Trust & Transparency
Privacy Policy
Key Principle: Your financial and transaction data is stored in your own dedicated, private Supabase database. We do not aggregate, sell, or monetize your business earnings.
1. Architecture & Data Ownership
Unlike conventional software platforms that store all customer data in a monolithic shared database, TrackTransactions.app is architected around isolated, user-dedicated databases.
- Your Private Database: Your sales, clips, transaction histories, and customer records reside in your own Supabase database project configured during onboarding.
- Encrypted Connections: Database credentials and integration tokens are encrypted using authenticated cryptography on private account storage volumes.
- No Data Pooling: We do not pool customer transaction data, analyze creator earnings for market benchmarks, or expose your metrics to other creators. Authorised administrators can view and edit an account through the app’s support tools to help with setup and troubleshooting.
2. Information We Process
To provide income tracking and analytics, TrackTransactions.app processes the following information strictly on your behalf:
- Transaction Records: Sale dates, item descriptions, product types, platforms (e.g. LoyalFans, ManyVids, Throne, Patreon), gross revenue, net payout, and fees.
- Customer Identifiers: Display names and buyer references attached to purchase statements, used to calculate repeat buyer metrics and lifetime totals.
- Founding membership enquiries: If you use the public enquiry form, your name, email address and request to be contacted are emailed to Ms Smyth so she can respond directly. The form does not process payment or subscribe you to a mailing list.
- Authentication & Preferences: Your TrackTransactions.app username, encrypted password hashes, dashboard layout preferences, and goal targets.
3. Desktop App Privacy (LF and NF)
LF Transactions and NF Web Browser run on your Windows computer with built-in website browsers. Each app has its own PIN-protected Tracker device connection and separate source-account website sessions.
- Local records: Captured statements and NF import history are saved locally in the app's SQLite databases.
- Saved login and PIN: LF, NF and Proton each retain a scoped device connection in a PIN-encrypted vault protected by Windows credential storage. Choose a PIN of 6–12 digits. It is not sent to Tracker. The PIN gates local app access; transaction databases and website profiles are not encrypted by this vault.
- Account connection: Short-lived access credentials renew automatically. Full sign-in is required after sign-out, revocation, account-access changes or 90 days of connection inactivity. Connections can be revoked in Settings > Remembered desktop apps. The apps do not share Chrome login sessions, and no personal LF/NF import key or database credentials are entered by hand.
- Uploads: Reviewed transaction records are sent to the configured Tracker over HTTPS. LoyalFans and NiteFlirt sign-ins take place on their own website pages inside the apps.
Read the LF Transactions App Privacy Document for local data and sign-out controls.
4. Third-Party Integrations & Permissions
| Integration | Data Handled | Security & Retention |
|---|---|---|
| Patreon | Membership tiers and subscription webhooks | Encrypted OAuth tokens; verified webhook signatures |
| LoyalFans (LF Importer) | Statement rows and earnings summaries | Local SQLite capture; scoped Tracker connection in a PIN-encrypted Windows-protected vault |
| Throne | Order gift notifications | Cryptographically signed HMAC webhook payloads |
| Gmail / Outlook | Sale notification receipts (read-only) | OAuth token encryption; scoped to receipt messages |
5. Data Retention & Deletion
You maintain complete control over your data lifecycle:
- Account Deletion: You may delete your account and unlink your database at any time.
- Local app data: Desktop captures are stored separately on your computer. Removing a release folder does not delete the app data. Back up local records before deleting the app data folder.
- Integration access: LF, NF and Proton desktop apps use scoped device connections. Revoke them in Settings > Remembered desktop apps. Each app also offers App > Sign out of this device. Other integration connections can be revoked from their relevant controls.
6. Third-Party Sharing and Sale of Data
We do not sell, rent, monetize, or trade your personal information, sales figures, or customer records to any third party, data broker, advertising network, or AI training company. Data is processed solely to render your private analytics.
7. Contact Us
If you have any questions about this Privacy Policy or security practices, contact us at:
Email: [email protected] (or contact your team administrator)
Project: Ms-Smyth / redesigned-octo-rotary-phone