Security and privacy, in plain words

This page says it simply. The legal wording is on the Privacy page, and it wins if the two ever differ.

The short version

Your records stay on your phone and in your own Google Drive.
Your records never reach our servers.
There is no tracking, no analytics and no advertising. Nothing is sold, and your records are shared with no one.

On your own device, so the app works offline.
In your own Google Drive, as ordinary files in a folder you can open, copy or delete at any time, without us.
Scanned receipts and document photos stay on the device that took them. They are not copied to Drive.

Any server we use to unlock the app keeps only your sign-in email, plan, status and trial dates, plus the purchase reference numbers needed to match a payment to your plan.
When you buy on our website, Stripe takes the payment on its own page. We never see or store your card number.
We keep a short log of manual access changes. Purchase and payment records are kept as Singapore tax rules require.
Our hosting provider (Google Cloud) logs each request to the access service, for security, and deletes those logs after 30 days.

Google Drive (drive.file): only the files and the folder the app creates. Not the rest of your Drive.
Google Calendar (calendar.events.owned): to put the appointments you book into your own main calendar. One way: from the app into your calendar.
Your name and email, so we know who you are.
Both Drive and Calendar are required. If you untick either one on Google’s screen, the app asks you to sign in again.
We follow the Google API Services User Data Policy, including its Limited Use requirements.

Erase on this device: one tap clears the records on your phone.
Delete your plan record: email support@soloexperttracker.com and we delete your access record and remove your email from the log within 30 days.
Permanent delete is permanent: deleting a record in the app does not leave a recoverable copy in your Drive trash.
Deleting a client removes their appointments, consultations and scanned documents with them. Income entries and receipts stay until you delete them. Deletions can be restored from Recently Deleted for 30 days.

Website purchases are sold by Solo Tracker and paid through Stripe. Purchases made through Google Play are processed by Google.