Effective Date: March 5, 2026 · Last Updated: June 18, 2026
The short version: DeductFlow keeps a working copy of your data on your device and securely backs it up to our servers so you never lose it and can use it across devices. Your data is encrypted in transit and at rest, isolated to your account, and never sold. We collect minimal analytics to improve the product.
We collect different types of information depending on how you interact with DeductFlow:
When you use the DeductFlow app, you may enter financial and operational data including expenses, income, mileage, active hours, property details, and other information related to your short-term rental business. This data is stored on your device for fast, offline access and is securely synced to our servers (hosted on Supabase) so it is backed up and available across your devices. It is encrypted in transit and at rest and is isolated to your account. We access it only to provide and support the service (for example, to sync, back up, or restore your data, or to help you with a support request) -- never to sell it or share it with advertisers.
Please avoid uploading documents that contain sensitive personal information you don't need for your records -- such as Social Security numbers, full bank or card numbers, or government IDs. DeductFlow is built for expense and receipt records.
| Data Type | Where It's Stored | Who Can Access It |
|---|---|---|
| Expenses, income, mileage, time entries | Your device + our servers (encrypted, backed up) | You; DeductFlow staff only as needed to operate or support the service |
| Property details and settings | Your device + our servers (encrypted) | You; DeductFlow staff as above |
| Receipt images you upload | Our secure storage (private, per-account) | You; DeductFlow staff as above |
| Plan status (free/pro) | Our servers | You |
When you visit our website (deductflow.com), we may collect:
We do not use this data to personally identify you or to access your financial records.
If you purchase a Pro subscription, payment is processed entirely by Stripe, a PCI-compliant third-party payment processor. We do not collect, store, or have access to your credit card numbers, bank account details, or other payment credentials. Please review Stripe's Privacy Policy for information on how they handle your payment data.
If you voluntarily provide your email address (for example, through a newsletter signup, waitlist, or support request), we collect and store it for the purpose of communicating with you. You can unsubscribe from emails at any time.
We do not: sell your personal data, share your financial data with advertisers, access your data except as needed to operate, support, secure, or improve the service, use your data for automated decision-making or profiling, or share your email with third parties for marketing.
Storage model. DeductFlow keeps a working copy of your data on your device for speed and offline use, and securely syncs it to our servers (Supabase) for backup and multi-device access. This means:
We restrict internal access to what's needed to run and support the service, and we maintain administrative and technical safeguards to protect your data.
The DeductFlow app does not use cookies. Our marketing website may use:
We do not use advertising cookies or retargeting pixels.
DeductFlow integrates with or links to the following third-party services:
Each third-party service has its own privacy policy governing its handling of your data.
DeductFlow is not intended for use by individuals under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, contact us at privacy@deductflow.com.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related questions or concerns: