Privacy Policy

Last updated May 2026

Pencilled is a diary app for freelance crew. This policy explains what personal data we collect, how we use it, and the rights you have under the UK GDPR and EU GDPR.

The data controller is the operator of Pencilled. To contact us about this policy or to exercise any of your rights, email support@penciledapp.com.

What we collect

- Account details: name, email and password. Passwords are hashed by our auth provider, Supabase.

- Diary content you create: bookings, clients, locations, day rates, travel, invoices, notes and attachments.

- Optional profile data: home address, used for travel estimates, mileage rate and VAT settings.

- Calendar data you choose to sync: when you connect a device or Google calendar we read and write only the events you authorise.

- Subscription status: RevenueCat stores your purchase and renewal status so we can unlock Pencilled Pro features.

- Diagnostic logs: anonymous crash and error logs to help us fix bugs. These do not contain your bookings or contacts.

How we use your data

- To provide the app and sync your diary across your devices.

- To estimate travel time and cost between locations.

- To process and verify subscription purchases.

- To respond to your support requests.

- To keep the service secure and prevent abuse.

Our legal bases are: performance of the contract you accept by using Pencilled, your consent for optional features like calendar import, and our legitimate interests in keeping the app secure and reliable.

Sub-processors we use

- Supabase — authentication, database and file storage.

- RevenueCat — subscription management.

- Apple App Store / Google Play — purchases and receipts.

- Geocoding and maps — address autocomplete uses third-party map services only when you type into an address field.

We do not sell your data. We do not run advertising trackers inside Pencilled.

Where your data is stored

Cloud data is stored on Supabase servers in the EU/UK region. Local data, such as offline diary and attachments, stays on your device until you choose to sync it.

How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we erase your cloud data within 30 days, except where we must keep limited records to comply with the law, for example tax records for completed purchases.

Your rights

- Access — get a copy of the data we hold about you.

- Rectification — correct anything that’s wrong.

- Erasure — ask us to delete your account and cloud data.

- Portability — receive your data in a portable format.

- Object or restrict — tell us to stop certain processing.

- Withdraw consent — turn off calendar sync or imported calendars from Settings at any time.

To exercise any of these rights, email support@penciledapp.com. You can also delete your account from Settings.

Pencilled is intended for working professionals and is not for use by anyone under 16. We do not knowingly collect data from children.

Changes to this policy

If we make material changes we’ll let you know in-app before they take effect. The latest version is always available here in Settings.

Questions? Email support@penciledapp.com.

```