Privacy Policy

1. Information We Collect

1.1 Business Data

• Company Profile: Business name, contact details, address, payment terms, tax rate
• Customer Records: Names, contacts, addresses, project summaries
• Project & Task Details: Descriptions, budgets, timelines, progress
• Color Information: Paint brands, hex codes, palettes
• Financial Data: Invoices, labor rates, material costs, payment status

1.2 Authentication Data

• Apple OAuth: Secure “Sign in with Apple” token and associated email/name
• Google OAuth: Secure Google token and basic profile info
• Firebase Auth: Encrypted email/password credentials (never stored in plain text)

1.3 Usage & Device Data

• Device Info: iOS version, device model, app version
• Analytics (Anonymized): Feature usage and performance metrics
• Error Logs: Crash reports without personal content

2. How We Use Information

• Run core app functions (CRM, invoicing, project tracking, color management)
• Generate and deliver PDFs and invoices
• Provide secure data sync via Firebase default storage permissions
• Improve and troubleshoot the app (analytics, error fixes)
• Offer customer support and respond to inquiries

3. Storage & Security

3.1 Local Storage

• Data stored on-device with iOS encryption
• Offline access supported

3.2 Cloud Sync

• Firebase Default Storage: Secure sync of your data across iOS devices
• Soft-Delete Recovery: Premium-only restore of soft-deleted items
• All data encrypted in transit and at rest

3.3 Security Measures

• TLS encryption for network traffic
• Secure OAuth and Firebase authentication
• Regular security updates
• Strict access controls on data

4. Sharing & Disclosure

4.1 When We Might Share

• With Your Permission: If you explicitly authorize it
• Service Providers: Google and Firebase for authentication and sync
• Legal Compliance: To meet legal or regulatory obligations

4.2 Business Transfers

On merger or sale, data may transfer under continued privacy protections.

5. Your Rights

• Access & Edit: View or modify your data anytime
• Delete: Remove records or delete account (data purged within 30 days)
• Export: Download invoices and data in PDF/CSV

6. Children’s Privacy

Not intended for users under 13; we do not knowingly collect data from children.

7. International Users

Data stored and processed via Google’s global Firebase infrastructure, compliant with GDPR, CCPA, and other laws.

8. Data Retention

Retained while your account is active. After deletion, data is removed from our systems within 30 days.

9. Policy Updates

We may update this policy; significant changes will be notified in-app. Continued use means acceptance.

10. Third-Party Services

10.1 Google & Firebase

• OAuth and real-time database services
• All usage governed by their respective privacy policies

10.2 Apple

• App distribution and iOS security features
• Apple OAuth, App Store, subscriptions

10.3 Others

• RevenueCat (subscription analytics)
• Microsoft Azure Vision API (AI Color Analysis)