Information in the app
Return records are the details you choose to enter or attach. Depending on how you use the app, that can include store and item names, purchase or return dates, amounts, order details, status, notes, reminders, receipts, photos, and return or refund evidence.
The core tracker stores these records locally on your device so you can work offline. The app schedules reminders on your device; reminder text is not sent to us. Your device backup settings may also include app data.
If you choose to contact support, we receive the information you include in that message. Please don’t send passwords, Apple Account codes, payment details, or purchase documents unless we specifically need a redacted example to diagnose a problem.
In-app purchase
If you buy the lifetime unlock, Apple processes the payment. RefundTrail receives transaction and entitlement information needed to enable the feature and restore it later. We do not receive your payment card number. Apple handles payment details under its own policies.
Optional cloud backup
Cloud backup is an optional feature separate from the offline tracker. If you choose to enable it, the backup may contain return records and evidence you choose to save, including merchant and item details, order information, amounts, dates, notes, status history, and receipt or proof files. Signing in for cloud backup or existing-account management uses Firebase Authentication. RefundTrail requests no name or email scopes when signing in with Apple. If Apple includes a previously authorized real or relay email address in the identity token, Firebase Authentication may retain it in the account profile for authentication. We do not use that address for marketing. Firebase Authentication assigns a user identifier (UID), which links your private backup to your account. A random installation identifier helps manage backup sessions. Firebase App Check and Apple App Attest process app and device attestation information to help protect the backup service. Apple and Firebase process authentication tokens; the app does not expose them publicly.
Cloud backup uses Firebase Authentication, Cloud Firestore, and Firebase App Check. The Firestore database is in the European eur3 region; other provider service data may be processed in other regions under Google’s service terms. Backup is manual: select Back up now to update a snapshot. Transfers use HTTPS/TLS. The backup is not end-to-end encrypted by RefundTrail; the service provider’s platform security controls also apply.
Do not enable cloud backup if you prefer that this information remain only on your device. The core tracker does not require an account or a network connection.
How information is used and shared
We use information to operate the feature you choose, keep your records available on your device, restore a backup if you request one, and answer support messages. We do not sell your personal information. RefundTrail does not use advertising, analytics, or AI/model calls.
If optional cloud backup is enabled, the relevant Firebase services process account and backup data to provide that feature. Apple processes in-app purchase transactions. We do not share return records with stores, carriers, data brokers, or advertising networks.
Your choices and deletion
You can use the core tracker without turning on cloud backup. You can edit or delete records on your device and export or back up your data for your own use. A full backup may contain the same sensitive purchase details as the records in the app, so store it somewhere you trust.
If cloud backup and account sign-in are enabled, Settings provides Delete cloud account and backups, with a fresh Apple sign-in confirmation. It deletes cloud backup data before deleting the Firebase account. Deleting local app data does not itself delete a separate cloud copy. You can also contact support to ask about a backup or account deletion. We may retain limited information when required by law or needed to resolve a security or payment issue.
Security and retention
Local records are stored within the app’s iOS data area and are subject to the security protections and backup choices configured on your device. When cloud backup is enabled, data is transmitted over HTTPS/TLS and handled using the provider’s standard platform controls. RefundTrail does not promise end-to-end encryption.
Local information remains until you delete it or remove the app, subject to your device backup settings. An optional cloud copy is retained while needed to provide backup and until you delete it or request deletion. Some copies may remain temporarily in provider-managed backups or logs according to those services’ retention cycles.
Changes to this policy
If the app’s data practices change, we’ll update this page and its effective date. Material changes will be explained in the app when appropriate.
Contact
RefundTrail is developed by Nik Novak. For privacy questions or deletion requests, contact: niknovak537@gmail.com