TaxTrack Privacy Policy

Last Updated: August 19, 2026

1. Introduction

TaxTrack ("we," "our," or "us") provides this privacy policy to explain how we collect, use, store, and protect your information when you use the TaxTrack mobile application (the "App"). TaxTrack is a financial record-keeping tool designed to help self-employed individuals and small business owners track income, expenses, and estimated taxes.

⚠ No Tax Advice. TaxTrack is a financial record-keeping and estimation tool. It does not provide legal, tax, or accounting advice. All tax estimates, sales tax threshold comparisons, NTOT tip calculations, and other financial calculations are based on the data you provide and current tax laws as we understand them. Tax results are estimates only and should not be relied upon for filing purposes. You should consult with a qualified tax professional before filing your taxes or making any tax-related decisions. By using TaxTrack, you acknowledge that the App is a data organization tool, not a substitute for professional tax advice.

By using TaxTrack, you agree to the practices described in this policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

2.1 Information You Provide Directly

Category	Examples	Purpose
Account Information	Email address, display name, profile photo (via Google Sign-In or Apple Sign-In)	User authentication, cross-device sync
Transaction Data	Income/expense amounts, dates, categories, notes, platforms (e.g., Uber, Etsy), business-use percentages, payment status, tip amounts	Core app functionality — tax estimation, ledger, reporting
Occupation & Project Data	Occupation name, project/client names, job details	Transaction categorization and organization
Import Data	CSV files (Uber, Stripe, PayPal, Etsy, other), bank transaction records imported via CSV	One-time data import
Inventory Data	Stock items, quantities, consumption tracking	Inventory management feature
Tax Reminder Settings	Savings goals, quarterly payment reminders	Tax planning features
Receipt Images	Photos of receipts captured through the OCR scanning feature	Receipt digitization (processed locally on device)
Feedback & Support	In-app feedback submissions, email correspondence	Product improvement, customer support

2.2 Information Collected Automatically

Category	Examples	Purpose
Device Information	iOS version, device model, app version	Crash reporting, feature compatibility
Usage Data	Feature interactions, screen views (anonymized aggregates)	Analytics, product improvement
Subscription Status	Trial status, subscription tier, purchase receipts (via Apple StoreKit)	In-app purchase management, feature access control

2.3 Information from Bank Sync (SimpleFIN)

When you enable Bank Sync, you connect your financial institution through SimpleFIN, a third-party data aggregation service. TaxTrack:

Receives transaction history (amounts, dates, payee names, transaction IDs) from your connected account
Does NOT receive or store your bank login credentials
Does NOT receive your bank account number or routing number
Syncs transactions approximately every 2–4 hours after initial connection

SimpleFIN is an independent service; your relationship with SimpleFIN is governed by their privacy policy at simplefin.org/privacy.

3. How We Use Your Information

Purpose	Legal Basis (GDPR)	Data Used
Provide tax estimation and financial tracking	Contract performance	Transaction data, occupation data
Enable cross-device data sync	Consent	All account data (encrypted)
Deliver Pro subscription features	Contract performance	Subscription status
Improve app functionality	Legitimate interest	Anonymous usage data
Respond to support inquiries	Consent	Contact info, relevant account data
Comply with legal obligations	Legal obligation	As required by law

We do NOT sell your personal information for any purpose, including for advertising or data brokerage.

4. Data Storage & Security

4.1 Storage Architecture

TaxTrack uses a local-first architecture:

Storage Layer	Technology	Data Stored
Local (On-Device)	JSON files and a local SQLite database stored in the app's sandboxed container (protected by iOS data protection)	All transaction, occupation, project, inventory, and user preference data
In-Memory Cache	`LocalCache` (process lifetime)	Currently loaded data for fast UI access
Cloud Sync	Firebase Firestore (Google Cloud)	User data when sync is enabled (authenticated users only)

4.2 Security Measures

Encryption in Transit: All data transmitted to/from our servers uses TLS 1.2+ (HTTPS)
Encryption at Rest: Firebase data is encrypted at rest using AES-256 (Google Cloud default)
Authentication: User accounts are secured via Google Sign-In (OAuth 2.0) or Apple Sign-In; we never store passwords
Local Data: JSON files are stored in the app's sandboxed container, inaccessible to other apps
Bank Credentials: TaxTrack never has access to bank login credentials — authentication is handled directly by SimpleFIN
Purchase Data: Subscription payment processing is handled entirely by Apple StoreKit; TaxTrack receives only purchase confirmation data directly from Apple and does not store raw payment card information on its servers

5. Third-Party Services

Service	Purpose	Data Shared	Privacy Policy
Firebase (Google Cloud)	Cloud sync, authentication, server functions	Account info, encrypted transaction data	firebase.google.com/support/privacy
Google Sign-In	User authentication	Email, name, profile photo (as configured)	policies.google.com/privacy
Apple Sign-In	User authentication	Name, email (as configured; Apple may provide a private relay email)	apple.com/legal/privacy
SimpleFIN	Bank transaction aggregation	Bank transaction request (no credentials shared with us)	simplefin.org/privacy
Apple StoreKit	In-app purchase processing	Payment transaction (Apple handles — TaxTrack never sees payment info)	apple.com/privacy

6. Data Retention & Deletion

Data Type	Retention Period	Deletion Mechanism
Transaction Data	Until account deletion	"Delete Account" in Settings, or request via support
Cloud Backup	Until account deletion	Automatic when account is deleted
Bank Sync Connection	Until user removes account or revokes access	"Remove" in Bank Sync settings
Local Cache	Session lifetime (cleared on app termination)	Automatic
Analytics Data	12 months (anonymized)	Aggregate only; cannot be linked to individual users

To delete your account and all associated data: Go to Settings → Delete Account, or contact us at taxtrack@kavovo.app. Deletion is permanent and irreversible.

7. Your Rights (GDPR & CCPA)

If you are a resident of the European Economic Area (EEA), United Kingdom, or California, you have the following rights:

Right	Description
Access	Request a copy of the personal data we hold about you
Rectification	Correct inaccurate or incomplete data
Erasure	Request deletion of your personal data ("right to be forgotten")
Restriction	Limit how we process your data
Data Portability	Receive your data in a structured, commonly used format (JSON export)
Objection	Object to processing based on legitimate interests
Withdraw Consent	Withdraw consent at any time (does not affect lawfulness of prior processing)

To exercise these rights: Email taxtrack@kavovo.app. We will respond within 30 days as required by law.

8. Children's Privacy

TaxTrack is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

9. International Data Transfers

Your data may be transferred to and processed in the United States (where our servers are located) and other jurisdictions where Firebase/Google Cloud operates. We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through:

In-app notification
Email (if you have an account)
Update to the "Last Updated" date at the top of this policy

We recommend reviewing this policy periodically.

11. Contact Us

Purpose	Contact
All Inquiries (Privacy, Support, DPO)	taxtrack@kavovo.app

Natloc Tech

12. California Privacy Rights (CCPA)

Disclosure	Answer
Categories of personal information collected	See Section 2 above
Categories of sources	User input, SimpleFIN, Google Sign-In, Apple Sign-In
Business/commercial purpose	See Section 3
Categories of third parties	Firebase (Google), SimpleFIN
Sale of personal information	We do NOT sell personal information
Right to opt out	Not applicable — no sale occurs
Right to non-discrimination	We will not discriminate against you for exercising CCPA rights

To exercise CCPA rights: Submit a verifiable request to taxtrack@kavovo.app.