Privacy Policy

1. Introduction

Walnut Flat LLC ("we," "us," or "our") operates the TRUEHOUR mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using TRUEHOUR, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service. This Privacy Policy should be read together with our Terms of Use, which include an End User License Agreement (EULA) governing the licensing of TRUEHOUR through the Apple App Store.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and password (stored securely using industry-standard encryption).

2.2 Equipment & Business Data

To provide our O&O cost calculation services, we collect information you voluntarily enter including:

• Machine details (manufacturer, model, year, purchase price)
• Operating costs (fuel, maintenance, repairs, tires/tracks)
• Business overhead costs (insurance, utilities, marketing)
• Job estimates and actual job performance data
• Expense records

2.3 Feedback You Send Us

When you use the in-app Send Feedback feature, we collect the feedback category you select, the message you write, and your answers to the two optional problem questions. If — and only if — you check the follow-up box, we also collect the email address you provide so we can reply about that feedback.

We automatically record limited product context with each submission so we can understand where an issue occurred: the app version and platform, the screen the feedback was sent from, the related machine or job record when feedback is sent from that screen, and non-financial summary counts about your account (for example, how many machines, jobs, or expense records exist, how long the account has been active, and your subscription tier). We do not collect the dollar amounts, rates, customer names, or job details from your records as part of feedback.

2.4 Location Information

If you use our "Share Your Story" feature, we collect city, state/province, and ZIP/postal code. We do not collect precise GPS location data.

2.5 Subscription Information

We receive subscription status information from the Apple App Store or our web payment processor to manage your Pro tier access. We do not store your payment card details.

2.6 Device Information

We may collect device type, operating system, and app version for troubleshooting and improving the Service.

3. How We Use Your Information

We use your information to:

• Provide and maintain the TRUEHOUR Service
• Calculate your equipment owning and operating costs
• Generate AI-powered insights and recommendations (Pro tier)
• Process and manage your subscription
• Send transactional emails (account verification, password resets)
• Respond to your support requests
• Review feedback you send us to diagnose problems, correct defects, and decide what to improve in TRUEHOUR
• Improve and optimize our Service
• Generate anonymous, aggregated benchmark data (opt-in only)

4. Information Sharing

We do not sell your personal information. We may share information with:

4.1 Service Providers

• Supabase: Database hosting and user authentication
• RevenueCat: Subscription management across platforms
• Resend: Transactional email delivery
• Lovable AI: AI-powered analysis features

4.2 App Store Providers

Apple processes in-app purchases according to its privacy policy, and Google Play processes in-app purchases according to its privacy policy.

4.3 Anonymous Benchmarks (Opt-In Only)

If you opt in to contribute anonymous benchmarks, we de-identify your data (removing personal identifiers, using only coarse geographic regions like ZIP3, metro area, county, or state) and aggregate it with other users to provide industry benchmarking insights. Your individual data is never exposed.

4.4 Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS) and at rest
• Row-level security ensuring users can only access their own data
• Secure password hashing
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights & Choices

You have the right to:

• Access: Request a copy of your data
• Update: Correct inaccurate information in the app
• Delete: Delete your account and the data associated with it, subject to the narrow retention exceptions described in Section 6.1 below
• Opt-out: Disable benchmark contributions in Settings
• Export: Export your data (available to all users)

6.1 Account Deletion

You may permanently delete your account at any time from within the app by navigating to Settings → Manage Account → Delete Account. Account deletion requires a two-step confirmation where you must type "DELETE" to proceed. Learn how to request account deletion.

When you delete your account, we delete the following, or remove the information that identifies you from it:

• Your user profile and account credentials
• All machines and equipment records
• All job estimates, actuals, and line items
• All expense records and expense adjustments
• All machine events (downtime, service logs)
• All submitted stories
• All analytics events associated with your account
• Saved estimate and quote documents
• Photos and other files you uploaded
• Unfinished estimate drafts
• In-app review and rating prompt history
• Unsubscribe-link records
• Feedback you submitted, including the message you wrote and any follow-up contact address
• The information that identifies you in our email delivery records
• Support correspondence associated with your account, through our support-mail removal process
• The customer record held for you by our subscription service provider, which we ask that provider to delete

Feedback. When you delete your account, we remove your original feedback message, follow-up email, and the link between the feedback and your account. We may retain limited non-identifying structured product-learning information only after it is no longer associated with your account or reasonably linkable to you.

Email delivery records. We keep a short operational log of the emails we send so we can confirm delivery and troubleshoot problems. Information that identifies a recipient — including the email address, our internal fingerprint of it, the provider's message identifier, and the address's domain — is removed no later than 30 days after the message is sent, and is removed immediately when you delete your account. After that, only non-identifying delivery information remains, such as the type of message, the date, the delivery outcome, and a broad category indicating whether the address was a common consumer mailbox or another kind of address.

Routine retention exceptions. If you unsubscribed from our email or reported one of our messages as unwanted, we keep a non-reversible fingerprint of your address — a one-way keyed hash, not the address itself, which is not stored in a reversible form as your email address — together with the reason and the date, solely so that we continue to honour your request not to be emailed. And we may retain limited transaction records for up to seven years from the transaction date as part of our accounting, tax, audit, fraud, chargeback, and legal-compliance recordkeeping practices; your TRUEHOUR account identifier and email address are removed from those records when you delete your account.

Case-specific retention. We may temporarily retain specific records when reasonably necessary for an active legal matter, fraud investigation, security issue, or payment dispute. We retain only what is necessary for that purpose, and we remove or de-identify those records when that need ends.

Some records are removed as part of a process rather than instantly. Support correspondence is removed through our internal removal workflow, and deletion of the record held by our subscription service provider is a request we make to that provider. Purchase records held by Apple or Google under your store account are controlled by those companies, not by TRUEHOUR.

Account deletion is irreversible. Data deleted as part of this process cannot be recovered through TRUEHOUR.

Benchmark information you previously contributed (if you opted in) is stored pseudonymously under a one-way contributor fingerprint rather than your name or email, and is used only to produce anonymous aggregated benchmarks; that contributed information, and the limited non-identifying product-learning information described above, remain after deletion.

Please cancel your subscription through the Apple App Store or Google Play before deleting your account to avoid continued billing. Deleting your TRUEHOUR account, and the deletion of our subscription provider's customer record, do not cancel an App Store or Google Play subscription.

To exercise any other rights, contact us at support@truehourapp.com or use the in-app settings.

7. Data Retention

We retain your information as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as maintaining anonymized aggregate data).

8. Children's Privacy

TRUEHOUR is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us: