Privacy Policy

My Business keeps a copy of your business records so they follow you to any device you sign in on. Those records are stored by Gold Life LLC — the developer — on our own servers, tied to your Gold Life ID. We do not sell your data, we do not use it for advertising, and we add no analytics or tracking of our own to the app. Two things get special handling, described below: your Tax IDs (SSN/EIN), which never reach our servers, and your tax documents such as a W-9, which your device encrypts before they are uploaded.

What the app stores, and where

The app stores the information you enter — customers, estimates, invoices, receipts, payments, employees, subcontractors, jobs, your business profile, and any photos, scans, or documents you add — on your device, and sends a copy to Gold Life servers so it can appear on your other devices. Those servers are operated by Gold Life LLC on Cloudflare infrastructure in the United States. Payments are recorded only as an amount and a method category (such as cash, check, card, or bank transfer) — the app never stores bank, routing, or account numbers.

You must sign in to use the app, and your records are safely backed up to your Gold Life account. You cannot enter new records or view existing ones in the app without signing in. Without a connection, you can still open and read your records; adding or changing anything needs a connection. Signing out clears your records from this device; sign back in and they come back from your Gold Life account. We check the sign-in system with its provider, Stytch, when the app starts — that is how it knows whether you have a session — and that check carries basic technical information about the app and device. Also, customers who pay invoices online do not need a Gold Life ID. When you send an invoice payment link, customers open a web payment page on Stripe without needing an account; the invoice amount, the currency, and a short description the app makes from the invoice number and job title go to our payment service and on to Stripe, exactly as described under Card payments (Stripe) below.

Tax IDs and other sensitive numbers

When you enter a Social Security Number or EIN — for example, to prepare a subcontractor’s IRS Form 1099-NEC — that number is stored in your device’s secure Keychain, protected by the Secure Enclave and your device passcode or biometrics. Tax IDs are never sent to our servers, by design: if an older version of the app ever tried, our servers would strip the number out of the request and never store it. If you use iCloud Keychain, your Tax IDs sync end-to-end encrypted between your own Apple devices through iCloud, where only you hold the key.

Tax documents

A completed W-9 contains someone’s tax number on the form itself, so those documents get their own protection: your device encrypts the file before it is uploaded, and only the encrypted version is stored. The key needed to read it is held by a separate Gold Life service and released only to a device that has signed in as you. Someone who obtained the stored files alone could not read any of them.

We want to be straight with you about the limit of that: both halves — the encrypted files and the key service — run on Gold Life infrastructure. We keep them apart deliberately, but we are not claiming that we are technically incapable of putting them together. Anyone who tells you otherwise about a system built this way is overselling it. We chose this over device-only keys because device-only keys mean a lost phone is a lost W-9.

Camera and photos

With your permission, the app uses your camera to scan or photograph expense receipts. Any text recognition runs entirely on your device using Apple’s on-device Vision framework.

You can also choose an existing image from your photo library — for example a business logo, a signature, or a customer, employee, or job photo. This uses Apple’s system photo picker, so the app receives only the images you pick and never gains access to the rest of your library.

Images and documents you add are stored with the rest of your records, on your device and on our servers, so they appear on your other devices. They are not sent to anyone else.

Contacts

When you tap Import from Phone Contacts, Apple’s contact picker opens on your device and the app receives only the one contact you pick — never the rest of your Contacts. That contact’s name, business name, email, phone numbers, address, and photo fill in the new customer form, and once you save it, it is stored and backed up like any other customer record. Save to Phone Contacts works the other way: it opens Apple’s new-contact card filled in from a record, which you check and save yourself. We never read, upload, or store the rest of your Contacts.

Face ID / Touch ID

If you choose to use it, the app uses Face ID or Touch ID (or your device passcode) to lock the app and to protect your most sensitive details — your Tax IDs (SSN/EIN), tax documents such as a W-9 or 1099, and your saved signature — before they are shown, exported, or added to a document. It is also what confirms it’s you in the last moment before your Gold Life ID is deleted. This is handled by Apple on your device; we never receive your biometric data.

Your Gold Life ID

Signing in creates a Gold Life ID — one account across Gold Life apps, shown to you as an eight-digit number. You can sign in using Apple, Google, or your email. We keep the sign-in identifier Apple or Google returns, your email address, and the profile details you choose to enter. If you use Apple’s Hide My Email, the only address we ever see is the forwarding one Apple creates. If you use email sign-in, we send a secure one-time code to authenticate you. Sign-in is handled for us by Stytch, an authentication provider, under its own privacy policy.

We put no analytics, advertising, or tracking code of our own in the app, and nothing in it tracks you across other companies’ apps or websites. Two sign-in services collect some technical information themselves, under their own privacy policies: if you sign in with Google, Google’s sign-in kit sends Google identifiers and usage information that Google says it uses to run sign-in and for its own analytics; and Stytch may check signals from your device to protect sign-in from fraud and automated attacks. We do not build a profile of you, and we do not sell or share your data with anyone for their own purposes.

Subscriptions

The Unlimitedplan is sold through Apple’s App Store. Apple processes the payment and manages your subscription; we never receive your card or payment details. Apple’s handling of that transaction is governed by Apple’s own privacy policy.

Card payments (Stripe)

My Business includes an optional feature that lets your customers pay your invoices by card through Stripe. It stays off until you connect a Stripe account.

• Connecting your account. You connect your own Stripe account through Stripe’s secure onboarding. Payments are made to your Stripe account — Gold Life never holds or touches your money.
• What we send. When you send an invoice with a Pay button, the app sends the details needed to create that payment link — the invoice amount, currency, a short description, and an identifier — to our payment service, which creates the link with Stripe. The description becomes the line item your customer sees on Stripe’s page; the app makes it from the invoice number and the job title (for example, “Invoice 1042 — Kitchen remodel”), and the word “Invoice” in it is in English, whatever language the app is set to. Our service keeps the connected-account identifier, the invoice identifier, the amount and currency, and the payment status, so the app can confirm when it’s paid. For your connected Stripe account, it also keeps which Gold Life ID and which device it belongs to (the device by a one-way scrambled copy of the key described below, never the key itself) and when it was connected. We do not receive or store your customer’s name, card number, or bank details.
• Your invoices are backed up either way. Every invoice is backed up to your Gold Life account like the rest of your records, whether or not you connect Stripe; connecting Stripe adds only the payment details above. You set up card payments inside the signed-in app, and this device is identified to our payment service by a random key kept in its Keychain.
• How your customer pays. Your customer enters their card on Stripe’s own secure page. Their card details go directly to Stripe and are never seen by the app or by Gold Life.
• Stripe’s role. Stripe processes the payment under your agreement with Stripe and its own privacy policy. Standard Stripe card fees apply; My Business adds no fee of its own.

The assistant (Beta)

Gold Life does not sell an AI plan. If your version of the app includes the assistant (Beta), you connect your own API key from a supported AI company (OpenAI, Anthropic, Google, or Meta). Here is what happens to your data when you use it:

• It asks first. Nothing goes to the AI company until you have read what the assistant shares and agreed. If you do not agree, it stays off.
• What it sends, and to whom.Once you agree, each time you ask it something the assistant will send what you type or say, and the records it needs to answer, straight from this device to the AI company you connected with your own key. Those records can include customers, their contact details and addresses; estimates, contracts, invoices, payments, and change orders; jobs and their addresses; receipts, including their scanned text; your price sheet; employees’ hours and pay; subcontractors and what you paid them; and your business profile.
• What it keeps out. Tax IDs and W-9 details, signatures, photos, logos and scanned images, card payment account details, and your Gold Life ID details are not sent. Your device also removes anything that looks like a Tax ID before a request goes out.
• Who keeps what. Each AI company handles your requests under its own terms and privacy policy, and bills your key for what you use. When you connect an API key, it stays in memory for your current sign-in session only unless you turn on Save API Key, review this Privacy Policy and the Terms of Use, check the confirmation box, and tap Agree & Continue. When you choose to save a key, it is stored in your iCloud Keychain tied to your Gold Life ID so it stays available across your Apple devices and across Gold Life apps with Sentinel enabled. Your spend limits stay on this device, and Gold Life never receives your keys or your assistant conversations.
• Stopping. You can stop sharing any time in Settings, under Assistant: tap Stop sharing with the assistant, or disconnect your AI keys in Connect AI (which also deletes any key you saved in iCloud Keychain for your Gold Life ID). After that, nothing more is sent, and the assistant asks again before it is used.
• It can be wrong. It is a beta. Check what it tells you, and what it changes, before you rely on it.

Sending estimates and invoices

When you send an estimate or invoice, it goes out through your own Mail or Messages app to the recipients you choose. The developer does not transmit, intercept, or store these.

How long we keep it

Your records stay until you delete them. When you delete something in the app, its contents are erased from our servers within 30 days; a marker with no business information survives for up to 180 days so that a device which has been offline learns the item was deleted instead of restoring it. We also keep a short technical log of changed fields for 90 days, used to resolve edits made on two devices at once.

Three things are kept longer than that, and we would rather tell you:

• Attached files. A photo, scan, or document you attach to a record — a customer’s certificate of insurance, for example — stays on our servers after you delete that record. It goes when you erase My Business’s data or delete your Gold Life ID (below), or when you ask us to remove it.
• Card payment records. Our payment service keeps the details listed under Card payments (Stripe) for each payment link, and the record of which Gold Life ID and device your connected Stripe account belongs to, with no set end date. Erasing My Business’s data or deleting your Gold Life ID does not remove any of them; email us and we will.
• Sign-in protection. To stop attacks on sign-in, our sign-in service counts recent attempts by IP address, email address, and Gold Life ID, and our payment service counts new Stripe connections by IP address. Those counts have no set end date and are not removed when you delete your Gold Life ID.

Erasing an app’s data, or deleting your Gold Life ID, is different: that is not a marked-for-deletion, it removes the rows and the stored files themselves (except the card payment records and sign-in counts above), and it happens the moment you confirm. A copy can remain in an encrypted backup of our database for up to 30 days before it ages out; we never restore a backup to bring back something you asked us to delete.

Security

Data is encrypted in transit, and each account’s records are separated from every other account’s at the database level. Access to production systems is limited to the owner of Gold Life LLC. Because we now hold your business records, we are responsible for them: if we ever discovered a breach affecting your information, we would notify you and any authority the law requires, without waiting to be asked.

Third parties

Apple handles App Store subscriptions and Sign in with Apple, and when you type an address, Apple Maps suggests matches, so Apple receives what you type in that field. Google handles sign-in for people who sign in with Google. If your version of the app includes the assistant and you connect an AI provider and agree to share, the provider you connected (OpenAI, Anthropic, Google, or Meta) receives the requests described under The assistant (Beta) directly from your device. Cloudflare hosts our servers and storage. Stytch handles sign-in. If you turn on card payments, Stripe is involved as described above. These providers process data on our behalf, or under their own terms where this policy says so; none of them uses your business records for its own purposes beyond what this policy describes, and no one else receives your data.

Your control and your rights

You can edit or delete any record in the app at any time. Everything else lives on one screen: open the menu and, under Personal, tap the gold Gold Life ID button.

• Or ask us in writing, any time. Whatever the app’s buttons are doing, you can email adrian@softwarebygl.com from an address on your Gold Life ID and ask for a copy of what we hold for you. We will send it — lapsed or not, at no charge. A blocked button in the app does not end our obligation to answer you.
• Erase one app’s data. Tap Delete my Gold Life ID at the bottom of that screen: the screen it opens lists, under Your Gold Life apps, every Gold Life app you have used and what each one still holds for you. My Business’s row has its own Delete button: it erases every record and every document My Business holds for you on our servers, then clears them from this device too, Tax IDs included. You stay signed in, and the app keeps working, empty. Another Gold Life app’s data is erased from inside that app.
• “Delete my Gold Life ID”. This one stays greyed out until every app in that list is empty, and the screen says why. The reason is not tidiness: once the ID is gone, no device could ever sign in as you again, so anything another Gold Life app still held would sit there with nobody able to reach or remove it. When it is enabled, it deletes your Gold Life ID and signs you out of every Gold Life app.
• How each one is confirmed. Both ask you to type your eight-digit Gold Life ID, which is printed in the alert so you are not sent hunting for it. Deleting the Gold Life ID also asks for Face ID, Touch ID, or your passcode in the moment before it runs.
• There is no undo. Both happen immediately — no review, no waiting period, no recovery window, and no way to get any of it back. If there is anything you want to keep, email adrian@softwarebygl.com for your copy first — we answer whatever your subscription is doing. Deleting always works.
• Or ask us. Email adrian@softwarebygl.com and we will do it for you. The buttons in the app are faster.

Signing out clears your records from this device; sign back in and they come back from your Gold Life account. Signing out deletes nothing from our servers.

Depending on where you live you may also have the right to ask what we hold about you, to correct it, or to object to how we use it. Email us and we will do it; we will not make you prove a legal basis first.

Children

This app is not directed to children and is rated 4+.

Changes

We may update this policy from time to time. The “Last updated” date above will reflect any change.

Contact

Questions about this policy? Email adrian@softwarebygl.com, or write to Gold Life LLC, 2491 Dundee Dr, Tallahassee, FL 32308, United States. See also our Terms of Use.