HomeLegal

Last Updated: January 2026

Welcome to Busi Tools ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal and business information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our mobile application.

By using Busi Tools, you agree to the collection and use of information in accordance with this policy.

1

Information We Collect

The App collects different types of data, which are stored either locally on your device or in the cloud, depending on the data type.

1.1 Data Stored LOCALLY ONLY (Never Transmitted to Cloud)

The following sensitive data is stored exclusively on your device and is never transmitted to external servers:

- Bank account details for invoice generation

- Financial records including payment information

- Tax identification numbers (VAT, company registration)

- Detailed client payment records

- Invoice data with sensitive financial information

- Expense records

Important: This data remains on your device at all times. The only way it leaves your device is if you choose to generate and share a PDF invoice containing such information.

1.2 Business Information (Stored Locally)

- Business name, address, and contact details

- Business logo and branding elements

1.3 Client/Customer Data (Stored Locally)

- Client names and contact information

- Client addresses

- Communication history

- Invoice records

1.4 Employee Information (Stored Locally)

- Employee names and contact details

- Work schedules and shift assignments

- Task assignments and completion status

1.5 Inventory Data (Stored Locally)

- Product and item information

- Stock levels and movements

- Category and location data

1.6 Account Information (Cloud - if you create an account)

- Email address (for authentication)

- Encrypted password

- Account preferences and settings

1.7 Limited Cloud Data (Optional)

If you enable cloud features, only the following non-sensitive data may be synced:

- User authentication credentials

- Group membership information

- Basic profile data (non-sensitive)

1.8 Technical Data

- Device type and operating system

- App version

- Crash logs and error reports (anonymised)

2

How We Use Your Information

We use the collected information to:

- Provide App Functionality: Enable you to manage your business operations, create invoices, schedule employees, and track inventory—all stored locally on your device

- Sync Limited Data: Securely synchronise only non-sensitive data (account information, group membership) via cloud storage when you opt in

- Improve the App: Analyse anonymised usage patterns to improve features and fix bugs

- Customer Support: Respond to your enquiries and provide technical assistance

- Security: Protect cloud account access against unauthorised use

We do NOT use your sensitive local data (bank details, financial records, etc.) for any purpose other than displaying it to you within the App and including it in PDF invoices that you choose to generate.

3

Data Storage

Important Section

3.1 Local Storage (Primary - Offline-First)

The App is designed as offline-first. Your data is primarily stored locally on your device using Hive database. This means:

- Your data remains on your device

- The App works fully offline without internet

- You maintain full control over your local data

- Sensitive data (bank details, financial records) is ONLY stored locally and never transmitted to any server

3.2 Cloud Storage (Optional - Limited Data Only)

If you create an account and enable cloud features, only limited, non-sensitive data is stored on Supabase servers:

- What IS synced: User authentication, group membership, basic profile

- What is NEVER synced: Bank details, financial records, invoices, sensitive business data

- Location: European Union (EU) data centres

- Encryption: Data is encrypted in transit (TLS/SSL) and at rest

- Access: Only you can access your data through your authenticated account

3.3 Data Retention

- Local data: Retained until you delete it or uninstall the app

- Cloud data: Retained until you delete your account or request data deletion

- Backup data: Automatically removed 30 days after account deletion

3.4 Your Responsibility for Local Data

Critical Notice: Because sensitive data is stored locally on your device, you are solely responsible for:

- Physical security of your device

- Setting up device passcodes, biometric locks, or other security measures

- Preventing unauthorised access to your device

If your device is accessed by a third party, any data stored locally in the App may be visible to that person. We are not responsible for data breaches resulting from lost, stolen, or unsecured devices.

4

Data Sharing

We Do NOT:

- Sell your personal or business data to third parties

- Share your data with advertisers

- Use your data for marketing purposes without consent

- Allow third-party access to your business information

We May Share Data:

- With your consent: When you explicitly authorise sharing

- Legal requirements: If required by law, court order, or government request

- Service providers: With trusted service providers who help us operate the app (e.g., Supabase for cloud storage), bound by strict confidentiality agreements

5

Data Security

We implement industry-standard security measures:

- Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3

- Authentication: Secure user authentication via Supabase Auth

- Access Control: Strict access controls ensure only you can access your data

- Regular Audits: We regularly review and update our security practices

- Secure Infrastructure: Our cloud provider (Supabase) maintains SOC 2 Type II compliance

6

Your Rights

Under GDPR and UK data protection laws, you have the right to:

6.1 Access Your Data

Request a copy of all personal data we hold about you.

6.2 Rectify Your Data

Correct any inaccurate or incomplete data directly in the app or by contacting us.

6.3 Delete Your Data

- In-app deletion: Use Settings > Delete All Data to remove all local and cloud data

- Account deletion: Request complete account deletion by contacting us

- Right to be forgotten: Request erasure of all your personal data

6.4 Export Your Data

Export your data in standard formats (PDF for invoices, CSV for reports).

6.5 Restrict Processing

Request that we limit how we use your data.

6.6 Data Portability

Receive your data in a structured, commonly used format.

6.7 Object to Processing

Object to certain types of data processing.

6.8 Withdraw Consent

Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at the email address provided below.

7

Children's Privacy

Busi Tools is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

8

Third-Party Services

8.1 Supabase

We use Supabase for authentication and cloud data storage.

Privacy Policy: https://supabase.com/privacy

8.2 Google Play Services

The app is distributed via Google Play Store.

Privacy Policy: https://policies.google.com/privacy

We do not use:

- Analytics tracking

- Advertising SDKs

- Social media integrations

9

International Data Transfers

If you are located outside the European Economic Area (EEA), please note that your data may be transferred to and processed in the EU where our cloud servers are located. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

- Posting the new Privacy Policy in the app

- Updating the "Last Updated" date at the top of this policy

- Sending a notification through the app for significant changes

We encourage you to review this Privacy Policy periodically.

11

Data Protection Officer

For any questions or concerns about data protection, please contact our Data Protection Officer at the email address below.

12

Contact Us

Important Section

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us:

Email: contact@dungeonstudiosolutions.com

Developer: Dungeon Studio Solutions

Address: [Your Address - Optional]

We aim to respond to all enquiries within 30 days.

13

Complaints

If you are not satisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://www.dungeonstudiosolutions.com/

Questions About Your Privacy?

If you have any questions about how we handle your data or wish to exercise your rights, please don't hesitate to contact us.