Privacy Policy

What stays on your device

Service report customer names, contact details, addresses, notes, checklists, photos, damage records, customer ratings, signatures, and generated PDF reports stay locally on the device in V1. ServiceProof does not enable iCloud synchronization or automatic upload of these report files. When you delete a report, the app removes the files it owns for that report from that device.

Information we process

We process account credentials, sign-in method details, business profile details, industry and template selections, Report Credit balance and ledger events, and App Store purchase verification data. We use this information to provide account access, maintain the profile shown in reports, prevent fraud, verify purchases and refunds, and operate Report Credits. We do not use local report notes, full customer addresses, photos, signatures, or PDF contents for analytics.

Service providers and international processing

We use service providers that process information only to operate the service, including cloud infrastructure in the United States and our business email/support provider. Information may therefore be processed in the United States, Mainland China, or another location where our providers operate. We require providers to protect information consistently with this policy and applicable law. We do not sell personal information or use it for cross-context behavioral advertising.

Security and fraud prevention

For high-value actions such as a Trial Credit grant, report finalization, purchase verification, and referral rewards, the service can process Apple App Attest verification data and short-lived challenges to protect against abuse. DeviceCheck tokens are used only for the Apple verification request and are not stored. Authentication tokens are stored in the iOS Keychain. Passwords are transmitted over HTTPS and stored by the service using a strong one-way password hash. Email verification, password reset, and login-method verification codes are short-lived and single-use.

Retention and deletion

You can request account deletion from Settings after recent re-authentication. The account enters a 30-day recovery period and active sessions are revoked. The current device clears its local ServiceProof reports, tasks, photos, signatures, PDFs, cache, and sign-in session after the request is accepted. Because V1 does not synchronize report files, an offline device can clear its local files only when it next connects to the service. Cancelling deletion restores account access but cannot restore local files already removed from a device.

After permanent deletion, App Attest keys and counters are removed within 30 days. Integrity challenges are retained for up to 24 hours, trial-eligibility summaries for up to 365 days, and minimal security-audit events for up to 180 days. We retain the minimum purchase, refund, Credit, debt, Apple transaction, and financial-ledger records needed for refunds, disputes, fraud prevention, accounting, and legal obligations for up to 30 years. These records do not include report photos, signatures, or PDF contents.

Your choices and requests

You may update your business profile, manage available sign-in methods, request account deletion, and decline camera or photo-library permission without losing unrelated features. To ask about access, correction, deletion, consent withdrawal, or this policy, email serviceproof@ansiotech.cn. We may need to verify your identity before acting on a request. Do not include customer photos, signatures, report PDFs, passwords, or verification codes in support email.

Children and policy changes

ServiceProof is intended for independent service professionals and is not directed to children under 13. We may update this policy when the service or legal requirements change. A material update will be posted here with a new effective date.

Contact

Controller: Hangzhou Anshu Technology Co., Ltd.
Privacy and support contact: serviceproof@ansiotech.cn