Privacy notice

The short version

Pitch and Profit only keeps what it needs to tell you whether your fairs made money. If you use it without an account, everything stays on your phone and we never see it. If you create an account, we keep your email address and your fair data so we can back it up and put it on your other phones. We don't sell your data, we don't show ads, and we don't use tracking cookies.

Who we are

Michal Hajdo, trading as Dev Hajdo, is the controller of your personal data. You can reach us at devhajdo@gmail.com or by post at 50 Robert Street, Dudley, DY3 2AY.

What we collect, why, and how long we keep it

• Your email address, if you create an account. We use it to sign you in (with a link or a code, never a password) and to send emails about your account. Why: to provide the service you asked for (contract). Kept until you delete your account, then gone within 30 days.
• What you put in the app: your shop name, your rates, your makes, your fairs (including where they are and any notes) and your sales. Why: to provide the service (contract). If you have an account, we keep a copy until you delete it, plus encrypted weekly backups that are deleted after 4 weeks. Without an account, it only exists on your phone.
• If you pay for Pro: your Stripe customer and subscription references and your payment history. Why: billing (contract) and tax records (legal obligation). Kept for 6 years after your last payment, because HMRC requires it. We never see or store your card details.
• Simple usage counts, like "someone used the calculator" or "a fair was created". Without an account these carry nothing that identifies you. With an account they're linked to it, but never include your email, notes or anything you typed. Why: to see which parts of the app help people, so we can improve it (legitimate interests). Kept for 24 months.
• Error reports, if something breaks, with your email and notes removed first. Why: to fix bugs (legitimate interests). Kept for our error service's standard period.
• Server logs, including IP addresses, kept by our hosting and database providers. Why: to keep the service secure and stop abuse (legitimate interests). Kept for the providers' standard periods.

We never collect card numbers, passwords, your location, your contacts, or anything about your own customers. The notes field on a fair says so too: please don't add your customers' personal details.

Who we share it with

We use a few companies to run the service. They only process your data on our instructions, under data processing agreements:

• Supabase: our database and sign-in. Your data is stored in Ireland (EU).
• Cloudflare: hosts the website and app.
• Resend: sends sign-in emails, from the EU where offered.
• Sentry: error reports, stored in the EU.
• GitHub: keeps our weekly database backups, encrypted before they leave the database, for 4 weeks.

Payments for Pro are handled by Stripe as the seller (a "merchant of record"). That makes Stripe a separate controller for your payment details, under its own privacy policy:

Stripe's privacy policy

Some of these companies are based in the US. Where your data leaves the UK or the EEA, it's protected by the UK's adequacy regulations (including the UK-US data bridge) or by the UK's International Data Transfer Addendum in the provider's data processing agreement.

What we store on your phone

The app keeps your data in your browser's storage so it works with no signal. It also stores a copy of the app's files for offline use, your sign-in if you have an account, and choices you've made, like cash or card. All of this is strictly necessary for the app to work, which is why there's no cookie banner. We don't use analytics cookies, advertising or tracking pixels.

Signing out clears all of it from that phone. Without an account, clearing your browser data deletes it for good, so do back up if your fairs matter to you.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to move it to another service, or to stop or limit how we use it. Most of this you can do yourself in the app: everything is editable, "Download my data" gives you a copy in one file, and "Delete my account" removes everything from our servers within 30 days.

For anything else, email devhajdo@gmail.com. We'll reply within one month, free of charge.

If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO):

ico.org.uk/make-a-complaint

Changes

If we change this notice in a way that matters, we'll tell you in the app and by email before it applies. The date at the top shows when it last changed.