Apple Privacy Policy

1. Who is responsible

The controller is Sam Davey, trading as Sam Sam The Carpet Man. Privacy questions: samsamthecarpetman.est2006@gmail.com.

2. What stays on this device

Cutting With Sam cloud job sync is enabled. When you work in a signed-in cloud workspace, draft and completed job records, revisions and deletion markers synchronise to our protected backend. For a company workspace, authorised current members including the owner can see company jobs. Joining a company does not reassign personal jobs. Local working copies and offline edits remain on the device. Synchronisation stays within Cutting With Sam.

3. Online accounts and sign-in

Where configured, the app uses Google's Firebase Authentication online, separately from local jobs. Email registration and sign-in send your email and password; an optional display name, account ID (UID), provider identity and email-verification status are also processed. Verification and password-reset requests use this account service. Google or Apple sign-in exchanges provider tokens with Firebase. The SDK maintains the signed-in session and may automatically contact Firebase to refresh it. Firebase also processes IP addresses and user-agent information for authentication security and abuse prevention.

4. Job exports and support reports

You choose whether to export a file using the device share/save controls, share a sheet, or submit a support report by tapping Confirm and Send Report after reviewing it. Copy Report and Save Report remain manual local alternatives and do not submit the report or its optional image. Saving a customer job locally does not automatically send it to a support or external export destination. In a company workspace, saving queues the job for authorised company synchronisation. The app must not silently attach customer jobs to a support report. Your chosen destination may process the data under its own privacy terms. The app does not connect directly to an external job-management or productivity service.

5. Categories and purposes

Local records may include customer contact details, job address, measurements, fitting notes, product selections and generated documents. They are used to create and manage fitting plans and records. Preferences and allowance entries are used to operate themes, access rules and generation limits. A support report contains only text you type, contact details you opt to include, the app version, coarse platform/device class and operating-system details, a time and random report reference, and an optional current-screen image that is visibly shown for review. No saved job, customer, measurement or plan-file records, account tokens, host names or stable device identifiers are automatically attached. On an allowed cutting-plan page, the reviewed optional image can contain dimensions or area labels that are visibly shown on that page.

6. Lawful basis and business users

For services you request, the operator uses account and support data to perform the agreement with you. Security, fraud prevention and reliable service operation are legitimate interests, balanced against your rights. Where you contact us on behalf of an employer rather than as our contracting customer, administering that business relationship is our legitimate interest. Records required by law are kept for legal obligations. You do not have to consent to marketing to use the app. Your business decides why customer-job data is used and who may see it, and must have its own lawful basis and customer notice. When we host business jobs on its instructions, the business is the controller and we act as its processor for those jobs. We remain controller for our own accounts, billing administration, security and support.

7. Retention and deletion

Local active and completed jobs remain until you delete them. Local Recently Deleted jobs are normally retained for 30 days before purge. For hosted company jobs, the 30-day restore window is not a promise that every server or backup copy is erased on day 30. Company deletion and closure require an authorised request and review of membership, shared records and any legal retention. Exported copies remain wherever you save or send them. Deleting the login account is separate from deleting local jobs or exported copies. Firebase says logged IP addresses are kept for a few weeks; other Authentication data remains until user deletion is initiated, with removal from its live and backup systems within 180 days. This is not an immediate purge of every copy. The operator retains support records while resolving the request and any related complaint, and only for a further period justified by legal obligations or claims. Security and billing records must be limited to their operational, fraud-prevention or legal purpose. We review retained records against these purposes and remove or anonymise information no longer needed. You can ask for the reason and applicable review/deletion date for a record we retain. A current-screen image prepared for a support report is not included in Copy Report or Save Report. If you confirm a direct submission, the support service and its delivery provider may retain the submitted report while resolving your request or complaint, and longer only for a documented legal or security reason.

8. Security and backups

The app uses local files, recovery copies and optional exported backups, but no storage method is risk-free. Protect the device and connected services, restrict access, keep appropriate backups and delete copies securely when no longer needed. Direct support submission requires a configured HTTPS endpoint. Provider secrets must remain on the server and are not stored in the app. Firebase App Check uses app/device attestation with Google Play or Apple services and short-lived tokens to help reject unauthorised requests. This is security verification, not advertising tracking.

9. Sharing and international transfers

Google Firebase provides the account service and protected cloud backend. Apple and Google process store purchases under their own privacy information. Firebase Authentication processes account data in the United States. Firebase privacy information: https://firebase.google.com/support/privacy. Cloud-enabled workspaces use a Firestore job database configured in London (europe-west2), with protected backend services for synchronisation and authorised sharing. If you choose email, cloud storage, direct support submission or another destination, that provider and its storage locations may involve separate recipients or international transfers. A support endpoint may also process an internet address and minimal network and security logs for delivery, abuse prevention and rate limiting. Google describes its UK Extension to the EU-US Data Privacy Framework and contractual transfer arrangements in its published privacy and processing terms. Our hosting requires applicable provider processing terms and a valid UK transfer basis; ask support for details and a copy of the safeguards applicable to your records. A UK database region does not mean all authentication, provider support and service processing stay in the UK. Support correspondence sent to our contact address is handled in our Google email account. Check and approve the destination before sending.

10. Your data-protection rights

People may have rights including access, correction, erasure, restriction, objection and portability, depending on the law and circumstances. Send requests about your Cutting With Sam account to the contact above; we may need proportionate identity evidence. Customer-job requests should first go to the business responsible for the job, including when we host it for that business. We will assist that business with requests about hosted records. You may object to processing based on legitimate interests. We do not make solely automated decisions with legal or similarly significant effects about you. Store verification and allowance checks control app features; contact support if you think a decision is wrong.

Your right to object

You can object to processing based on legitimate interests by contacting samsamthecarpetman.est2006@gmail.com. Explain which processing concerns you. We will consider your circumstances and stop that processing unless we have a lawful reason to continue, which we will explain. This is separate from cancelling a subscription or deleting an account.

11. Complaints

Privacy questions and complaints may be sent to samsamthecarpetman.est2006@gmail.com. We will acknowledge your complaint, investigate it and explain our response and any action taken. In the UK, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. You may also have the right to complain to another competent supervisory authority.

12. Changes

This policy will be updated as the app's actual data handling changes. Material changes may require acceptance again.

13. Subscription and shared-plan records

The protected backend processes the app account ID, plan and membership status, generation usage, and store purchase identifiers, receipts or tokens needed to verify access, restoration and subscription changes. Apple or Google handles the store payment method; Cutting With Sam does not receive your full payment-card number. Company owners can see company membership and shared plan usage, not another member's personal jobs or private payment method. Necessary account data must be supplied to provide these online features; declining it prevents sign-in or verified paid access, not a charge by itself.

14. Device storage, permissions and tracking

The app uses device files for jobs and preferences, secure storage for sign-in material, and temporary files for exports you request. Firebase and store libraries also maintain information needed for sign-in, app verification and purchase handling. These are functional and security uses, not permission to track you for advertising. The app does not include an advertising SDK, Firebase Analytics, Firebase Crashlytics, behavioural analytics or cross-app advertising tracking. We do not sell customer-job information or use it to train an AI model. The device share/save picker lets you choose a destination; it does not give us access to all your other files. Optional support attachments require your review before sending. Reading this Privacy Policy is an acknowledgement, not consent to marketing or a waiver of privacy rights. If a future optional use requires consent, we will explain it separately before it starts and provide a way to withdraw that consent. Withdrawal will not affect earlier lawful processing.

15. Sources, children and unnecessary information

We receive account details from you and the sign-in provider you choose, purchase-status information from Apple or Google, and company membership information from the authorised owner and members. Hosted job information is supplied by the business and its authorised staff, not collected by us from public directories. The app is intended for adults doing fitting and measuring work, not for children. Do not record health details, identity documents, card details or other sensitive information that is unnecessary for the fitting job. Use a job reference instead of a customer name where identifying the customer is unnecessary. Contact support if information has been included by mistake.

Using this website

The site is hosted through OpenAI Sites and Cloudflare. Website delivery and security involve technical request data such as IP address and browser information. The website does not take subscription payments or upload app job files. If you email support, your email address and the contents you choose to send reach our support mailbox. Do not send passwords, verification codes or full card details.

Website questions and rights requests use the same support contact above. Our account and data deletion page works without reinstalling the app.

Our cookies and device storage notice explains functional storage and your choices. A privacy acknowledgement is not consent to advertising or optional tracking.