Privacy Policy

Who this is about

Solo Expert Tracker (“the app”) is a tool for independent business operators and solopreneurs to keep track of their own clients, appointments, money and documents. This policy explains what the app does with your information. It applies to the app at soloexperttracker.app and to the same app installed on your phone.

Where your data lives

The app is a web page that runs in your browser. Your records never reach our servers — the site is published as static files, and the app has no place to send your records to us. A small access service and the sign-up form do receive the few details listed below.

Your information sits in exactly two places, both of them yours:

• Your own Google Drive. The app creates a folder named Solo Expert Tracker in your Drive and keeps your records there as ordinary files. You can open that folder, read the files, copy them, or delete them, at any time, without us. That is deliberate: they are your records, and you should never need our permission or our help to get at them.
• Your own device. The app keeps a copy on the phone or computer you use it on, so it works when you have no signal. Photos of receipts and identity documents are kept only here — they are never uploaded anywhere, including to Drive.

What the app stores

Only what you type in or photograph. The app holds the records you create: clients, appointments, revenue, expenses, invoices and quotations, prepaid packages, projects, tasks, habits, tags, and scanned receipts and documents — along with your own settings, such as your business details and your logo.

Because your client records may hold other people’s names, phone numbers and email addresses, you remain responsible for those people’s information under whatever rules apply to your profession and country. The app is the filing cabinet; you decide what goes in it.

A client record may also hold an identity number, such as a Singapore NRIC or FIN, because registering a client often needs one. If you record it, it is stored in full on your own device and in your own Google Drive, and the client card shows it masked until you tap to reveal it. We never see it, because client records never reach our servers.

Payments

When you buy on our website, Stripe (our payment processor) collects your card details, name, email address, and billing country on its own page to take the payment. We never see or store your card number. Stripe handles that data under its own Privacy Policy.

From a purchase we keep only what unlocks your plan: the Google account email you signed in with, the plan you bought, its status, your trial start date, the date your current period ends, Stripe’s reference numbers for your customer record and your subscription, and, for a Google Play purchase, the purchase token Google gives us. We also keep a short log of any manual change to your access (for example a gift or a move to another account), with your email and a brief note. We do not receive or store your card details, billing address, or name.

If you buy through Google Play, Google processes the payment under its own terms, and we receive confirmation of your purchase.

Your business records are unaffected. They stay on your device and in your own Google Drive, and they never reach our servers.

What we ask Google for, and why

Signing in with Google asks your permission for the following, and nothing else:

Your name, email address and profile picture

To show who is signed in, and to know which Drive folder is yours.

See and manage only the files this app creates in your Drive

To save your records to your Drive and read them back on your other devices. This permission is deliberately the narrow one: it gives the app access to only the files it creates itself. The rest of your Drive stays invisible to it — we cannot see your other documents, photos or folders, and no setting in the app can widen this.

Your Google Calendar events

To put every appointment you book into your calendar automatically, so it appears alongside the rest of your day. Appointments travel one way, from the app into your calendar. This permission is narrow too: it only covers calendars you own, and the app only ever writes to your main calendar.

For the technically minded, Google names these permissions openid, userinfo.email, userinfo.profile, drive.file and calendar.events.owned. The app requests no others.

Both the Drive and the Calendar permissions are required. If you untick either one on Google’s screen, the app will ask you to sign in again and tick both.

Your Google sign-in token is what lets the app work with your Drive and Calendar. It is kept on your own device, in the app’s private storage (not in a cookie), for as long as Google keeps it valid, which is about an hour, so reloading the page does not sign you out. It is sent to Google, and to our small access service, which uses it once to confirm your email and does not store it. Signing out, letting it expire, or choosing “Erase data on this device” deletes it.

The app’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Specifically: data obtained through those APIs is used only to provide the features described on this page, is never transferred to anyone except as needed to provide those features, is never used for advertising, and is never read by a human except with your explicit permission or where the law requires it.

What we do not do

No analytics, no tracking pixels, no advertising, and no cookies for profiling. Once you are signed in, the app talks to Google’s sign-in, Drive, Calendar and Sheets services on your behalf, and to our own small access service that checks which plan you have. We load no third-party script for payments: checkout and billing happen on Stripe’s own page. This is enforced technically, by a Content Security Policy that blocks connections to any other destination, not only by this promise.

One separate thing is different: the sign-up form on our public pages. What you type there (your name, email, role, how you heard about us and message) is sent to a Google Apps Script that we run, so we can contact you about the app. We do not sell, rent or share it.

Once the access service is switched on, our hosting provider (Google Cloud) automatically logs each request to it: your IP address, your browser or device type and the address requested. We use these logs only to keep the service secure and working, and they are deleted after 30 days.

If something breaks, the app keeps a short log on your phone: the kind of error and where in the app it happened, never your records, names or phone numbers. It is sent only if you open Settings, read it, and choose to email it to us. Erasing the device also erases this log.

We do not sell, rent, share or transfer the information in your app, because we never receive it.

Deleting your data and account

Solo Expert Tracker keeps no database of your records. You sign in with your Google account, and your records live on your device and in your own Google Drive and Calendar. So “deleting your account” means the three steps below, which you can do yourself at any time. We hold no copy of your records that we would need to delete for you. The only thing we keep is a small access record (your email, plan, status, trial dates and purchase reference numbers) and the short log of manual access changes. We keep them while you have a plan or trial with us. On request we delete the access record and remove your email from the log, within 30 days: email support@soloexperttracker.com. The one exception is purchase and payment records. Singapore tax rules require us to keep those for at least 5 years from the relevant year of assessment, so we keep only those records for that long. We never see your password. To close your Google account itself, use your Google account settings.

To request deletion, or if you need help, email support@soloexperttracker.com. We will reply within 30 days. If you ever gave us your email to join our testing list, we will remove it from that list.

You are in control of each copy, separately.

• The copy on your device: Settings → Erase app data on this device removes everything the app has stored on that phone or computer, including every receipt and document photo. Photos are deleted for good — they exist nowhere else. Records will come back if you sign in again, because they are in your Drive.
• The copy in your Drive: delete the Solo Expert Tracker folder yourself, in Google Drive. The app never deletes your folder or your records for you. That is on purpose — software should not be able to destroy your business records in your own account.
• The app’s access: you can withdraw it at any time at myaccount.google.com/permissions.

Security, honestly stated

The app is served only over HTTPS, requests the narrowest Google permissions that let it work, keeps your short-lived Google sign-in token only on your own device (our access service sees it briefly to confirm your email and never stores it), and blocks third-party code from running in it.

What protects your data most, though, is that we do not hold your records. Any server of ours that unlocks the app keeps only access details (email, plan, status, trial dates), so there is no database of client records to breach. The flip side is worth saying plainly: the security of your records depends on your Google account and on the device you use. Use a screen lock, and turn on two-step verification for your Google account.

Children

The app is a business tool for working adults. It is not directed at children and should not be used by anyone under 16.

Changes to this policy

If what the app does with your data changes, this page changes with it and the date at the top moves. Material changes will be flagged in the app rather than left here to be discovered.

Contact

Questions about privacy, or a request about your data, go to support@soloexperttracker.com.