AllSquare

Privacy Policy for AllSquare

Last Updated: February 27, 2026

Techgeezer Limited ("we," "our," or "us") operates the AllSquare mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

1. Information We Collect

1.1 Information You Provide

- Account Information: Email address and authentication credentials when you create an account via Google Sign-In or Sign in with Apple

- Business Information: Business name, address, phone number, website, company number, VAT/tax registration numbers, and payment details (bank name, IBAN, SWIFT/BIC) that you enter for invoice generation

- Client Data: Names, email addresses, phone numbers, addresses, and VAT numbers of your clients

- Invoice and Estimate Data: Invoice numbers, amounts, descriptions, dates, and payment records

- Company Logo: Images you upload for use on invoices and estimates

- Voice Recordings: Audio recorded via your device microphone when using AI-powered invoice or estimate creation. Recordings are sent to our server for transcription and are not stored after processing.

- Text Descriptions: Text you enter when using AI-powered invoice or estimate creation

- Imported Contacts: Client information (name, email, phone number, address) imported from your device contacts with your explicit permission

- Feature Requests: Suggestions and votes you submit to the community feature request board

1.2 Information Collected Automatically

- Device Information: Device type, operating system version, and unique device identifiers

- Usage Data: Features used, screens viewed, and interactions within the App

- Analytics Data: Usage patterns and user profile information (email address, name, business name) collected via Mixpanel for product improvement and user identification. Mixpanel data is stored in the EU.

- Subscription Data: Subscription status, purchase history, and AI credit usage tracked via RevenueCat for plan management and quota enforcement

1.3 Information from Third Parties

- Authentication Providers: When you sign in with Google or Apple, we receive your email address, display name, and account identifier from these services

2. How We Use Your Information

We use the information we collect to:

- Provide, maintain, and improve the App's functionality

- Create and manage your account

- Generate invoices, estimates, and PDF documents

- Generate invoices and estimates from voice or text descriptions using AI

- Import client information from your device contacts

- Synchronize your data across your devices

- Process subscription payments through Apple's App Store

- Track subscription status and AI credit usage to enforce plan limits

- Identify you in our analytics and subscription management tools to provide support

- Send service-related communications

- Analyze usage patterns to improve the App

- Respond to your requests and provide customer support

- Comply with legal obligations

3. Data Storage and Security

3.1 Cloud Storage

Your data is stored securely on servers hosted by Railway. Company logos are stored on Amazon Web Services (AWS S3). We use industry-standard encryption for data in transit (TLS/SSL) and at rest.

3.2 Local Storage

The App stores data locally on your device using SQLite databases to enable offline functionality.

3.3 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

- Firebase Authentication for secure sign-in

- Encrypted data transmission

- Access controls and authentication requirements

- Server-side rate limiting and request validation

- Regular security assessments

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

- Firebase (Google): Authentication services

- RevenueCat: Subscription management. We share your email address, display name, and business name with RevenueCat to identify subscribers.

- Mixpanel: Analytics and user identification (EU data residency). We share your email address, display name, and business name with Mixpanel for user profile management.

- OpenAI: AI-powered invoice and estimate creation (via GPT-4o) and voice transcription (via Whisper). Voice recordings and text descriptions are sent to OpenAI for processing. We do not use your data to train AI models. OpenAI's use of data is subject to their data usage policies.

- Amazon Web Services (S3): Cloud storage for company logos

- Railway: Cloud hosting and data storage

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Device Permissions

The App may request access to the following device features:

5.1 Microphone

Used for voice-based invoice and estimate creation. Audio is sent to our server, transcribed via OpenAI Whisper, and deleted after processing. The App only accesses the microphone when you actively choose to record.

5.2 Contacts

Used to import client information from your device address book. Contact data is only accessed when you explicitly choose to import a contact. We do not access your contacts in the background.

5.3 Camera and Photo Library

Used to upload or capture your business logo for display on invoices and estimates.

6. Your Rights and Choices

6.1 Access and Export

You can export all your data at any time through the App's settings.

6.2 Account Deletion

You can delete your account and all associated data through the App's settings. This action is irreversible.

6.3 Data Correction

You can update your business information, client data, and other records directly within the App.

6.4 Marketing Communications

We do not send marketing emails. All communications are service-related.

6.5 Permission Management

You can revoke microphone, contacts, or camera permissions at any time through your device settings. Revoking permissions may limit certain features of the App.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all your data is permanently removed from our servers within 30 days, except where retention is required by law. Voice recordings used for AI transcription are deleted immediately after processing and are not retained.

8. Children's Privacy

The App is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

For users in the European Economic Area (EEA), we use Mixpanel's EU data residency option to keep analytics data within the EU.

10. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Your continued use of the App after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Techgeezer Limited

Email: hello@techgeezer.ai

13. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information.

14. EU/EEA Residents

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including:

- Right of access to your personal data

- Right to rectification of inaccurate data

- Right to erasure ("right to be forgotten")

- Right to restrict processing

- Right to data portability

- Right to object to processing

- Right to withdraw consent

To exercise these rights, please contact us using the information provided above.