California Privacy Notice
Last updated: October 25, 2026
This notice supplements the calQledg Privacy Policy and is our Notice at Collection for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. It lists the personal information we collect, why we collect it, how long we keep it, and whether we sell or share it.
1. What we collect
- Identifiers. Name, email address, account and device identifiers.
- Customer and financial records. Expenses, income, vendors, payers, categories, business-use percentages, W-2 wages and withholding, invoices and home-office details.
- Commercial information. Your plan, purchases and billing history. Card details are held by our payment processor or app store, not by us.
- Bank account information. Account names, last digits, balances and transactions, through Plaid, if you connect a bank. Never your bank password.
- Precise geolocation. Your location while a drive is recorded, if you turn on auto mileage, and the location your camera stamps into a receipt photo, kept only on the Audit-Proof plan.
- Content you send us. Photos, PDFs, receipts, voice input converted to text, and emails you send to your calQledg address.
- Calendar information. Event titles and times, if you allow calendar access.
- Card payment details. Merchant, amount and card name of an in-store tap-to-pay purchase, only if you turn on card payments.
- Information about others. Names and contact details of customers, tenants, contractors and payees you enter. Never their tax ID numbers.
- Internet and device activity. App version, device type, time zone, error logs, and sign-in and change history; your phone’s motion readings while a drive is recorded, if you turn on auto mileage.
- Professional information. Business names, state and accounting details.
We do not collect biometric information, government ID numbers (such as a Social Security number, driver’s license or passport), or information about your health, religion, race, ethnicity, immigration status or union membership.
2. Sensitive personal information
Some of what we collect is sensitive personal information under California law: your account login, precise geolocation, bank account information you connect, and the contents of emails you send us. We use it only to provide and secure the Service you ask for, and never to infer characteristics about you.
3. Why we collect it
- To provide the Service: record, categorize and organize your entries, and produce summaries, estimates, worksheets, reports and exports.
- To read what you send us (text, photos, PDFs, voice converted to text and emails) using an AI service provider that extracts and suggests the details of your entry. It is barred from training its models on your content or using it for advertising.
- To manage your account, process payments and subscriptions, provide support and send you service messages.
- To secure the Service, keep an audit trail of changes, and prevent fraud and abuse.
- To improve the Service using combined or de-identified information only. Your financial entries are kept separate from product-usage analytics.
- To comply with the law.
4. How long we keep it
| Information | How long |
|---|---|
| Account and records | While your account is active. If your account has no activity for 24 months, we email deletion notices at 23 and 24 months and then delete it; a payment for one month of any paid plan stops the deletion. |
| Receipt files, Free plan | Through the end of the calendar month after the month you upload them. |
| Receipt files, paid plans | For as long as you have a paid plan. |
| Tax documents we generate | With your account records, until your account is deleted. |
| Drive records | With your account records. |
| Detailed drive routes | 90 days after the drive. On the Audit-Proof plan, until 7 years after that tax year’s return was due. |
| Drive motion readings | 30 days after the drive, on every plan. |
| Receipt-photo location | Kept only on the Audit-Proof plan, until 7 years after that tax year’s return was due. On every other plan it is erased before the receipt is saved. |
| Bank connection access | Until you disconnect the bank or delete your account. |
| Billing and consent records | As long as needed for tax, accounting and fraud prevention, and to prove consent you gave, as the law permits. |
| Privacy requests | At least 24 months, as California law requires. |
When you delete your account we delete or de-identify your personal information, except what we must keep for legal, tax, accounting, security or fraud-prevention reasons.
5. Sale and sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not sold or shared the personal information of any California resident in the past 12 months. We honor Global Privacy Control; because we do not sell or share, it requires no further action.
6. Your California privacy rights
Subject to verification, California residents may:
- Ask to know what personal information we have collected, used and disclosed about them.
- Ask us to delete their personal information.
- Ask us to correct inaccurate personal information.
- Opt out of the sale or sharing of their personal information (we do neither).
- Limit the use of sensitive personal information (we use it only as Section 2 describes).
- Be free from discrimination for using these rights.
You can do most of this yourself. Download your books at any time, edit or delete your entries (except in a business or project that is read-only), and delete your whole account in the app, under Settings.
Otherwise, email support@calqledg.com from the email address on your account. We confirm receipt within 10 business days and respond within 45 days. We may need to verify your identity first. You may use an authorized agent, who must provide your signed permission.
7. Contact
Sesame Byte LLC
1001 Bishop St Ste 2685A, Honolulu HI 96813
support@calqledg.com