Tapeline Privacy Policy
The short version. Your quotes, jobs, clients and photos stay on your device. Our server only knows your account email and whether your subscription is active.
Other data leaves your device only when you choose to back it up to your own Google Drive, use an AI provider with your own API key, or send something to a client yourself. Payments are handled by Google Play or Stripe; we never see your card number.
We don't use analytics, ads or tracking, and we never sell data.
Who we are
Tapeline is a quoting, permit and inspection tracker for contractors. It is published by Olu Shoneye. Questions about this policy go to tapelineapp@gmail.com.
What you store in Tapeline
As you use the app, you may enter:
- your business details, logo, license number, payment link and standard terms;
- client names, job addresses, email addresses and phone numbers;
- quotes, change orders, payment schedules and invoices;
- permit numbers, inspection dates and results, job notes and daily field logs;
- photos, receipt scans and signatures you capture, including your own signature for quotes;
- job notes you type or dictate for AI drafting;
- your price book and material costs.
All of this is saved only in the app's storage on your device. We cannot see it, and none of it is sent to our server. If you uninstall the app or clear its storage, this data is deleted from the device. Use the backup options below if you want a copy.
Your account and subscription
Tapeline is free for 7 days, then a paid subscription. To track that, you sign in with your email address. Our server, run on Supabase, stores:
- your email address and sign-in records;
- when your free trial ends, and whether you pay through Google Play or by card;
- your subscription status and the date it is paid through, plus the reference numbers Google Play or Stripe give us for your subscription.
- a random code for each device you sign in on, its type (for example "Android phone"), and when it was last used, so a subscription covers a set number of devices (2 per account). Signing out on a device removes its code; devices unused for 180 days are forgotten.
We use this only to sign you in and to decide whether Tapeline is in full or view-only mode. We send you sign-in codes by email, and nothing else unless you contact us.
Payments. In the Android app, you pay through Google Play under Google's terms. On the website, you pay by card through Stripe under Stripe's terms. They process your payment details; we only receive whether the payment succeeded and the date your subscription is paid through.
Optional features that send data off your device
Each of these is off until you turn it on or use it.
| Feature | What is sent, and where |
|---|---|
| Google Drive backup | When you connect Google Drive, Tapeline asks Google for permission to use only a hidden app-data folder in your own Drive (the drive.appdata permission). It cannot see or change any of your other Drive files. Your backup, including photos if you choose to include them, is stored there. Google handles the sign-in. Tapeline keeps the sign-in token only in memory while the app is open. We never receive your backup. |
| Dictation (voice to text) | When you tap "Start talking", Tapeline asks for microphone access and uses your browser's built-in speech recognition. In Chrome, the audio is sent to Google's speech service to be turned into text, under Google's terms. Tapeline itself never records or stores audio; only the resulting text is saved, with that quote, on your device. You can type instead, or use your keyboard's own microphone key. |
| AI polish and AI drafts, on this device | The AI model is downloaded once to your device from public model hosts (Hugging Face and GitHub). After that, notes you polish or draft from are processed entirely on your device and are never sent anywhere. |
| AI polish and AI drafts, with your own API key | If you choose Anthropic or OpenAI and add your own API key, the text you ask to polish is sent directly from your device to that provider. When you ask for a drafted quote, your job notes, your price book and labor rates, your trade, and the job address are sent to that provider so it can suggest line items. Their privacy terms apply to that request. Your API key is stored only on your device and is never included in backups. |
| Receipt scanning | Text is read from the photo on your device. The reading tool is downloaded the first time you use it. Your photo is not uploaded. |
| Sending quotes and online signing | When you email, text or share a quote, Tapeline opens your own email, messaging or share apps with the message filled in. The online signing link carries the quote's details inside the link itself, in a compressed form. Anyone you give the link to can open it, so share it only with your client. When your client signs, their name and signature come back to you inside a reply link, or are saved straight to the quote if they sign on your device. No copy is kept on any server. The signing page also remembers, in the signer's own browser, that the link was signed (name, date and the reply link), so the same link can't be signed twice. Signing links stop working after the quote's valid-until date. |
| Calendar and store links | The "Add to calendar" buttons open Google Calendar or Outlook with the inspection details filled in. Material links open Home Depot or Lowe's search pages, and the "Get your API key" buttons open Anthropic's or OpenAI's own websites. Those sites' own policies apply once you open them. |
Services the app loads
To run, Tapeline loads fonts and code libraries from Google Fonts, cdnjs (Cloudflare) and jsDelivr, and Google's sign-in library from accounts.google.com so Drive backup is ready when you tap it. Optional features download their parts only when you first use them: the receipt reader's language data from tessdata.projectnaptha.com, and the on-device AI model and its code from Hugging Face and GitHub. The app itself is hosted on Netlify, and your account is handled by Supabase. Like any website, these services receive standard technical information when your device requests a file from them, such as your IP address and browser type. They do not receive anything you type into Tapeline.
What we don't do
- We don't run analytics or crash reporting, and we don't use advertising identifiers.
- We don't show ads, and we don't sell, rent or share your data with anyone.
- We don't access your contacts or location. The camera is used only when you choose to take a photo, and the microphone only while you are dictating.
Deleting your data
- On your device: delete individual records in the app, or uninstall the app or clear its storage to remove everything.
- Your account: in Tapeline, open Account and tap "Delete account". This permanently deletes your email, sign-in and subscription record from our server, and cancels a card subscription. A Google Play subscription must be cancelled in Google Play. You can also email us to delete your account. To allow one free trial per person, we keep a one-way scrambled code (a hash) made from your email address after you delete your account. It cannot be turned back into your address and is used only to check whether that address has had a free trial before.
- Google Drive backup: in Tapeline, open Business profile and tap "Disconnect Google Drive". To delete the backup file itself, open Google Drive on the web, go to Settings, then Manage apps, find Tapeline and choose "Delete hidden app data".
- AI providers: requests sent with your own API key are handled under your account with Anthropic or OpenAI. Their data controls apply.
Apart from your account and subscription record, we never receive your data, so there is nothing else for us to delete. Payment records kept by Google or Stripe are subject to their own retention rules.
Children
Tapeline is a business tool for adults. It is not directed to children under 13, and we do not knowingly collect information from them.
Security
Data on your device is protected by your device's own security, such as its screen lock and encryption. Connections to Google Drive and the AI providers use encrypted HTTPS. Keep your device locked, and keep a backup, because anyone who can unlock your phone can open the app.
Changes to this policy
If we change how Tapeline handles data, we will update this page and its effective date before the change takes effect.
Contact
Olu Shoneye, tapelineapp@gmail.com