Press
Privacy policy
Version 3 · 1 November 2026
A draft, for testing.
Your records stay on your phone unless you send them, or you choose to keep them on usepress.app too, encrypted so that we cannot read them. We receive only what is listed in the first table below, and most of it only when you switch it on. Nuthatch Studio Limited, a company registered in Ireland (number 829433), registered office Ballyloughane, Carrigkerry, Co. Limerick, Ireland, is responsible for it (the "controller"). Contact: [email protected].
What we receive, and why
| What | When | What it holds | Why we may | Kept for |
|---|---|---|---|---|
| Your account | When you sign in, and when you ask to join | Your email address. If you ask to join: your name, what you do, your country and, if you say, how you heard about Press. For each phone you sign in on: the phone's model, operating system and version, and Press's version, when it signed in and when it last checked in. If you sign in with Google: Press asks Google only to confirm who you are (the openid, email and profile permissions), and Google tells usepress.app your email address and your first name. Your first name is put in the name box if you ask to join, and kept only if you send it with your request. Your email address is kept as above; nothing else Google sends is kept, including the sign-in token it hands over. | To let in only the people invited to test Press | Until you delete your account, or ask us to; a website Pro subscription with paid time left keeps the account until that time ends |
| Your plan | From when you are let in | Whether you are on Free or Pro, until when, whether it is the 30-day trial, and when you last asked for Pro. It never holds card or payment details. | To give you the features of your plan, and to see who has asked for Pro | With your sign-in, for as long as your account is kept |
| Your Stripe connection | Only if you connect Stripe, in Payment methods | Which Stripe account is connected, its name, whether it is in test mode and when it was connected, and the keys Stripe gives Press to read your payments for you, kept encrypted. For each card you take in person, the amount, the card's brand and last four digits and which call it was for, kept 90 days. Never your Stripe password or your customers' card numbers. | To show your Stripe payments in Press, at your request | Until you disconnect, when the keys are wiped |
| Your online quotes | Only if you send a quote as a link (Press Pro) | For each quote link: the quote as your phone sent it (your business's name, the customer's first name and place, the services and prices), and the customer's answer: what they chose, a comment or reason they type, and whether they asked for the cleans to start inside the 14 days. If they save a card: Stripe's ids for the customer and the card, the card's brand and last four digits, when it was saved or stopped, and an email address for Stripe's receipts if they give one. Stripe keeps the card itself on your own Stripe account; you and Press never see its number. | To show the customer your quote, pass their answer and card to your phone, and take the payments you agreed with them | Until 30 days after your phone collected the last answer, or after a link nobody answered ran out, and never more than 90 days after anything last changed on it, unless a card saved on it is still in use |
| Your records, if you keep them on usepress.app | Only if you switch it on, to use Press on a computer too | Your records, including your customers' details, encrypted on your phone before they leave it, so we cannot read them. Receipt photos stay on your phone. We see only which account they belong to, when a change arrives and how big it is. For each computer you add: its name, when it was added and last seen, and half of its lock, never your PIN. | To keep your phone and computer in step, at your request | Until you switch it off or close your account, then deleted within 30 days |
| A file you send from another app | Only if you choose From another app and tap Send to Press | The file you chose, the app's name as you typed it, the file's name and size, and your email. The file holds what that app exported, usually your customers' names, addresses and jobs. We use it to turn it into a file Press can read and to build a reader for that app; nobody else sees it. | To bring your records into Press, at your request | Until you have brought the converted file into Press on your phone, or 90 days after you sent it, whichever comes first. Delete it now in Data and backups deletes it at once |
| Your cloud backup | Only if you switch on cloud backup (Press Pro) | A copy of your records each day, with your receipt photos, PDFs, certificates, visit photos and logo, sealed on your phone before it leaves, so we cannot read it. The last 30 copies are kept, and one a month for a year. A lock made from your PIN, so your email code and PIN can open it on a new phone, never the PIN itself; five wrong tries lock it for a day. We see only which account it belongs to, when each copy came and how big it is. | To give your records back to you on a new phone, at your request | Until you switch it off, or 90 days after Press Pro ends, then deleted within 30 days |
| The weather | Each time Press asks for a forecast (Pro) | The rough location of the work, and this phone's sign-in, so that only Press can ask | To show you the forecast | Not kept. Passed on to Met Éireann for a place in Ireland, the Met Office for a place in the UK, Visual Crossing anywhere else, or Open-Meteo when those cannot answer, and forgotten; only a count of how many, each day and month. They see the request come from usepress.app, never from your phone |
| Suppliers' logos | With Pro, once a day for the list (with Press closed too), and once for each supplier's logo | This phone's sign-in, so that only Press can ask. Once for each supplier in your books that has no logo: its name as you typed it, the VAT number read off its receipt if there is one, and your business's country, with nothing else from your books | To show your suppliers' logos, and to know which logos to make next; a VAT number is checked on the EU's VIES service to see whether the supplier is a VAT-registered business | The sign-in is not kept. A name is kept with a count of how many asked for it, never who, until a logo is made or it is taken off the list, as a business that is not VAT-registered is |
| AI Assist on a receipt | With Max, when you attach a receipt photo to an expense and AI Assist is on (Settings › Receipt photos), or when you tap AI Assist on the expense | This phone's sign-in, the receipt photo made smaller, your books' currency, your expense categories and the VAT rates you use. usepress.app passes the photo to two AI services through Cloudflare's AI Gateway: Anthropic (Claude) reads the total, VAT and date off it and, given your categories and VAT rates, suggests a category and VAT rate for each line, and TypeSafe (Jev) says how sure it is of each figure | To show you what the photo says beside what your phone read, and to fill in each line, at your request | Not kept by usepress.app, only a count of checks. What Anthropic and TypeSafe keep is their own terms |
| Suggesting categories for a statement | With Max, when you bring in a bank statement, if AI Assist is on (the import’s Sorting card) | This phone's sign-in, and for the payments out Press could not place: each payee's name as the statement words it (without card or account numbers, and a transfer to a person as “a person”), how many lines and their total, your trade, your categories, and up to 40 shops you have filed before with their category. usepress.app passes them to Anthropic (Claude) through Cloudflare's AI Gateway. Money in is never sent | To suggest a category, or that a payment looks personal, at your request | Not kept by usepress.app: it keeps only a count of your imports this month (for the allowance of 30) and a count of all answered imports (for its running costs), never what was sent. The gateway is asked to keep no log; what Anthropic keeps is its own terms |
| Checking the photos on a website enquiry | With Max, when a customer sends photos with your website form, if Check the photos with AI is on (Settings › Marketing › Website form) | The customer's photos of their house and what they picked (size, floors and type of house), not the name, number or address she typed (a photo can still show something that identifies the house, such as a house number or a car). usepress.app passes them to Anthropic (Claude) through Cloudflare's AI Gateway, which counts the windows and says the size the house looks | So you can check the size before you quote, at your request | The count of windows is kept with the enquiry. The enquiry, the count and the photos are removed 30 days after your phone collects it, and in any case 90 days after it was sent. The gateway is asked to keep no log; what Anthropic keeps is its own terms |
| Invoices by email | Only if you make a Press address (Pro), each time a mail arrives at it | The mail sent to your address: who sent it, its subject and its PDF or picture attachments, locked on arrival so that only your phone can open them. A mail with nothing attached is kept the same way when it looks like a receipt (it has an amount, or a word like receipt, invoice or order), with any pictures it links to taken out; any other is thrown away and only counted. Your blocked senders. | To put the invoices you send there into To check, at your request | Until your phone collects it, then deleted; anything not collected is deleted after 30 days. Your address and blocked senders until you switch it off |
| Problem reports | On unless you switch it off (setup, or Settings › Help & diagnostics) | The error, where in Press it happened, Press's version, your phone model, its operating system and version, a random number for this phone (crash reports have one of their own, never the one your usage reports carry). If a receipt would not read, the text read off it, which can include a supplier and a total. A receipt photo only if you say yes. After a Squeegee backup is read or brought in: the file's size and how many records it held, the first and last year its records fall in, how long each step took, how it ended, and how long Press was behind other apps meanwhile, and nothing else from the backup itself. With a report you write: how long Press's pages took to come up on your phone over the last seven days, the size of Press's database on your phone, and roughly how many records, invoices, customers, jobs and calls it holds, rounded. | Our legitimate interest in fixing faults | 12 months |
| Reports and ideas you send | When you tap Send | Your words, the page, a screenshot if you add one, and the details in the row above if you leave them on | Your consent, each time | 24 months |
| Usage reports | Only if you switch on Help improve Press | Weekly counts of the pages and features you use, how many map pictures were loaded for each map style, how far you get through a few set tasks like setting up or sending an invoice (counted, never described), days Press was opened, Press's version, phone model, its operating system and version, country, which beta features are on, a band for how many customers you have, how long pages took to come up (in bands such as under 1 second) and a band for the size of Press's database, and a random number that links your weeks. If you brought your books in from another app: which app, the year its records start and the week you brought them in, kept with that random number and dropped with it. Never names, amounts, notes, what you type, where you are or your photos. The same switch also sends the pages you open to Google Analytics for Firebase: see Google's row under Services your phone talks to directly. | Your consent | 24 months |
| Daily usage reports | Only for testers, and while you are on a gifted plan you accepted | The usage report above, sent every day with the week so far instead of once a week, and, while Settings › Testing › Data used is recording, with how much Press sent and received over the internet for each service it uses (sync, map pictures, the forecast, addresses, road maps, Press's own server and the rest): the number of requests, how many failed, and the kilobytes each way. Never what was in a request, an address or a host. On a gifted plan it is part of the gift, so Help improve Press stays on while the gift runs; Move to a subscription ends the gift, and with it the daily report a gift sends; the switch comes back with your reports as they were, for you to keep or turn off. | For testers, your consent through Help improve Press. On a gifted plan, the terms of the gift | 24 months |
| Receipts with your reports | Only if you switch on Send my receipts on Help improve Press, or agree to them as part of a gifted plan | Each receipt you save on Money out, the day after on a gifted plan or a tester's phone, otherwise with the weekly usage report: its photo, what Press read off it (the total, VAT, date, supplier, VAT number and the lines of text), what AI Assist said and how sure it was, and what you saved (the amount, VAT, date, supplier, category and each line). It goes through usepress.app to Press's private GitHub repository, so the reading can be made better; usepress.app keeps nothing of it. Switching it off throws away any receipts still waiting to go and removes the copies already sent, as deleting your account does. A receipt you delete before it goes is sent without its photo. | Your consent; on a gifted plan, the gift's terms | usepress.app keeps nothing. Each copy in Press's repository is deleted 90 days after it arrives. When you switch Send my receipts off or delete your account, the copies sent under your account go at the next nightly clean-up after usepress.app hears of it (a phone with no connection asks again when it has one). The clean-up takes them out of the repository's history too; GitHub, which holds the repository, clears removed copies from its own systems some time after that |
| How you started | Once, when setup is saved, on every phone | Whether you signed in or carried on with Free, where the list had you if you signed in, whether Free was offered without an account, Press's version, your phone's operating system and your business's country, with a random number made for this one report. Never your email, your name or anything you typed. | To know how many people try Pro | Kept as it is, since nothing in it names you |
| The self test's Send everything | Only when you tap it, each part asked | A report, a copy of your records with every name, address, phone number, bank detail and tax number replaced, and pictures of Press's screens | Your consent, each time | 12 months |
We do not sell any of it, show you adverts, or share it with anyone for their own use.
Once a day Press asks usepress.app which of its features are switched on, so one can be paused without an update. It sends nothing about you with the request: no number and nothing from your records. Every few hours it also asks which versions of Press must be updated, and sends nothing about you with that either.
Where it is kept
- Crash reports Press sends by itself go to usepress.app, on Cloudflare, stored in the European Union, and are deleted after 12 months.
- Who may use Press is kept by usepress.app, on Cloudflare. Your email and what you wrote when you asked to join are in the website's waiting list, which is not yet stored in the European Union. Each phone you sign in on, and your plan (Free or Pro), are in usepress.app's own database, which is stored in the European Union.
- The text of a receipt that would not read, a receipt photo you agree to send, the receipts you send with the daily report, the report after a Squeegee backup is read or brought in, and the self test's Send everything go to a private GitHub repository (GitHub, Inc., USA). The report after a backup is passed there by usepress.app, with this phone's sign-in so that only Press can send one, and usepress.app keeps nothing of it.
- Reports and ideas you send, and usage reports, go to usepress.app, on Cloudflare, stored in the European Union. Until usepress.app is running they wait on your phone.
- If you connect Stripe, the connection is kept by usepress.app, on Cloudflare, in usepress.app's own database, which is stored in the European Union.
- On Press Pro and Press Max, an address or Eircode you look up is passed by usepress.app to Google (Google Maps Platform), which sends back where it is. Your business's country goes with it, so Google looks there first. Nothing else about you or your customer goes with it, and usepress.app keeps only a count of how many were asked.
- If you send a file from another app, it is kept on Cloudflare, stored in the European Union, until you have brought it into Press or 90 days have passed.
- If you switch on cloud backup, its copies are kept on Cloudflare, stored in the European Union, sealed on your phone first.
- If you keep your records on usepress.app, they are kept on Cloudflare, stored in the European Union, encrypted. The key stays on your phone and on the computers you give it to, and never reaches us. There is no recovery code. If you lose your phone, a computer you gave the key to still has your records. If you lose them all, only your backups are left, and nobody, us included, can read them or give them back.
- If we pass a report or idea on to be fixed, its words and the details listed above (not its screenshot) are copied into a private GitHub repository (GitHub, Inc., USA), and removed from there when the report is deleted.
Services your phone talks to directly
These services receive what the feature needs to work, and your phone's internet address. We receive none of it.
| Service | Used for | What it is sent |
|---|---|---|
| OpenStreetMap, Esri (ArcGIS) and OpenTopoMap | Map pictures | Which piece of map is being shown |
| OpenStreetMap Nominatim | Finding an address | The address you typed |
| European Central Bank | Exchange rates for foreign receipts | Nothing about you |
| GitHub | Downloading a road map for your area | Which area's map |
| Google Maps | Directions, when you tap Directions | The destination, handed to the Google Maps app |
| Your own email account, and WappSync if you use it | Messages and invoices you send to customers | The message you send |
| Meta (WhatsApp Business), only if you connect your own account | WhatsApp messages and invoices you send to customers | The message you send, any file with it, and the customer's mobile number, sent under your own Meta account |
| Meta (WhatsApp Business), only if you connect your number through Press | WhatsApp messages and invoices you send to customers, from your own number | The message you send, any file with it, and the customer's mobile number, passed through Press's server to Meta. Press's server keeps Meta's id for each message and whether it was delivered, for 30 days, and does not keep the words or replies |
| Google (Google Analytics for Firebase), only if you switch on Share reports to improve Press | Counting how Press is used, beside our own usage reports | Which pages you open and when Press is opened, Press's version, your phone's model and system, a number Google makes for this phone, and your rough location from your internet address. Google keeps it in the United States; we see it only as counts in Google's reports. Switching it off stops it and asks Google to forget the number |
| Google (Firebase Crashlytics), only if you switch on Share reports to improve Press | Finding crashes our own problem reports cannot see | Where Press stopped when it crashed, Press's version, your phone's model and system, and whether Press was open. Never names, amounts or anything you type. Google keeps it in the United States. A crash while the switch is off is thrown away, never sent later |
| Google (Firebase Performance Monitoring), only if you switch on Share reports to improve Press | Finding where Press is slow on real phones | How long Press takes to open, to open your records and to bring each page up, with the page's name; Press's version, your phone's model and system, its kind of connection, a number Firebase makes for this phone, and your country from your internet address. Never names, amounts, anything you type, or the addresses Press talks to. Google keeps it in the United States |
| Google (Play Integrity and Firebase App Check) | Proving to our server that a weather forecast is asked for by a real copy of Press, so nobody else can use the service we pay for | What Google Play needs to check that this is Press, unchanged, on a genuine Android phone, such as Press's name and version. Firebase then gives Press a token that names only Press, which our server checks and does not keep. Nothing about you or your records |
| Google (Firebase Cloud Messaging), for the notifications you leave on in Settings › Notifications | Telling you a customer paid, that an enquiry came in on your website form, that something changed on your computer, or news from Press, while Press is shut | An address Google makes for your phone, which your phone gives our server. Our server then hands Google the words of each notification: for a payment, the amount and the invoice number, never who paid; for a website enquiry, only that one came in, never who sent it or what they wrote. Switching every one off, or signing out, takes your phone off our list |
| Stripe | Taking a card in person, only if you connect Stripe and use Take a card | The card your customer taps or inserts, straight to Stripe and never through us, and the phone's rough location while it is taken, which Stripe needs against fraud |
| Stripe | A card your customer saves on a quote link, only if you connect Stripe and offer it | The card, entered on Stripe's own page and never through us; the amount of each payment, what it is for, and the email address for Stripe's receipt if the customer gave one |
Your website, and Google Business Profile
If you publish a website with Press (a Pro feature), what you put on it is sent to usepress.app and shown to anyone who opens its address: your business name, logo, colours, words, services, the towns and area you cover, your phone number, email and WhatsApp, and the photos you add. It is kept on Cloudflare, stored in the European Union, until you take the website down or your account is removed. Nothing from your records goes on it unless you put it there.
If you search for a stock photo, the words you search for go through usepress.app to Unsplash, and Unsplash is told which photo you chose. The map of your area is drawn by usepress.app from OpenStreetMap data, so nobody who opens your website is sent to a map company.
If you connect Google Business Profile, you sign in with Google and allow Press to manage your Business Profile (the business.manage permission). usepress.app then reads your business account, your first Business Profile location, its rating and its reviews (the reviewer's name and picture, stars, words and date), so you can choose reviews to show on your website and see them in Press. If you write a reply to a review in Press, usepress.app posts it to Google for you. Nothing else is read or changed.
Google's permission is kept by usepress.app as a token sealed with a key only usepress.app holds, in its own database, stored in the European Union. Your reviews are kept there too, so your website can show the ones you picked. Disconnecting in Press withdraws the permission at Google and deletes the token, and your reviews come off your website. You can also withdraw it at myaccount.google.com/permissions.
We use what we receive from Google only to show your reviews on your own website and in Press, and to post the replies you write. We do not sell it, use it for adverts, or share it with anyone else, and nobody at Press reads it except to fix a fault you report. Press's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
usepress.app counts the visits to your website for you, without cookies: for each day, how many looks each page had, how many people looked, where they came from (Google, Facebook, your QR code, a typed address or another site) and how many tapped Call, WhatsApp or sent an enquiry. To count a person once a day it keeps a scrambled code made from their connection and browser with a random key for that day; the key and the codes are deleted the next night (our database host's own restore copies can keep them for up to 30 days more), and no visitor's address or device is ever kept. The day's totals are kept for about two years, or until your account is removed.
If you add your own Google Analytics ID, your website asks each visitor first, and only if they say yes does it load Google Analytics, which then sets Google's cookies and sends their visit to your own Google account. That account and what Google does with it are yours and Google's, not ours.
Google Calendar
If you connect Google Calendar (a Pro feature), you sign in with Google and allow Press to see the list of your calendars and the events on them (the calendar.calendarlist.readonly and calendar.events.readonly permissions). Press never changes, adds or deletes anything in your calendar.
When Press asks, usepress.app reads the calendars you switched on for the next eight weeks and hands your phone each busy event's time, title and place, so your Diary and the planner can work around your appointments and days off. Events marked Free and invitations you said no to are left out. usepress.app keeps none of your events: they are kept only on your phone, as appointments and days off in your records, and go wherever your records go (your backups, and your computer if you use Press on one).
Google's permission is kept by usepress.app as a token sealed with a key only usepress.app holds, with the address of your Google account, stored in the European Union. Disconnecting in Press withdraws the permission at Google and deletes the token, and the appointments Press brought in come off your Diary. You can also withdraw it at myaccount.google.com/permissions.
We use what we receive from Google Calendar only to show your appointments and days off in Press and to plan your work around them. We do not sell it, use it for adverts, or share it with anyone else, and nobody at Press reads it except to fix a fault you report. Press's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Calendar links
If you add a calendar by its private address (an iCal or .ics link from Outlook, iCloud, Google or another service), your phone reads that address itself, straight from the service that holds the calendar, when Press opens and every fifteen minutes while it is open. Nothing about it goes through usepress.app.
The address is kept only on your phone. It is not in your backups and does not go to your computer, since anyone with it can read that calendar. Each busy event's time, title and place for the next eight weeks become appointments and days off in your records, the same as Google Calendar's. Removing the link forgets the address, and the appointments it brought in come off your Diary.
Phone calendars
If you tap Use phone calendars (a Pro feature), Press asks your phone for permission to read its calendars: the ones it already syncs from iCloud, Outlook, Google or any other account. Press never adds, changes or deletes anything in them, and reads only the calendars you switch on, on your phone, when Press opens and every fifteen minutes while it is open. The reading happens on your phone; Press does not send your calendars to usepress.app to be read.
The list of your phone's calendars, the account each comes from and which ones you switched on are kept only on your phone: they are not in your backups and do not go to your computer. What Press makes from them is different. Each busy event's time, title and place for the next eight weeks becomes an appointment in your records, and a whole day you choose to keep clear becomes a day off. Those are ordinary records, so they go wherever your records go: your backups (including a cloud backup, if you switch that on) and your computer, if you use Press on one.
Stop using phone calendars takes the appointments they brought in off your Diary; days you kept clear stay until you open them. You can withdraw the permission at any time in your phone's settings.
Receipts and bank notifications are read on your phone. A receipt photo leaves it for AI Assist on a receipt (Max), when it is on or you tap it. It also leaves it sealed in a cloud backup, if you switch that on, and in a problem report, if you say yes, as the table above says. Bank notifications are never sent anywhere.
What Data use counts
While Record data use is on (Settings › Testing), Press counts on your phone each request it makes over the internet: when it was made, which service it went to, how much went each way, and whether it was on mobile or Wi-Fi. It never keeps what was in a request or its answer. Mail, maps drawn by the phone itself, and anything sent while Press is closed are not counted.
The count stays on your phone for 60 days and is not in your backups. It leaves your phone only as totals by day and by service in the self test's report, when you send one.
Your van's Bluetooth
If you switch on Van Bluetooth and allow location all the time, Press takes your phone's location each time the van you picked connects or turns off, even when Press is closed. It does this to know where the van stopped, so it can start and finish your day, time your calls and add your drives to Mileage.
Those places stay on your phone for 90 days. They are not in your backups, not synced and never sent to us or anyone else, and never used for ads. What Press works out from them (the times on your calls and your day, and the trips on Mileage) is kept with your records. Switching Van Bluetooth off, or taking location away in Android, stops it.
Your customers' details
The names, addresses and numbers of your customers are kept on your phone, and you are responsible for them. We never receive them, except where you add them to a screenshot or a report yourself. Look at a screenshot before you send it. If you keep your records on usepress.app, they go there encrypted, and we still cannot read them.
Your rights
You can ask to see, correct or delete what we hold about you, object to how we use it, or take back your consent at any time. Switching a report off in Press stops it. Write to [email protected], and give the random number from Settings › Help & diagnostics so we can find your reports. If you are unhappy with our answer, you can complain to the Data Protection Commission (dataprotection.ie).
Children
Press is for people aged 18 and over.
Changes
If this policy changes in a way that matters, Press will tell you in the app before the change takes effect.