RowFin Privacy Policy

1. Who we are, and what this policy covers

RowFin Applications LLC ("RowFin Applications", "we", "us"), a Georgia limited liability company, makes the RowFin application for iPad (the "App") and runs the website rowfinapplications.com. This policy says what the App and the site do with data — and, mostly, what they do not do. It is part of the Terms of Service.

2. What we collect: nothing

RowFin Applications has no server for the App, no account system and no analytics. We do not collect, receive, store, sell or share any personal information, and we never receive anything you make in the App.

Your purchase is handled by Apple's App Store under Apple's terms and privacy policy. Apple's receipt is Apple's; it tells us nothing about you. We do not know who uses the App or how.

3. What the App stores on your iPad

Everything the App keeps is in its own container on your iPad, readable by the App alone:

• workspaces — a map image you imported, its calibration, and everything drawn, placed and built on it;
• preplans — levels, walls, doors, roofs, terrain, systems, contents, the pin's location, and the ID, name and address you typed;
• rigs, equipment and hazards placed from the Warehouse, assignment locations, and the names and IDs you give them;
• protocols and their runs;
• Log Book entries — typed or dictated — with their time; the book clears entries older than 72 hours;
• Library documents, images and PDFs you import, copied into the container so they open without the original, and searched on the iPad;
• snapshots: an automatic save each time the App goes to the background (the newest ten) and the saves you make;
• settings — language, units, the finger-drawing switch, the date you accepted the Terms, and the like;
• with the lock on: profiles, their codes as salted hashes, the recovery code's hash, and the Access Log (section 7).

4. Where it can go — only when you act

Nothing leaves the App on its own. It leaves in these ways, each one your choice:

• a share file (a workspace, preplan, protocols or Library file) or a backup file you send by AirDrop, the Files app, Mail or any app in the share sheet — it goes where you send it and nowhere else; it is an ordinary file, not encrypted by the App, and whoever receives it can open it in RowFin;
• a document you send from the share sheet, or a screenshot you take;
• your iPad's own backup — iCloud Backup or a backup to a computer — which includes the App's container like any other app's, under Apple's or your computer's terms, unless the App's lock is on, which leaves the App's folders out of device backups.

Whoever receives a file handles what is in it under their own policies. Preplans and Log Book entries can hold addresses, names and floor plans; deciding whom to send them to is yours and your agency's.

5. Apple services the App can use

Each of these is optional, runs only when you start it, and is Apple's, under Apple's privacy policy (apple.com/legal/privacy). The App sends Apple nothing else.

• Translation pack: names and Log Book entries you type can be drafted in the other language on the iPad itself, by Apple's translation framework. That needs Apple's Japanese ⇄ English pack, which iOS downloads from Apple when you ask under SETTINGS ▸ LANGUAGE. The words you type are translated on the device and never sent anywhere.
• Dictation: the Log Book's microphone uses Apple's on-device speech recognition only. The App refuses to listen if the chosen language has no on-device model on your iPad. No audio and no text leaves the device; the App keeps only the words you file as an entry.

6. Permissions, and taking them back

The App asks for two permissions, and only on the first tap of the Log Book's microphone: the microphone, and speech recognition. Refuse them and you can still type. Picking a photo uses Apple's photo picker, which shows the App only the photo you choose. The App never asks for your location, camera, contacts, calendar or tracking.

To withdraw a permission, open the iPad's Settings ▸ Privacy & Security (or Settings ▸ RowFin) and switch it off; the App keeps working without it.

7. The lock, the profiles and the Access Log

The App has an optional passcode lock with named profiles (Admin and User). Profiles, their six-digit codes and the recovery code are kept only on this iPad, in the device's Keychain; a code is stored as a salted hash, never as the code itself, and the Keychain item is never backed up or synced. RowFin Applications cannot see, reset or recover a code.

While the lock is on, the App keeps an Access Log on the iPad: every unlock, lock and wrong code; profile, code, re-lock and security changes; every delete, share, export, import, backup, restore, reset and protocol edit; blocked tries; and screenshots and screen recordings taken while the App is open — each with the profile signed in and the time. Codes are never written to it, nothing in the App can edit it, it keeps the newest 2,000 entries, and it is never transmitted. An Admin can read it under SETTINGS; a User should expect that.

With the lock on, the App also leaves its folders out of the iPad's device backups and gives its files iOS's "complete unless open" protection. Turning the lock off removes the profiles and puts the folders back in backups at iOS's default protection.

8. Retention and deletion

We retain nothing, so there is nothing for us to delete, correct or hand over; writing to us is still welcome. On your iPad, content stays until you remove it: a workspace under WORKSPACE ▸ TRASH, a preplan under PREPLAN ▸ TRASH, a file under LIBRARY, drawings and placed things with ERASE or RESET, snapshots under SETTINGS ▸ SAVE HISTORY. The Log Book clears entries after 72 hours; the Access Log keeps only the newest 2,000 entries.

Deleting the App removes its container and everything in it. The lock's Keychain item can outlive the App on this iPad: turn the lock off before deleting the App if you want that gone too.

9. Children

RowFin is a professional tool and is not directed at children. It collects no data from anyone of any age.

10. Your rights, wherever you are

California (CCPA/CPRA): we collect, sell and share no personal information, so there is nothing to access, correct, delete or opt out of. Europe and the United Kingdom (GDPR): we process no personal data. Japan (個人情報保護法, the APPI): RowFin Applications handles no personal information of users; your content never reaches us. Anywhere: write to us and we will answer.

11. Keeping your data safe

Because your data is on your iPad, its safety is the iPad's: the device passcode, iOS data protection and Apple's updates. The App's lock adds profiles and codes on top. Share and backup files are not encrypted by the App — keep them where only the right people can reach them. Keep a backup of anything you cannot afford to lose; we hold no copy.

12. The website

rowfinapplications.com is a set of static pages served by Cloudflare Pages. Cloudflare keeps ordinary server logs (an address, a time, a page) to run and protect the service, under Cloudflare's privacy policy; we do not use them. The site sets no cookies, runs no analytics and loads nothing from any other company. Its links to write to us open your own mail app; an email you send is kept as long as it takes to answer it and for our records of support.

13. Changes

If this policy changes, the new version is posted at rowfinapplications.com/privacy and shown in the App with a new effective date. The App will not start collecting data without this policy saying so first.

14. Contact

Questions about privacy: support@rowfinapplications.com. RowFin Applications LLC · 24 Stone Gate Ct., Pooler, Georgia 31322, USA · telephone 1-888-804-9830.