Where your records live

Every quote, job, invoice, cost, note and photo is kept in the app on your phone. There is no account to sign in to yet, and no copy of your records sits on a website.

That is the design, and it has a limit worth saying plainly. If the phone is lost and you have no backup of your own, the records are gone. We do not hold a copy to give back.

What stays on the phone

• The customer list, with names, addresses and phone numbers.
• Quotes, invoices, jobs, payments and what is still owed.
• Costs and receipts. Photos taken on a job.
• Notes and timesheets. The settings you have chosen.

If you delete the app, its records go with it. Deleting the app is the one action that removes everything at once.

What leaves the phone

Only three things leave the phone, and you start each one.

• A question for the assistant. The words you send leave the phone so the AI service can write an answer.
• A quote or a bill you share. That one document is copied to the customer link server so the customer can open it.
• A receipt photo you ask the app to read. The photo is sent to be read, and the answer comes back to the phone.

Nothing else leaves. The app does not upload your records in the background and there is no sync running.

What the servers hold

There are two servers, and neither holds your records.

The assistant server. It holds the key that pays for the AI, a count of the messages you have used and the receipt for any AI minutes you buy. Its database has no table for a quote, a job, a customer or a cost.

The customer link server. It holds the document you shared, which means the words on it, its amounts, your business details and the code in the link. Nothing else from your phone goes with it. A new send replaces the paper behind the same link.

What the servers never hold

• Your customer list, your jobs, your costs, your notes or your photos.
• A card number. When the app opens, the subscription is taken by the App Store or Google Play. We never see the card and we never store it.
• A password. There is nothing to sign in to.
• A copy of the app's database.

Who can see what

• You. Anyone who can get past your phone's lock can open the app and read everything in it. The phone's own lock is the first door, and we cannot add a second one yet because there is no account.
• Your customer. Anyone with the code in the link can open that one document. The code is the whole address, so send the link only to the customer. There is no way to withdraw a link from the app yet. If one reaches the wrong person, email us and we will remove the document from the customer link server.
• Us. We cannot see your records, because they are not on our servers. We can see the count of assistant messages tied to your installation, and the document you shared if we are asked to look.
• The AI service. It sees the question you send, so that it can write the answer. The assistant can only answer from what is on your phone.

Backups

We do not keep a backup of your records. Your phone may include the app's data in its own backup, and whether it does is a setting on the phone rather than something we control. Check that setting before you rely on it.

How to report a security problem

Email support@yellowtradie.com with "security" at the start of the subject line. Tell us what you found, which part of the app or which address, and the steps that show it. Do not send anyone's records or a card number.

We will reply within one working day where we can. We will tell you what we have found and when a fix is due. There is no reward scheme.

What this page does not claim

We hold no security certificate, no audit report and no badge from a standards body, so there is none on this page. What is written here describes the app and the servers as they are on the date below. When either changes, this page changes with it.

Last checked 24 October 2026.