that never leaves your phone cannot be breached on a server. No system is perfect, and we do not claim otherwise — if we ever become aware of a breach affecting you, we will notify you and the relevant authority as required by law.

11. Children

Our apps are not directed at children under 13 (or under 16 where local law sets that bar), and we do not knowingly collect personal information from them. Phyzix is used in classrooms, and it is designed so that no personal data is required or collected to use it. If you believe a child has provided us personal information, contact us and we will delete it.

12. International transfers

We operate from Vietnam. Where Stashio sync or AI features are enabled, content may be processed on servers outside your country, including outside the EEA. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

13. Changes to this policy

If we change this policy we will update the effective date at the top of this page, and for material changes we will announce it in the app or on this site before it takes effect. Continuing to use the apps after a change means you accept the updated policy.

14. Terms of use

Licence. We grant you a personal, non-exclusive, non-transferable, revocable licence to use our apps on devices you own or control, in line with the App Store, Google Play and Chrome Web Store terms. You may not reverse-engineer, decompile, resell, sublicense or redistribute the apps except where that restriction is prohibited by law.

Purchases. Paid features and subscriptions are billed by Apple or Google, renew according to the terms shown at purchase, and are managed and cancelled in your store account. Refunds follow the store's policy, not ours.

Measurement disclaimer — read this one. Our apps are instruments for everyday and educational use, not certified equipment. Wheria assists you in returning to a saved spot; it is not a survey-grade positioning system, and you remain responsible for your own navigation and safety. Sonarish is not a Type 1/Type 2 certified sound level meter and must not be used as the sole basis for occupational noise compliance, legal evidence, or safety decisions. Phyzix is an educational instrument, not laboratory metrology. Estua is a sleep-audio tool and is not a medical device: it does not diagnose, treat or prevent any condition. Nothing in our apps is medical, legal, engineering or professional advice.

Your content. Anything you create or save stays yours. You grant us only the narrow, revocable permission needed to operate the features you enable — for example, to sync and index your Stashio items on your behalf. We claim no ownership of your content and will not use it to train third-party models.

Acceptable use. Do not use the apps unlawfully, to infringe others' rights, to record people without a lawful basis where consent is required, or to attempt to disrupt or gain unauthorized access to our services.

Warranty and liability. The apps are provided "as is" and "as available", without warranties of any kind to the fullest extent the law allows. To the extent permitted by law, our total liability arising from the apps is limited to the amount you paid us for them in the twelve months before the claim. Nothing here limits liability that cannot lawfully be limited, including for death or personal injury caused by negligence, or for fraud. Consumers keep all mandatory statutory rights under their local law.

Governing law. These terms are governed by the laws of Vietnam, without prejudice to mandatory consumer protections in your country of residence.

15. Contact

Privacy questions, data requests, or anything in this document that reads wrong to you:

• Email — uralab95@gmail.com
• Studio — uranashel, Vietnam

We answer data requests within 30 days.