Privacy Policy

This Privacy Policy explains how Sesame Byte LLC (“calQledg,” “we,” “us”) collects, uses, discloses and protects personal information when you use the calQledg websites and apps (the “Service”), and the choices and rights you have. The Service is offered only in the United States. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

1. Information we collect

We collect the categories below. We collect only what we need to provide the Service you ask for.

2. How we use information

• To provide, maintain and support the Service, including categorizing entries and producing summaries, estimates, worksheets and exports.
• To process payments and subscriptions and to manage your account.
• To secure the Service, keep an audit trail of changes, and detect and prevent fraud and abuse, including repeat free trials and misuse of promotions, using account, device and payment details.
• To send you service messages, such as receipts, renewal reminders and deletion notices.
• If you reserve a Founders spot before launch, to hold your reservation and to email you when calQledg opens. We do not use that address for other marketing unless you agree.
• To improve the Service using aggregated or de-identified information. Your financial entries are kept separate from product-usage analytics.
• To comply with law and enforce our Terms of Service.

3. Automated and AI processing

When you speak an entry, photograph or upload a receipt, or forward an email to us, the content is processed by artificial-intelligence services that act as our service providers, solely to extract and suggest the details of your entry. Those providers are contractually prohibited from using your content to train their models or for advertising. We do not use automated processing to make decisions that produce legal or similarly significant effects about you.

4. How we disclose information

We disclose personal information only:

• To service providers that process it on our behalf under written contracts restricting its use, for cloud hosting and storage, databases and sign-in, payment processing, email delivery, AI processing, bot protection, and customer support.
• To people you choose, such as team members and accountants you invite, and customers to whom you send invoices.
• To services you connect, such as Plaid for bank connections and Stripe for invoice payments, under their own terms and privacy policies.
• For legal reasons, to comply with law or valid legal process, or to protect the rights, property or safety of users, the public or calQledg.
• In a business transfer, such as a merger, acquisition or sale of assets, subject to this Policy.

In the past 12 months we have disclosed each category in Section 1 to service providers for the business purposes above. We have not sold or shared personal information, including of consumers under 16. We do not use third-party advertising trackers and do not track you across other sites or apps.

5. Sensitive information

Some information we collect is “sensitive personal information” under California law: your account login, precise geolocation (from automatic mileage if you turn it on, and from receipt photos; see Section 12), bank account information you connect, and the contents of emails you send to us. We use and disclose it only to provide the Service you request, to secure it, and as otherwise permitted by law, and not to infer characteristics about you.

6. How long we keep information

When you delete your account we delete or de-identify your personal information, except what we must keep for legal, tax, accounting, security or fraud-prevention reasons. Deleted information may remain in backups for a limited period until they are overwritten. Location data has its own retention rules, described in Section 12. You can delete your account yourself in the app, under Settings, or email Account deletion.

7. Your rights and choices

Depending on where you live, you may have the right to know what personal information we hold about you and how we use it; to get a copy of it; to correct it; to delete it; to opt out of its sale, sharing or use for targeted advertising (we do none of these); and to limit our use of sensitive personal information (we use it only as Section 5 describes). We will not discriminate against you for exercising these rights.

What you can do yourself. You can download a copy of your books at any time, including from a business or project that is read-only. You, your team members and your accountant can add, edit and delete entries, except in a business or project that is read-only: a closed business, a closed project, or an extra business your plan does not include (your first open business is always editable). A read-only business or project can still be viewed and downloaded; reopen it, or choose a plan that includes it, to make changes. You can delete your whole account yourself at any time, even if a business is read-only. Deleting your account does not cancel an App Store or Google Play subscription; cancel those with Apple or Google.

How to make a request. Email support@calqledg.com from the email address on your account. We will confirm receipt within 10 business days and respond within 45 days (or tell you if we need up to 45 more). We verify your identity by matching information we already hold. You may use an authorized agent, who must provide your signed permission; we may still ask you to verify your identity. If we deny your request, you may appeal by replying to our decision; we will respond to an appeal within 45 days. Because we do not sell or share personal information, an opt-out preference signal such as Global Privacy Control requires no further action, and we honor it.

Other choices. You can turn off automatic mileage, disconnect a bank, remove calendar access in your device settings, and turn off card payments (on Android, remove calQledg’s notification access in your device settings; on iPhone, delete the automation in Shortcuts) at any time.

8. Security

We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorized access, loss, misuse and alteration, appropriate to the sensitivity of the records you keep with us. They include:

• Encryption. Information is encrypted in transit (HTTPS) and at rest.
• Access enforced by the database. Before any record is returned, the database itself confirms that the person asking belongs to that business; access does not depend on the app alone.
• Private file storage. Receipts and documents are kept in private storage and are reached only through links that expire shortly after they are issued.
• An audit trail. Each addition, change and deletion is logged with who made it and when, including changes made by team members and accountants.
• No card or bank passwords. Card payments are handled by our payment processor or app store; we do not receive or store your full card number. If you connect a bank, you sign in through Plaid; we never receive your bank login.
• Addresses for mileage. When the Service converts a location into an address for a drive, it uses our own server; your drives are not sent to a map provider for that purpose.
• Access you control. Team members are added only by the account owner, and a data-entry seat can add and edit records but cannot reach settings, billing or the team. An accountant can reach your books only after the business owner accepts the invitation, never sees your login, billing or team, and loses access as soon as either of you ends it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential. If we learn of a security incident affecting your personal information, we will notify you and others as the law requires.

Reporting a vulnerability. If you believe you have found a security issue, email support@calqledg.com with “Security” in the subject and enough detail for us to reproduce it. Please give us a reasonable opportunity to fix it before disclosing it, and do not access, change or delete data that is not yours while testing.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

10. California privacy notice

This section is our Notice at Collection and supplements this Policy for California residents. The categories of personal information we collect, their sources and purposes are in Section 1; categories of sensitive personal information and how we use them are in Section 5; how long we keep each category is in Section 6; and your rights and how to exercise them are in Section 7. In the past 12 months we have collected the categories in Section 1 and disclosed them for business purposes to the categories of recipients in Section 4. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit it. Under California Civil Code § 1798.83, we do not disclose personal information to third parties for their own direct marketing. A summary for California residents is in our California Privacy Notice.

11. Do Not Track

We do not track you across third-party sites, so we do not change our practices in response to browser Do Not Track signals.

12. Location data

When we collect it. In two cases:

• Automatic mileage. Only if you turn it on and allow location access on your phone, including while the app is in the background. You can turn it off at any time in the app or in your phone’s settings. Entering miles by hand does not use your location.
• Receipt photos (Audit-Proof plan only). If your account has Audit-Proof and your phone’s camera stamped a location into a photo you add, we save that location with the receipt as proof of where the purchase happened. On every other plan, the location is erased before the receipt is saved. The receipt image we store never keeps the location it was taken at.

What we collect. While a drive is being recorded, we collect precise location points: latitude, longitude, time, speed and accuracy. From the first and last point we work out the start and end addresses. This happens on our own servers. Your location points are not sent to an outside mapping company. We also save your phone’s motion readings from the drive (for example, whether it was in a moving vehicle or on foot).

Why. Only to measure your miles and record where each drive started and ended, for your mileage log. We do not use your location for advertising. We do not sell or share it, and we do not build a profile of where you go. We use motion readings only to tell when a drive starts and ends and to fix problems with drive recording.

How long we keep it.

• Your drive record (date, miles, start and end places, purpose) is kept with your other records until you delete it or close your account.
• The detailed route (the location points) is deleted 90 days after the drive. The IRS does not require it. Your drive record stays.
• To fix problems with drive recording, we keep a short diagnostic record of each drive, and the location points of any drive the app could not save. Neither is part of your mileage log. Both are deleted after 30 days.
• The motion readings saved with a drive are deleted 30 days after the drive, on every plan. Your drive record stays.
• Audit-Proof plan: routes are not deleted at 90 days. Each route is kept as proof of your miles until 7 years after that tax year’s return was due, then deleted. If your account leaves Audit-Proof, routes older than 90 days are deleted.
• On Audit-Proof, a receipt photo’s location is kept until 7 years after that tax year’s return was due, then erased. If your account leaves Audit-Proof, it is erased. The receipt itself stays.

Precise location is sensitive personal information under California law. We use it only to provide the Service to you.

13. Changes to this Policy

We may update this Policy. We will change the “Last updated” date and, if a change is material, notify you by email or in the Service before it takes effect.

14. Contact

Sesame Byte LLC
1001 Bishop St Ste 2685A, Honolulu HI 96813
support@calqledg.com