Privacy Policy
Last updated: 14 September 2026
This Privacy Policy explains how Evolution collects, uses, stores, and protects your information when you use the mobile app and backend API.
App name on Google Play: Evolution
Developer name on Google Play: Pavak01
Data deletion request (Google Play)
You can request deletion of your account and personal data in two ways:
- In the app: Settings → Delete account. This requires being signed in.
- Without the app: use the public deletion request page, which verifies your account password before submitting the request (so a request can’t be filed against your account by someone who only knows your email address):
Processing target: within 30 days of a verified request.
What we delete vs what may be retained
Deleted after a verified deletion request:
- Expense records (category, amount, payment method, reimbursement status)
- Receipt files and receipt metadata in active storage
- Income invoice records and any attached invoice files
- Tax summary records linked to the account
May be retained for a limited period:
- Backup snapshots: retained until backup rotation expires (typically up to 30 days)
- Data required by applicable law: retained only as legally required
1. Who this applies to
This policy applies to users of Evolution, including the mobile app and its backend API.
- Email address
- Password (stored as a bcrypt hash, never in plain text)
- Optional two-factor authentication state (Evolution verifies, but does not itself generate, a two-factor code against an encrypted secret already stored on the account)
- Category, amount, payment method (cash or card), and reimbursement status (none, partial, or full) for each expense
- The date the expense occurred
- A receipt photo or file for each expense
- Optional notes
- The period covered, source (who paid you), and total amount for each income invoice
- The date the payment was received
- An optional attached invoice file
- Estimated income tax and National Insurance figures
- Year summaries and exports generated from your entries
E. Device-local app state
On your device, the app stores your session token in secure device storage (expo-secure-store), used to keep you signed in between app launches.
We use data to:
- Create and secure your account
- Authenticate sign-in, including two-factor verification where enabled
- Record and store your expenses and income
- Calculate tax and National Insurance estimates
- Show summaries and generate exports
- Store and retrieve receipt and invoice file attachments
- Operate and protect the service (for example, rate-limiting login and upload endpoints)
4. Where and how data is stored
A. Database storage
Your account, expenses, income records, and receipt/invoice metadata are stored in PostgreSQL.
B. Receipt and invoice file storage
Receipt and invoice files are stored in S3-compatible object storage. The app stores a file path reference and uses authenticated, time-limited signed download links to access them — never a permanently public URL.
C. Authentication and access controls
- Protected API routes require a valid Bearer session token
- File downloads require both a valid session and a separate short-lived signed token
- Passwords are bcrypt-hashed
- Two-factor secrets are encrypted at rest and never transmitted to the app in plain form
5. Sharing and disclosures
We do not sell personal information.
We may share data with infrastructure providers that run core app infrastructure (hosting, database, and object storage) only as needed to provide the service.
We may disclose data if required by law or valid legal process.
6. Data retention
- Data remains stored until you request deletion, or as needed to operate the service.
- Backup copies may persist for operational recovery windows (typically up to 30 days).
7. Security measures
We apply technical controls including:
- Password hashing (bcrypt)
- Two-factor authentication support, verified against an encrypted secret
- Session revocation via token versioning (a password or 2FA change invalidates previously issued sessions)
- Authenticated API access (Bearer tokens)
- Signed, time-limited file download tokens
- Receipt/invoice content validation via magic-byte inspection (rejects files whose actual content does not match their declared type)
- Basic endpoint rate limiting
- Database backups and point-in-time recovery, provided by the hosting infrastructure
No method of transmission or storage is 100% secure, but we work to reduce risk using reasonable safeguards.
8. Your choices and rights
You can:
- View your submitted expense, income, and summary data in-app
- Void an individual expense or income record (kept as a record with a void reason, for audit purposes, rather than being erased — this preserves an accurate history for tax compliance)
- Request full account deletion (see above)
Depending on your jurisdiction, you may have additional rights (for example, access, correction, deletion, portability, objection, or restriction). Contact us to request these.
9. Children
This service is not intended for children under 13 (or the age required by local law).
10. International transfers
Your information may be processed in countries other than your own, depending on hosting and infrastructure providers.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated through app updates or repository documentation updates.
For privacy questions or requests, contact support@aplccommodities.com and include:
- Account email
- Request type (access, correction, deletion, etc.)
13. Account deletion link
Public account deletion request page:
Important: This is a product-aligned draft for implementation transparency and should be reviewed by legal counsel before production publication.