Last updated: 15 October 2026
This policy covers ColorLedger by mindgameapps. For privacy questions, contact hello@solvvit.com. ColorLedger is available for iPhone and iPad on the App Store; availability may vary by country or region. This policy covers the account and subscription features in the current version. An account is optional for free guest use; a verified email account is required before starting a new Apple subscription. Cloud sync and remote crash reporting remain disabled.
Your local salon ledger
Client names and contact details, formulas, quantities, entered costs, revenue, notes, photos and preferences are stored in the app’s private storage on your device. Local formula work does not require an account. Camera or photo-library access is requested when you choose to add a photo. The app re-encodes stored photos to remove unnecessary metadata, including location metadata.
Use photos and client information only with the necessary permission. The Show client view displays visit photos without private notes, formulas or costs. It does not publish a customer portal or sharing link.
Apple subscriptions
When subscriptions are available, Apple processes purchases and payment information through your App Store account. ColorLedger receives verified transaction and subscription status needed to provide Pro, restore purchases and reconcile changes. Apple determines whether your Apple account is eligible for the 14-day Pro introductory trial and confirms the trial and localized renewal terms before it starts. Creating or verifying a ColorLedger account does not start a trial. After a confirmed trial, the selected plan renews at the price and period shown before confirmation unless canceled through Apple. We do not collect payment-card details.
Apple can also send signed subscription notifications to our verification server hosted by Supabase, even when cloud sync is disabled. The server retains notification identifiers, original subscription transaction identifiers, processing timestamps and status, and a ColorLedger account identifier when Apple supplies one. These records support purchase verification, duplicate prevention and subscription reconciliation. They do not contain your salon records or photos. Raw signed notification payloads are checked for verification and are not stored in these notification records.
New subscriptions require ColorLedger registration or sign-in with a verified email address. The app includes the verified ColorLedger account identifier in the signed-in Apple purchase to associate it with that account. Existing subscriptions purchased in earlier guest-capable builds may have no ColorLedger account identifier. Restoring a purchase does not add or transfer its account binding. Apple subscription transaction identifiers are separate from a ColorLedger account identifier.
Email accounts
You can use the three local guest samples without creating an account. Register or sign in and verify your email before starting a new Apple subscription. Restore Purchases and App Store subscription management remain available without ColorLedger sign-in. Create account and Sign in use an email verification code by default. Once your email is verified, you can optionally set or change a password and use it to sign in; email codes remain available. Supabase Auth processes your email address, verified account identifier, and sign-in, session and security metadata to authenticate you. If you set or use a password, Supabase Auth also processes it for account authentication. ColorLedger does not save passwords in its local records or logs. Session credentials are kept in secure platform storage on your device.
Verification emails are delivered through Zoho ZeptoMail. Supabase and ZeptoMail process the recipient email address, message content including the verification code, and delivery metadata to send and troubleshoot the requested email. These are account-access messages, not marketing emails.
Signing in opens a separate account ledger on this device. Your guest ledger remains separate and is available again after you log out. The current version does not import guest records into an account, upload salon records or photos, or provide cloud backup or multi-device sync. Signing in on another device does not retrieve the ledger saved on this one. Keep exports and any photo copies you need outside the app.
Free service sample usage
To enforce the free service allowance, the app keeps an anonymous completed-service count on this device, shared across guest and account ledgers. This count remains after account deletion, contains no account, client or session identifiers, and is not uploaded. Logging out or creating another account does not reset it.
Diagnostics, reminders and exports
If technical crash reporting is enabled in a release, Sentry receives scrubbed technical errors and app/device information. It is configured without session replay, screenshots, view hierarchy, default personal information or performance tracing. The app contains no advertising tracker and does not sell salon data.
Optional reminders are scheduled on your device and use generic wording without customer names or formulas. Basic CSV/PDF exports go only to destinations you select. Exported files and shared copies are outside the app’s deletion controls. Optional pilot-usage counts remain local and can be cleared or exported from the app.
Retention, deletion and device backups
Local records remain on your device until you remove them or the app. Losing a device or deleting the app can remove unsynced work. iOS device backups are managed through your Apple settings; Android OS backup is disabled for this app. Local storage is protected by the app sandbox and platform controls; we do not claim that the SQLite database is separately encrypted.
Your sign-in email and authentication account are retained until account deletion. The in-app Delete account action requests removal of the authentication account and any existing server-side account records or private photos, then removes that account’s local ledger and photos from this device. It does not delete a separate guest ledger or another account’s local data. Account deletion is available without an active Pro subscription. A large or interrupted deletion remains pending until it completes. You control backups, exports and copies on other devices separately; we cannot remotely erase records stored only on a device.
Server subscription-notification records are separate from your local ledger and cloud account records. Removing the app or deleting a ColorLedger account does not automatically erase these notification records. No automatic deletion schedule is currently configured for them; they remain until explicitly removed. Contact us for access or deletion help, and we will verify ownership and explain any applicable retention restriction.
See Delete account and data to request help without reinstalling the app. Deleting ColorLedger data does not cancel an Apple subscription.
Your choices and questions
You can decline optional photo/reminder permissions, export your records, use local logging without an account, and request access, correction or deletion help by contacting hello@solvvit.com. Please do not send customer photos, passwords or verification codes in an initial support email.