Your data belongs to you. We collect only what the app needs to work, we store it in Canada, we never sell it, there are no ads and no tracking, and your most sensitive details are locked so that not even we can read them. You can permanently delete everything, anytime, from Settings.

Account: your email address and password. Passwords are never stored in readable form.

Profile: details you choose to add so the app can fill your timesheets and invoices, such as your name, address, phone, role, and HST number.

Sensitive details: your SIN, date of birth, and banking information, if you choose to add them. These are kept in a locked box that only your password opens. They are encrypted on your device before they ever reach our servers, and no one else, including us, can read them. If you reset your password, the old key no longer fits, so you will be asked to re-enter these details once.

Your work: the jobs, days, hours, expenses, receipt photos, goals, and contacts you record in the app.

Only to run Roll Credits for you: filling your timesheets, building your invoices and reports, syncing your data between your devices, and processing your subscription. We do not sell your information, share it for marketing, or show ads. There are no third-party analytics or trackers in the app.

Your data is stored on Canadian servers (in the ca-central-1 region). Receipt photos are kept in private storage that only your account can access.

A few trusted providers help run the app, and each receives only what its job requires: Supabase (our Canadian database and login system), Netlify (hosting), Stripe (payments; your card details go directly to Stripe and never touch our servers), and Resend (sends account emails like confirmations and password resets).

Receipt scanning: when you scan a receipt, the photo is sent to an AI service (Anthropic) to read the text and amounts. It is used only to fill in your expense and is not used to train AI models.

We keep your data for as long as you have an account. You can export a full backup anytime from Settings. Deleting your account (Settings → Your Data → Delete Account) permanently erases everything from our servers, including receipt photos, and immediately cancels any subscription. There is no recovery after deletion.

Under Canadian privacy law (PIPEDA), you have the right to access the personal information we hold about you, correct it, and delete it. The export and delete tools in Settings put these rights directly in your hands. You may also contact the Office of the Privacy Commissioner of Canada with any concerns.

If this policy changes in a meaningful way, we will note it in the app. Questions or requests: support@rollcredits.ca