Privacy Policy

Account. Some apps require an account and some offer one as an option (see the table in section 3). You sign in with Google or Apple; we never see your Google or Apple password. From the provider we receive your name, your email address (or the private relay address Apple offers), and a unique account ID. We exchange the provider's credential for a Firebase Authentication session so our servers can tell which data is yours.

Content you create in the app. Invoices, expenses, transactions, budgets, baby-care entries, notes, shopping lists, workouts, trips, scanned documents, messages, watchlists, portfolios and similar records. In apps without sign-in this stays on your device. In apps with sign-in it is stored on your device and backed up to a per-account space in Google Cloud Firestore (and Cloud Storage for photos and files) that only your account, and the people you explicitly share with, can read. Section 3 lists what each app stores.

Photos and files you attach, such as receipts, logos, baby photos, item photos, scanned pages and attachments. They are uploaded to your private cloud space only in the apps that back up data.

Contact Us messages. Every app has a Contact Us screen. When you send a message we receive the text you write, the name and email you enter, the app name and version, your platform, your IP address and your device's browser signature (user agent). Messages are stored in our support inbox on Google Cloud so we can reply.

Purchases. Subscriptions and one-time unlocks are sold through the Apple App Store and Google Play. Apple or Google handles your payment details; we receive a purchase receipt or token, the product bought and its dates, which we verify with the store and keep with your account so your purchase works on all your devices. Invoice Master's web subscription is billed by Stripe, which handles your card details under its own privacy policy.

Crash reports (all apps). Every app uses Firebase Crashlytics. If the app crashes, a report with the stack trace, device model, operating system version, app version, free memory and disk, and a random installation identifier is sent to Google so we can fix the bug. Crash reports are not linked to your account by us.

App health (all apps). Every app also sends us a short technical health report so we can find problems that crash reports miss. On iPhone this is the daily summary Apple's MetricKit gives the app; on Android it is the system's record of why the app last stopped. It covers hangs and freezes, the app being closed in the background, memory use, launch time and crash diagnostics, together with the app version, operating system version, device model and a random installation identifier. These reports go to our own servers at apponance.com, not to Google Firebase, and are not linked to your account. Your IP address is used only to limit how often one address can send reports and is not saved with them.

Usage statistics (most apps). Every app includes Firebase Analytics. By default it records app opens, screens viewed, sessions, purchases and a random app-instance identifier, together with a coarse location derived from your IP address by Google. Two apps differ: Baby Tracker keeps analytics off until you turn on the "Help improve the app" switch in Settings, and Brisk has analytics permanently disabled. We use these statistics only to understand which features are used and to keep the apps working; we do not link them to your account.

Push notifications. Apps that offer notifications (for example price alerts, list changes, messages, invoice reminders, trip reminders) register a device token with Firebase Cloud Messaging. The token identifies your device for delivery only.

Device integrity. Mile and Scan Trove use Firebase App Check, which sends a device attestation from Apple or Google with certain requests so our servers can reject abusive traffic.

Server logs. Like every online service, our servers (Google Cloud for Firebase and apponance.com, Amazon Web Services for our Finabase market-data platform) record request logs containing your IP address, timestamps and the request made. We use them for security, abuse prevention and debugging.

Local settings. Preferences, the App Lock PIN (stored as a salted hash), cached sign-in state and similar settings are stored on your device only. Face ID, Touch ID and Android biometrics are handled entirely by your operating system; we never receive biometric data.

"Sign-in" says whether an account is required, optional or absent. "Ads" says whether the app shows Google AdMob ads (section 4). "Stored in your cloud space" is data backed up to your private per-account space; everything else stays on the device unless the row says otherwise. Every app also does what sections 1 and 2 describe (Contact Us, crash reports, usage statistics unless noted).

Speech recognition is provided by your phone's operating system (Apple or Google) and may send audio to their servers under their privacy policies; we never receive the audio. Text recognition of receipts and scans runs entirely on your device.

Our free apps marked "Yes" under Ads in section 3 show banner and occasional full-screen ads through Google AdMob. AdMob and its advertising partners collect your device's advertising identifier (IDFA on iOS, Advertising ID on Android), IP address and coarse location, and information about the ads shown and tapped, to serve and measure ads and, where permitted, to personalise them. Google's use of this data is described at policies.google.com/technologies/ads.

• Your consent. In the European Economic Area, the United Kingdom and Switzerland the app shows Google's consent form before any ad is requested and honours your choice, including non-personalised ads. On iOS, apps that personalise ads ask for App Tracking Transparency permission first; if you decline, the advertising identifier is not available to the ad SDK.
• Removing ads. Premium, Pro or a subscription removes ads in every app that shows them.
• Ad-free apps. Brisk, Chat, Invoice Master, Mile and Scan Trove contain no advertising SDK and never show ads.

We do not run our own advertising network and do not sell your personal information. The ad SDK's use of the advertising identifier for personalised ads may count as "sharing" for targeted advertising under some US state laws; section 12 explains how to opt out.

Some apps offer on-demand AI help: "Improve with AI" for notes and descriptions in Baby Tracker, Invoice Master and Mile; Mile's trip recap, "Ask Mile" chat, drive classification and plain-language drive corrections; Mortgage's AI advisor; Invoice Master's voice-to-invoice; and Scan Trove's document assistant. Nothing is sent unless you tap the AI action.

When you do, the app sends the relevant text and figures — for example the note you are editing, your loan scenario and question, a summary of your trips for the period you chose, or selected drive dates, times, endpoint labels, distances, purposes, vehicles and shortened notes — to our server at apponance.com, which forwards it to Anthropic, our AI provider, and returns the answer. Drive coordinates and route points are not sent for Mile's plain-language drive corrections. Your name, email and account ID are not included in the request. We do not store the content of AI requests or answers on our servers; we keep only a token-usage receipt without content for 90 days to control costs. Anthropic processes the request as our service provider under its commercial API terms and does not use it to train its models. Scan Trove and Mile's plain-language drive corrections show the exact request content before it is sent.

AI answers can be wrong. They are suggestions, not tax, financial, legal or medical advice.

• To provide the app: store and sync your data, deliver messages and shared lists, detect drives, calculate results, send the invoices and reports you ask us to send.
• To keep your purchases working across devices and to honour subscriptions.
• To answer your support requests.
• To fix crashes and understand which features are used.
• To show and measure ads in the free apps.
• To protect the service from abuse and to comply with the law.

We do not use the content of your documents, messages, trips or health entries for advertising, and we do not sell personal information.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract for account, sync, purchases and support; consent for personalised advertising, App Tracking Transparency, usage statistics in Baby Tracker, and device permissions such as location, health, contacts, camera and microphone, which you can withdraw at any time; legitimate interests for crash reporting, basic usage statistics, security and abuse prevention, balanced against your rights; and legal obligation where we must keep records.

We share information only with the service providers needed to run the apps, each bound by its own terms and privacy policy:

• Google Firebase and Google Cloud (authentication, database, file storage, cloud functions, crash reporting, analytics, push notifications, App Check, web hosting) — firebase.google.com/support/privacy.
• Google AdMob (advertising in the free apps, section 4).
• Apple and Google (Sign in with Apple, Google Sign-In, the App Store and Google Play for purchases, and on-device speech recognition and maps).
• Anthropic (AI features, section 5) — anthropic.com/legal/privacy.
• Amazon Web Services (hosting for our Finabase market-data platform; sending the emails Invoice Master and Mile send on your behalf).
• Plaid (optional bank connections in Invoice Master bookkeeping) and Stripe (Invoice Master web subscriptions).
• Data sources that receive your IP address when the app fetches content: ipinfo.io and rdap.org (What's My IP), CoinGecko (Crypto Master), StockTwits (Finabase), OpenStreetMap tile servers (Brisk, What's My IP), and the news sites you open.
• People you share with: members of a Basket list, your Chat friends, caregivers you invite in Baby Tracker, and the clients you send an invoice to.

We may also disclose information if the law requires it, to protect our rights or users' safety, or to a successor if Apponance is acquired (we would notify you). We do not sell personal information and do not receive information about you from data brokers.

• Account data and content: for as long as your account exists. When you delete your account (section 10) we delete it from our servers promptly; email requests are normally completed within 7 days. Backups and logs age out afterwards.
• Purchase records: for as long as your account exists, and as long as the law requires for accounting.
• Contact Us messages: while we handle your request and for our support records afterwards; you can ask us to delete them at any time.
• AI requests: not stored by us; a token-usage receipt without content is kept for 90 days.
• Crash reports and usage statistics: held by Google Firebase for its standard retention periods (crash data 90 days; analytics data up to 14 months).
• Server request logs: 30 days.
• Data on your device: until you delete it or uninstall the app. Deleting the app does not delete your cloud space; deleting your account does.

Every app with an account has a Delete account button in its settings or account screen. It removes your account, everything in your cloud space including photos and files, and your sign-in, and signs you out of all devices. You can also delete from the web, or email us, if you no longer have the app:

• Baby Tracker — babygrow.io/delete-account
• Basket — apponance.com/basket/account-deletion
• Brisk — apponance.com/brisk/delete-account
• Chat — apponance.com/chat/delete-account
• Invoice Master — invoicemaster.io/delete-account
• Mile — milelog.io/delete-account
• Money — moneyeco.io/delete-account
• Scan Trove — scantrove.io/delete-account
• Crypto Master, Finabase, Note and Stock Map — delete from the app's settings, or email admin@apponance.com from the address you signed in with.

Apps without an account keep everything on your device; uninstalling the app removes it. Exports you made yourself (PDFs, CSV files, GPX files, shared images) stay wherever you saved them.

• Access, correction and portability. Your data is visible and editable in the app, and most apps can export it (PDF, CSV, GPX, backup files). Email us for a copy of anything you cannot export yourself.
• Deletion. Section 10.
• Advertising. Decline App Tracking Transparency on iOS or turn on "Ask App Not to Track"; reset or delete your Advertising ID in Android settings; change your consent choices where the consent form is shown; or upgrade to remove ads.
• Usage statistics. Baby Tracker has an in-app switch. In other apps, contact us to have your app-instance data deleted from Firebase Analytics.
• Device permissions. Location, health, contacts, camera, microphone, calendar and notifications can be changed at any time in your phone's settings; the related feature simply stops working.
• Withdrawing consent and objecting. Where processing is based on consent or legitimate interests, you can withdraw or object by using the controls above or by emailing us.
• Complaints. If you are in the EEA, UK or Switzerland you may complain to your local data-protection authority.

To exercise any right, email admin@apponance.com from the address associated with your account. We respond within 30 days and may ask you to confirm your identity.

If you live in California or another US state with a consumer privacy law, you have the rights to know, delete and correct described in section 11, and the right not to be discriminated against for exercising them. We do not sell personal information. The use of your advertising identifier by Google AdMob for personalised ads in the free apps may be treated as "sharing" for cross-context behavioural advertising; you can opt out with the advertising controls in section 11. We do not knowingly share the personal information of anyone under 16. We do not respond to browser "Do Not Track" signals, for which no common standard exists.

Our apps are for adults and are not directed at children under 13, and we do not knowingly collect personal information from children. Baby Tracker is used by parents and caregivers to record information about their own child; that information belongs to the adult's account and is treated as described above. If you believe a child has given us personal information, email us and we will delete it.

All traffic between the apps and our servers is encrypted in transit. Cloud data is stored in Google Cloud and protected by security rules that allow access only to the signed-in owner (or the members of a list or conversation you shared). Sign-in state is kept in your device's secure keychain, and App Lock adds an optional PIN or biometric lock on the device. No system is perfectly secure, so please use a strong device passcode and keep your operating system updated.

Apponance, Inc. is a US company. Your cloud data is stored on Google Cloud servers in the United States, and our Finabase market-data platform runs on Amazon Web Services. If you use the apps from outside the US, your information is transferred to and processed in the US; for users in the EEA, UK and Switzerland we rely on our providers' standard contractual clauses and, where available, the EU-US Data Privacy Framework.

We update this policy when the apps change. The date at the top shows the latest version; for material changes we will show a notice in the affected apps or on apponance.com.

Apponance, Inc.
1146 Walker Rd, Great Falls, VA 22066, USA
Email: admin@apponance.com
Web: apponance.com/support