Tuvo Pay Privacy Policy

Effective date: August 31, 2026

Tuvo Pay is built to keep business records under the merchant’s control. The app works without a Tuvo Pay user account or a Tuvo Pay-hosted business database. This Privacy Policy explains how the Tuvo Pay mobile application, website, and support channels handle information.

1. The App is local-first

Tuvo Pay does not require you to create a Tuvo Pay account. We do not operate a Tuvo Pay server that receives, stores, or maintains your App records. The App stores and processes its operational records locally on the device on which it is used.

Without an export, a receipt you choose to send, a Google Backup connection, or another sharing action you initiate, App records do not leave your device through Tuvo Pay. Tuvo Pay does not use App records for advertising, profiling, or sale to third parties.

Local storage is still storage. The information described below remains on your device until you edit or delete it, delete all local Tuvo Pay data through the App, or remove the App, subject to your device’s operating-system behavior and any separate backup you have chosen to create.

2. Information handled by the App

The App handles the following information only to provide its on-device point-of-sale, inventory, reporting, receipt, backup, and subscription features.

Business and operational records. You may enter a business name, business type, business email address or telephone number, tax and receipt settings, payment-method labels, payment-link configuration, inventory details, product photos, SKUs and barcodes, pricing and cost information, sales and return records, cart lines, expenses, events, and reminder preferences. This information is stored in the App’s local business file on your device.

Camera and photo access. If you choose to scan an item barcode or QR code, the App uses the camera for that on-device function. If you choose to add a business logo or product image, the App receives the image you select or capture and stores it locally with your business records. The App does not send camera input or selected images to Tuvo Pay.

Receipt recipient information. If you elect to email or text a receipt, you enter the recipient’s email address or phone number at that time. The App holds that value only in the receipt-delivery screen and passes it to the Apple Mail or Messages composer on your device. Tuvo Pay does not save receipt recipients in transaction records or maintain a customer-contact database.

Subscription status. The App uses Apple StoreKit to determine whether an App Store subscription is active. Apple handles purchase billing. The App keeps a small local cache of verified entitlement status and expiration information so it can manage App access; Tuvo Pay does not receive your Apple Account credentials or payment-card information.

App settings. The App stores limited local preferences, such as onboarding progress, Google Backup status, backup timing, and notification preferences. Optional reminder details are scheduled through Apple’s local notification framework on your device.

3. Optional Google Backup

Google Backup is optional. You may use the App fully without connecting Google Drive.

If you choose to connect Google Drive, the App asks Google for the narrow drive.file permission. That permission allows the App to create, update, list, and restore only Tuvo Pay backup files that the App creates or that you select for use with it; it does not give the App access to unrelated files in your Google Drive.

The App stores Google access and refresh tokens in the Apple Keychain on the device. It sends those tokens directly to Google’s OAuth and Drive services, not to Tuvo Pay. When Automatic Backup is enabled, the App uploads a replaceable TuvoPay_AutoBackup.json snapshot to a visible TuvoPay Backups folder in your Google Drive. The snapshot can include your business and operational records, including inventory and product photos, transactions, expenses, events, payment-method configuration, and business settings. Your optional business logo is deliberately excluded from the automatic Google backup.

Automatic Backup is upload-only. The App never automatically downloads or applies a cloud copy. Restoring from Google Drive requires an explicit action by you. Disconnecting Google Backup removes the Google authorization tokens from that device, but it does not delete any existing file in your Google Drive. You may delete backup files directly in Google Drive.

Google’s handling of information is governed by the Google Privacy Policy. Tuvo Pay does not receive or keep a copy of Google Drive backup content on a Tuvo Pay server.

4. External payments, receipts, and sharing

Tuvo Pay is a recordkeeping and payment-request tool; it is not a bank, money transmitter, payment processor, wallet, or merchant acquirer. The App does not collect card numbers, CVV values, bank credentials, payment-provider passwords, payment-provider access tokens, or customer payment-account details. It does not hold, transmit, settle, or automatically confirm funds.

The App can create a QR code or link from the payment information configured by the merchant—for example, a Venmo username, Cash App cashtag, PayPal.Me handle, Square payment link, Zelle QR content, or a custom payment URL. This occurs locally. When a merchant or customer opens or scans a link, the selected provider receives information under its own terms and privacy policy. Depending on the link, that may include a merchant identifier, purchase amount, currency, and optional payment note. Tuvo Pay does not receive that provider’s customer or payment data.

The App can create receipts, reports, label PDFs, and exports on the device. When you choose email, text, print, Files, or the system share sheet, you direct your device to send the selected content to the destination you choose. Apple and the selected recipient or service handle that transmission under their own policies. You should review the content and destination before sharing it.

5. Information collected through the Website and support channels

The Website is separate from the App’s local business file. Its public pages currently use the following services.

Website analytics. The Website uses Google Analytics through Google Site Kit to understand aggregate Website use and performance. Google Analytics may collect a cookie-based pseudonymous identifier, IP-address-derived approximate location, browser and device information, language, pages viewed, traffic source, and interactions with Website pages. We use this information to measure and improve the Website, not to identify App users or build advertising profiles. The App itself does not include Google Analytics or another analytics SDK. You can manage or delete cookies in your browser settings and may use Google’s Analytics opt-out browser add-on.

Contact form and support. If you use the Website’s contact form or email us, we collect the name, email address, message, and other information you choose to provide. We use this information to respond to you, provide support, and maintain reasonable business records. Website forms are processed through our Website hosting and form-service providers. Please do not send payment credentials, government identification numbers, or other sensitive information through the contact form or ordinary email.

Newsletter. If you subscribe to the Website newsletter, we collect your email address and subscription preference. We use it to send the communications you request. You can unsubscribe using the link in the email or by contacting us. Our email-subscription provider processes subscription information on our behalf.

Hosting and security. Like most websites, our hosting provider may receive technical request information, including IP address, browser information, requested pages, dates and times, and security or error logs. We use this information to operate and protect the Website.

Google Analytics, Website hosting and form providers, and the email-subscription provider may process information in countries other than yours. Their processing is governed by their own applicable terms and privacy policies. We require service providers we engage for our own operations to use information only to provide the requested service and to protect it appropriately.

6. What Tuvo Pay does not collect or do

Tuvo Pay does not create a hosted App user profile, run a Tuvo Pay cloud database for App records, collect App usage analytics, use advertising identifiers in the App, or track App users across apps or websites. We do not sell App records or use them for advertising or cross-context behavioral advertising.

Tuvo Pay does not collect precise location, contacts, microphone audio, health data, biometric identifiers, or payment credentials through the App. We do not knowingly collect personal information from children under 13, and the App is not directed to children.

7. Retention and deletion

App data. You control local App records. You can edit or delete records within the App where that function is available, and you can use the App’s Delete Local Data control to remove all local Tuvo Pay business data from that device. Deleting an inventory item may not remove historical transaction lines that preserve the accuracy of an existing local record. A subscription ending does not delete local App data.

Google Backup. Google Drive backup files remain in your Google account until you delete them in Google Drive. Disconnecting Google Backup or deleting local App data does not delete a Google Drive backup.

Temporary files. Receipts, reports, and label PDFs are generated in a temporary device location for sharing or printing and may be removed by the App or operating system. They can be regenerated from records that remain in the App.

Website and support information. We keep support and contact information only for as long as reasonably necessary to respond, administer the relationship, protect the Website, meet legal obligations, or resolve disputes. Newsletter information is retained until you unsubscribe or we remove it. Analytics and hosting data are retained according to the applicable provider configuration and policy.

8. Your choices and privacy rights

You can use the App without Google Backup, camera access, photo access, receipt delivery, or notifications. If you grant a device permission, you can change it in your iPhone or iPad settings. You can disconnect Google Backup in the App and revoke its access in your Google Account.

Because Tuvo Pay does not maintain a hosted App account or a Tuvo Pay database of App records, the most direct way to access, correct, export, or delete App information is through the App and your chosen Google Drive backup. We cannot retrieve a local record from your device or delete a file in your Google Drive account for you.

Depending on where you live and on applicable law, you may have rights to request access to, correction of, deletion of, or information about the personal information we hold through the Website or support channels. To make a request, email TuvoPay@gmail.com with the subject line “Privacy Request.” We may ask for information reasonably necessary to verify your request. We will not discriminate against you for exercising rights provided by law.

If you are a California resident and the California Consumer Privacy Act applies to Tuvo Pay, you may have additional rights to know, correct, delete, limit certain sensitive-information uses, opt out of sale or sharing, and receive equal service and price. This statement does not limit any rights available to you under applicable law.

9. Security

The App uses local device storage, Apple Keychain storage for Google authorization tokens, and encrypted network connections when communicating directly with Google or Apple services. We use reasonable administrative and technical measures for Website and support information. No system, device, or transmission is completely secure. You are responsible for protecting your device, access code, and Google Account, and for reviewing recipients before sharing an export or receipt.

10. Changes to this Policy

We may update this Policy when the App, Website, or our practices change. We will post the updated version with a new effective date. Material changes to how we handle personal information will be communicated as required by law.

11. Contact us

Questions about this Policy or a privacy request may be sent to:

Email: TuvoPay@gmail.com