Privacy Policy

1. What We Collect

• Account information — your name, email address, and profile photo, from Google Sign-In.
• Subscription status — trial/paid status and renewal dates, from Google Play Billing. We do not receive or store your payment card details; Google Play handles those directly.
• Project data — everything you enter to produce a design: client/project names, site details, appliance loads, and the resulting sizing, BOQ, and financial outputs. This is stored locally on your device only, in the App's local storage — we do not upload it to our servers and cannot see, back up, or recover it. It stays available across sessions on that device only; export a design (Section 5) before switching devices or reinstalling the App.
• Company profile — the company name, tagline, address, and phone number you enter once, reused across your designs. Like project data, this is stored locally on your device only, not on our servers.
• Basic technical data — device type and app version, for crash diagnosis and support.

We do not collect location, contacts, camera/microphone data, or browsing history from other apps — the App does not request those permissions.

2. How We Use It

• To provide the core service — sizing calculations, saved designs, and generated reports.
• To authenticate you and maintain your subscription/trial status.
• To pre-fill your company profile into new designs and exported documents.
• To diagnose crashes and improve the App.
• To contact you about your account or subscription (e.g. trial ending, payment issues) — not for marketing unless you separately opt in.

3. Third Parties & Processors

We share data only with the processors needed to run the App, each acting under their own privacy terms:

• Google (Sign-In & Play Billing) — authenticates your account and processes subscription payments.
• Supabase — our backend database and authentication provider; stores your account information and subscription status on our behalf, under a data-processing arrangement, not as an independent user of your data. Your project data and company profile are not sent to Supabase or any other third party — see Section 1.

We do not sell your data, and do not share it with advertisers or data brokers.

4. Data Retention

We retain your account and subscription data for as long as your account is active. Project data and your company profile live only on your device, as described in Section 1 — we hold no copy of either, so there is nothing on our servers to retain or delete. If you request deletion (Section 5), your account and subscription record are deleted from our servers immediately. If you simply stop using the App without requesting deletion, your account is deleted automatically 15 days after your subscription or trial expires.

What survives deletion: a one-way cryptographic hash of your email address — not the email itself, and not reversible back to it — is kept indefinitely, solely to recognize a repeat sign-up and prevent the same person from claiming the free trial more than once. This hash cannot be used to identify you, contact you, or recover any of your deleted data.

5. Your Rights — Access & Deletion

You have the right to access, correct, export, or delete your personal data at any time.

• Export — every saved design can be exported as JSON directly from the App at any time.
• Delete your account — in-app, tap ⚙ next to your name and choose Delete My Account; or, without the App installed, visit our account deletion page and confirm via the emailed link. Deletion is immediate once confirmed and removes your account and subscription record from our servers — see Section 4 for what's retained regardless. Your on-device project data is not affected by account deletion, since we never held a copy of it; to remove it, delete your saved designs in the App or uninstall the App.
• Access/correct — contact us at nextritechltd@gmail.com.

6. Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our backend provider. Access to production data is limited to what's needed to operate the App. No system is perfectly secure, and we cannot guarantee absolute security of information you transmit to us.

7. Children's Privacy

The App is not directed at children and is not intended for use by anyone under the age of majority in their jurisdiction without parental consent. We do not knowingly collect personal data from children.

8. International Transfers

Our processors (Google, Supabase) may process data outside Kenya. Where this occurs, we rely on those providers' own compliance frameworks and contractual safeguards for cross-border transfer.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected here with an updated date, and — where they affect what data we collect or how we use it — presented to you for re-acknowledgement the next time you sign in, consistent with our Terms & Conditions.

10. Contact

Questions about this Policy or a data request: nextritechltd@gmail.com · LR. NO. 2951/35, Lower Kabete Road, Nairobi · P.O. Box 67587-00200, Nairobi, Kenya.