Privacy Policy

1. Introduction

This Privacy Policy describes how Accounted ("we", "our", or "us") handles information in relation to our mobile application ("the App"). We are committed to protecting your privacy and being transparent about our data practices.

Key Principle: Accounted is designed as a privacy-first, offline-first application. We do not collect, store, or process your business data on our servers.

2. Information We DO NOT Collect

Unlike most apps, Accounted does NOT collect the following:

• Business Data: Stock information, transactions, jobs, people, balances, or any data you enter in the app
• Personal Information: No names, email addresses, phone numbers (unless you contact support)
• Usage Analytics: We don't track how you use the app
• Location Data: No GPS or location tracking
• Device Information: No device fingerprinting or tracking
• Behavioral Data: No behavioral profiling or targeted advertising

3. Information We DO Collect

We only collect minimal information necessary to provide our service:

3.1 Website Analytics (This Website Only)

Our marketing website (not the app) may use Google Analytics to understand visitor traffic. This includes:

• Pages visited
• Time on page
• Referring websites
• Browser type and device type
• General geographic location (country/city level)

Important: This analytics is ONLY on our website, NOT in the mobile app.

3.2 License Purchase Information

When you purchase a Premium license:

• Payment is processed by Gumroad or Payhip (third-party payment platforms)
• They collect: Email address, payment information, billing address
• They send you: License key via email
• We receive: Notification of purchase (to generate license key)
• We DO NOT receive your payment card information

3.3 Support Communications

If you contact our support team:

• We collect: Email address, name, message content, device information you provide
• Purpose: To respond to your support request
• Retention: We keep support emails for 2 years for quality assurance

3.4 License Validation (Offline)

License key validation happens entirely on your device:

• No internet connection required for validation
• License key is checked using local cryptographic verification
• We don't know when or how often you use your license
• We can't remotely disable your license (except for fraud cases)

4. How Your Data is Stored

4.1 Local Storage Only

All business data you enter in Accounted is stored exclusively on your device using:

• AsyncStorage: Secure local key-value storage
• Encryption: Premium users get AES-256 encryption of local data
• No Cloud Sync: Data is never transmitted to cloud servers

4.2 Data Backups

Your device may back up app data through:

• iOS: iCloud backup (controlled by your iOS settings)
• Android: Google Drive backup (controlled by your Android settings)

These backups are handled by Apple/Google, not by us. Refer to their privacy policies for details.

4.3 Manual Exports (Premium)

Premium users can export data to JSON/CSV files:

• Exports are saved to your device storage
• You control where exports are stored
• You can share exports via any method you choose
• We never receive your export files

5. Data Sharing and Third Parties

5.1 We Do Not Share Your Business Data

We cannot share what we don't have. Since your business data never reaches our servers, we have nothing to share with third parties.

5.2 Third-Party Services We Use

These services may collect limited information:

Service	Purpose	Data Collected
Gumroad / Payhip	Payment processing	Email, payment info, billing address
Google Analytics	Website traffic analysis	Website usage, IP address, browser info
Email Provider	Support communications	Email address, message content
App Stores	App distribution	Download data (controlled by Apple/Google)

6. Your Rights and Choices

6.1 Access and Control

You have complete control over your data:

• Access: All your data is on your device - you can access it anytime
• Export: Premium users can export all data to JSON/CSV
• Delete: Uninstall the app to remove all local data
• Portability: Use export features to move data to other systems

6.2 GDPR Rights (European Users)

Under GDPR, you have the right to:

• Access: Request what personal data we hold (likely just support emails)
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Data Portability: Receive your data in a machine-readable format
• Object: Object to processing of your personal data
• Restrict Processing: Request restriction of processing

To exercise these rights, email: privacy@accounted.info

6.3 CCPA Rights (California Users)

Under California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information is collected
• Know if personal information is sold or shared
• Access your personal information
• Request deletion of personal information
• Opt-out of sale of personal information (Note: We don't sell data)

7. Children's Privacy

Accounted is intended for business use and is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact us at privacy@accounted.info and we will delete it.

8. Security

8.1 Data Security Measures

We implement security measures to protect your data:

• Premium Encryption: AES-256 encryption for local storage
• App Lock: PIN/biometric protection (Premium)
• Secure Transmission: HTTPS for website communications
• Code Security: Regular security audits and updates

8.2 Your Responsibility

Since data is stored locally on your device, you should:

• Keep your device physically secure
• Use device lock screen protection
• Use app lock features (Premium)
• Regularly backup your data (Premium export feature)
• Keep the app updated to latest version

8.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information (e.g., support emails), we will:

• Notify affected users within 72 hours
• Describe the nature of the breach
• Explain steps taken to address the breach
• Provide recommendations for protecting yourself

Note: Since business data is local-only, a breach of our systems would not expose your business data.

9. International Data Transfers

Your business data never leaves your device, so there are no international transfers of business data.

For support emails and license purchases:

• Data may be stored on servers in various countries
• Third-party services (Gumroad, Payhip, Google Analytics) have their own data transfer policies
• We ensure third parties comply with GDPR where applicable

10. Cookies and Tracking Technologies

10.1 Mobile App

The Accounted mobile app does NOT use:

• Cookies
• Tracking pixels
• Analytics SDKs
• Advertising trackers

10.2 Website

Our marketing website may use:

• Essential Cookies: For website functionality
• Analytics Cookies: Google Analytics (can be blocked with browser settings)

You can control cookies through your browser settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be:

• Posted on this page with updated "Last Updated" date
• Announced in app update notes (for material changes)
• Sent via email to license holders (for significant changes)

Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, concerns, or requests:

We aim to respond to privacy requests within 30 days.

13. Legal Basis for Processing (GDPR)

For EU users, our legal basis for processing personal data is:

• Contract Performance: License purchases and delivery
• Legitimate Interest: Customer support, fraud prevention
• Consent: Website analytics (can be opted out)

14. Data Retention

We retain different types of data for different periods:

Data Type	Retention Period	Reason
Business Data (in app)	Until you delete the app	Stored locally on your device
Support Emails	2 years	Quality assurance, reference
License Purchase Info	Life of license + 1 year	Support, fraud prevention
Website Analytics	26 months (Google default)	Traffic analysis