Privacy Policy

Effective date: October 21, 2026  ·  Warner Creates LLC (Massachusetts)

This Privacy Policy describes how Warner Creates LLC, a Massachusetts limited liability company ("we", "us", or "our"), collects, uses, and shares information when you use the Logged mobile application ("the App"). We take your privacy seriously and are committed to protecting your data.

1. Information We Collect

We collect the following categories of information when you use Logged:

• Account information — your email address and password (stored as a secure hash by Firebase Authentication)
• Business profile — business name, license number, tax rate, default payment note, and optional business logo
• Ways to get paid — the Venmo username, Cash App $cashtag, PayPal.me name and Zelle email or phone number you choose to add. They are printed on your invoice PDFs and shown on the invoice pages your clients open, so anyone you send an invoice to can see them. Clear a field in Settings to stop showing it.
• Customer data — names, phone numbers, email addresses, addresses, and service type tags you enter for your customers
• Job data — job titles, types, scheduled dates, status, and notes you create
• Invoice data — invoice numbers, line items, amounts, payment status, and client signatures
• Photos — photos you capture within the App are stored on your device and, when uploaded, stored in Cloudflare R2 cloud storage
• Location — if you grant the location permission, the App records the precise GPS coordinates where each job photo is taken, so the photo can be geotagged for your records. Coordinates are stored alongside the photo and synced to cloud storage. Granting location is optional — you can deny or revoke the permission in your device settings at any time, and photo capture will still work without it. We do not track your location in the background or use it for any purpose other than tagging the photo at the moment of capture.
• Push notification token — a device token used to deliver push notifications (e.g., when a client views your invoice or pays it)
• Error and crash data — crash reports collected by Sentry to help us identify and fix bugs
• Usage events — which features you use in the App (for example opening the App, creating an invoice, tapping Send, or opening the upgrade screen), along with the app version, your platform, the week your account was created and whether you're on the free or Pro plan. We also record when an email Logged sends for you goes out, when your client first opens it or taps Pay, when an estimate is accepted or declined, and when an invoice is paid through Stripe (as a broad amount range, never the exact amount). Usage events are stored under a coded identifier for your account, not your name or email, and never include your customers' details, notes, payment handles or anything you type.

If you import customers from your phone's contacts, the App reads your contacts on your device to show you the list and saves only the ones you choose, as customer data. The rest of your address book never leaves your phone. We do not collect your browsing history or any data beyond what is necessary to provide the App's features.

2. How We Use Your Information

• To provide, maintain, and improve the App's features
• To sync your data across devices and store it securely in the cloud
• To send invoices to your clients via email on your behalf
• To deliver push notifications (e.g., invoice viewed and payment received alerts)
• To process your subscription payments through Apple (via RevenueCat)
• To identify and fix crashes and bugs (Sentry)
• To understand which features help and where the App gets in the way, so we can improve it (usage events)

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Third-Party Services

Logged uses the following third-party services. Each has its own privacy policy governing how they handle data.

4. Data Storage and Security

Your data is stored on your device (SwiftData on iPhone, Room on Android) and is synced to Firebase Firestore (hosted in the US). Photos are stored in Cloudflare R2. We use industry-standard encryption in transit (HTTPS/TLS) and at rest.

Your data is associated with your account and is not shared with other Logged users.

Public invoice pages. When you send an invoice by email, the email contains a link to a public web page hosted at getlogged.app/i/<token>. The page displays the invoice details, line items, photos, and payment information. The link acts as a bearer credential — anyone who possesses it can view the page — so we treat it accordingly: the token is a 128-bit randomly generated value, expires 90 days after issue, and is delivered only to the email address you specify when sending the invoice. The page is not indexed by search engines and does not leak the link via referrer headers when your client clicks Pay Now. Access logs record only a SHA-256 hash of the token for rate-limiting and abuse detection; raw tokens are never written to logs.

5. Data Retention and Account Deletion

We retain your data for as long as your account exists. Downgrading from a paid plan to the free tier does not delete your data — your history remains intact and accessible.

Account deletion: You can permanently delete your account at any time from the App's Settings screen ("Delete Account"). Deleting your account immediately and permanently removes:

• All photos and PDF invoices stored in Cloudflare R2 cloud storage
• All records in our database (customers, jobs, invoices, line items)
• Your user profile and authentication credentials
• All data stored locally on your device

Account deletion is irreversible. We do not retain deleted account data except where required by law (e.g., financial records required under applicable regulations). Stripe Connect account history is governed by Stripe's own data retention policies.

Usage events are deleted automatically after 3 months. Because they're stored under a coded identifier rather than your account, they can't be picked out and removed early when you delete your account; they expire on the same 3-month schedule.

For step-by-step instructions, what is retained and for how long, and how to request deletion if you no longer have access to the app, see our dedicated Account Deletion page.

6. Your Rights

Wherever you live, you have the following rights with respect to your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data (or use the in-app "Delete Account" feature for immediate deletion)
• Portability — request your data in a portable format
• Opt-out of sale — we do not sell your personal data to third parties
• Opt out of usage events — turn off Settings → Privacy → Share usage data in the App (version 1.4 and later). The App then stops sending usage events and deletes any it hasn't sent yet. Records of the emails Logged sends and the payments it handles for you are part of running the service, so we still count those.

To exercise any of these rights, contact us at privacy@getlogged.app. We will respond within 30 days. We will not discriminate against you for exercising these rights.

7. Children's Privacy

Logged is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, please contact us:

• Email: support@getlogged.app
• Website: getlogged.app
• Company: Warner Creates LLC