Android-specific privacy policy. This policy applies only to CostCurve package com.ryantinklepaugh.costcurve. It does not change the iOS app’s privacy policy or receipt history.
Scope and controller
Uncommon Weather LLC controls the processing described here. Contact team@uncommonweather.com. CostCurve is a receipt-backed ownership-cost ledger that pairs purchase evidence with item lifecycle, dated use events, target cost per use, purchase-pause decisions, resale outcomes, and a user-directed portable sync archive and evidence export.
Information handled
- app-private item names, categories, currency, purchase price, purchase date, tax, fees, target cost per use, lifecycle and resale fields, notes, and timestamps
- dated use events and notes, purchase-pause decisions, receipt images, on-device OCR text and confidence, and user corrections
- user-directed portable sync archives plus locally generated CSV and PDF evidence exports
- purchase entitlement and legal-choice evidence
Camera or photo access is requested only when you deliberately capture or select receipt evidence. Google ML Kit recognizes text on the device; receipt images, recognized text, and ledger records are not uploaded to Uncommon Weather or Supabase. Portable cross-device sync is a user-created archive saved or opened through Android’s document picker; there is no automatic product-data cloud. Exports leave only through a user-directed save or share action.
Product storage and providers
CostCurve keeps the item ledger, receipt evidence, on-device OCR results and corrections, dated use history, decision lineage, lifecycle and resale records, and settings in app-private local storage. PDF and CSV evidence reports and portable archives are created only when the user requests them.
Google ML Kit performs OCR on the device. An Android document provider selected by the user processes a portable archive or export destination. Google Play and RevenueCat process purchase and entitlement state. Supabase receives only privacy-minimal Legal 6 choice evidence. CostCurve has no product-data backend, analytics service, or advertising SDK.
Legal-choice evidence and abuse prevention
To preserve your choice and prevent forged receipts, the app may send privacy-minimal evidence to Supabase-hosted services: package ID, document versions and hashes, acceptance or withdrawal state, coarse adult age band and role, timestamps, a random installation identifier, request identifiers, an Android Keystore public-key proof, and—when configured—Google Play Integrity verdict material. We also process connection metadata such as IP address, user agent, response status, and rate-limit state for security, reliability, and abuse prevention. We do not send your ordinary product records with legal-choice evidence.
Purchases
Google Play supplies transaction and purchase-token data, and RevenueCat supplies entitlement and offering state. We do not receive your full payment-card number.
Retention and deletion
Local records and receipt evidence remain until the user deletes an item or all app data or removes the app. A user-created portable archive or export remains at the selected destination until removed there. Legal-choice evidence follows the separate evidentiary retention described below.
Server-side legal evidence is retained to prove and honor the choice, withdrawal, integrity, and retry history it records. Security logs are retained only as reasonably needed for fraud prevention, troubleshooting, and legal compliance. Contact us to request access or deletion; we may retain evidence where necessary to establish, exercise, or defend legal claims.
Choices and rights
You can deny optional Android permissions, decline or withdraw legal consent, manage purchases where applicable, and request privacy help. Depending on where you live, you may have rights to access, correct, delete, restrict, object, or appeal. We do not discriminate for exercising a privacy right.
Age boundary
The app is not directed to anyone under 13. We do not knowingly collect a precise birth date through the legal-choice flow.
Security and transfers
We use reasonable technical and organizational safeguards, but no device, network, or storage system is guaranteed secure. Providers may process information in the United States or other countries subject to applicable safeguards.