SitePadi can be used two ways: fully offline on this device, or with a free account that adds cloud backup and multi-device sync. This policy explains how your information is handled in each case.
Offline mode (no account): everything is stored only on this device, encrypted using AES-256-GCM with a key derived from your PIN using PBKDF2 (100,000 iterations). We have no access to this data.
Account mode (signed in): your data is also backed up to Firestore, Google's cloud database, so it can sync across your devices and support Pro/Business features like cloud backup and email reports. Account sign-in and password handling is managed by Firebase Authentication (a Google service); if you use "Sign in with Google," Google shares your name, email, and profile photo with us. Firebase's handling of this data is governed by Google's own privacy policy, in addition to this one.
Your PIN stays on this device. It is hashed using PBKDF2-SHA256 with a random salt, never stored in plain text, and never transmitted to us or to Firebase — even in account mode. The original PIN cannot be recovered from the stored hash.
Not currently active. The description below applies once the referral program is turned back on. If you take part in our referral program, we store your unique referral code, and — if you sign up using someone else's code or link — a permanent record linking your account to theirs so rewards can be issued correctly. This link cannot be changed once set. We don't share your identity with the person who referred you, or vice versa, beyond what's needed to track that a referral occurred and its status.
We use Firebase Analytics in a limited way, to log app errors and crashes so we can fix bugs. We do not use it to track your behaviour, location, or usage patterns for marketing purposes.
The Free plan does not currently show ads. We may introduce ads on Free in the future to help support the app; if we do, this policy will be updated first, and they will never access your personal data or project information.
The Pro and Business plans will always be ad-free.
When you export data (CSV or JSON), files are saved to your device only — SitePadi never transmits them, whether or not you're signed in.
We keep your data for as long as your account is active. If you stop using SitePadi, we don't automatically delete anything — it stays in your account until you remove it yourself. Offline-mode data that never reached our servers isn't something we can retain or delete on your behalf; that stays fully in your control, on your device.
Privacy questions: support@sitepadi.com