Privacy Policy —
Effective date: October 1, 2026
("the app") is provided by . This policy explains what data the app collects, how it is used, and your choices.
Data we collect
- Account information: your email address and a password. Passwords are stored only as a salted, one-way hash (PBKDF2-SHA256); we cannot see your password.
- Business profile: the business name, license text, address, phone, email, website, logo, default rates and terms you choose to enter.
- Content you create: estimates (which may include your clients' names, phone numbers, emails and project addresses), your material catalog and prices.
- Technical data: a session cookie to keep you signed in, and your IP address, used briefly to limit repeated failed sign-in attempts. Our hosting provider (Cloudflare) processes standard request logs.
We do not collect location, contacts, photos, or advertising identifiers. The app contains no ads and no third-party analytics.
How we use data
Only to provide the app's features: signing you in, storing and showing your estimates and catalog, and generating your PDF and Excel files (generated on your device). We do not sell your data or use it for advertising.
Third parties
- Cloudflare hosts the app and stores its database.
- Product price lookups: when you look up a SKU or paste a product link, the SKU or link is sent to the retailer's website and/or to SerpApi (a search API) to retrieve the product name and price. No personal information is included in these requests.
- Google Fonts may be loaded to display text.
Your clients' information
If you enter information about your clients, you are responsible for having a lawful basis to do so. We store it only so you can access it, and it is deleted with your account.
Data retention and deletion
Your data is kept while your account exists. You can delete individual estimates and catalog items at any time. To delete your account and all associated data, use Settings → Delete Account in the app, or the account deletion page. Deletion is immediate and permanent. Failed sign-in records are erased automatically within minutes to hours.
Security
All traffic is encrypted with HTTPS. Sessions use secure, HTTP-only cookies. Access to your data requires your password.
Children
The app is intended for business use by adults and is not directed to children under 13.
Changes
We may update this policy; the effective date above will change when we do.