Privacy policy

Controller and scope

The publisher and controller for developer-managed processing is Blacksunset OÜ, Estonian registry code 16513658. Contact: info@blacksunset.ee.

Hariduse põik 1, Kõrveküla alevik, Tartu vald, Tartu maakond, 60512, Estonia.

If you email support, the studio processes your email address and message only to answer the request and meet applicable legal obligations.

Data handled by the app

• Records you enter or import can include customer and service-site names, notes, service dates, revenue, chemical costs, working time, manually entered travel distance and costs, overhead, pricing scenarios and visit drafts. These records are used locally for your calculations and history; PoolMargin does not upload the business workspace to a Nulleuri or Blacksunset server.
• Language, theme, selected workspace, onboarding status, currency and unit preferences are stored locally. The sample workspace is separate from your own records. Names and notes may contain personal information you choose to enter; a customer record is not an online customer account.
• Google Play supplies product availability, the local purchase price, purchase status, a signed purchase receipt and its token so PoolMargin can grant, check or restore Pro. PoolMargin does not request your Google account password or payment-card details and does not send your customer or cost records to Google Play.
• Google Play Billing automatically sends technical diagnostics about billing API use, successful and failed calls and service connection issues to Google. Diagnostic context can include the Android version, device model and build, language and region settings, network type, carrier code and app version. Google uses this information to improve billing-library performance and troubleshoot errors. These diagnostics are separate from your business workspace.
• If you contact support at info@blacksunset.ee, the support operator and email provider receive your message and any information you choose to include. Avoid unnecessary customer information and never send a backup password. The publisher is Blacksunset OÜ, Estonian registry code 16513658.

Permissions

• Google Play Billing uses internet access, network-state access and the Google Play billing permission. Core business recordkeeping and calculations work offline; buying, checking or restoring a purchase can require access to Google Play.
• PoolMargin does not request location, contacts, camera or microphone access and does not track routes. Travel distance is entered manually. File import, export and backup use Android’s system file picker for the file or destination you select, without requesting broad access to your files.

Storage and security

• Your workspace, visit drafts and preferences are kept in Android’s app-private storage. The working business database is not separately encrypted by PoolMargin and does not have a PoolMargin password. It relies on Android’s app isolation and device security. Protect access to your device with its security settings. Editing records can retain earlier values in local change history.
• CSV export creates a readable, unencrypted ZIP with CSV tables and a JSON copy of the workspace, including change history. Visit drafts are not included in the CSV export. Choose where the file is saved and who can access it.
• Password-protected .pmbackup files contain the workspace and visit drafts and use AES-256-GCM encryption. PoolMargin does not save the backup password and cannot recover it. Restoring requires the file and its password, then your confirmation of the replacement preview. Purchase rights are not included in this backup.
• The system file picker may offer a cloud provider as a destination. If you select it, that provider stores the exported file under its own terms. PoolMargin has no automatic business-data cloud sync. Android cloud backup is disabled for local app data; device migration behavior can depend on Android and the device manufacturer.
• An acknowledged, verified Pro receipt is encrypted with Android Keystore and stored outside Android backup and workspace backups. The receipt and verification time let previously verified Pro work offline without a fixed offline expiry. A successful later Google Play check can update ownership; restoring business records alone does not restore Pro.

Third-party services

• Google Play Billing handles the planned one-time Pro purchase through your Google Play account. PoolMargin requests product and offer information, checks owned purchases and acknowledges completed purchases using the purchase token. Restore purchases uses the Google Play account that made the purchase.
• Google’s billing library includes a background data-transport component that sends billing diagnostics to Google. This is automatic SDK processing, separate from your locally stored business records, and does not depend on completing a Pro purchase. PoolMargin has no switch to disable this SDK diagnostic processing. Google handles payment and service information under its own policies: https://policies.google.com/privacy and https://play.google.com/about/play-terms/. PoolMargin does not receive your card or bank-account details.
• PoolMargin has no advertising SDK, separate developer analytics SDK, developer-managed user account or business-data backend. It does not automatically connect to invoicing, payment-collection, route-planning or other business software.

Advertising and purchases

• PoolMargin 1.0.0 is in Google Play review and is not yet publicly downloadable. The free tier includes one active service site and all current calculation, pricing-scenario, CSV and password-protected backup tools within that limit. A customer with multiple service locations uses one active site per location. Paused and archived sites do not count toward the active-site limit.
• The configured Pro offer unlocks unlimited active service sites with a one-time purchase at USD 33.99 in the US or AUD 51.99 in Australia. There is no monthly or annual subscription. After launch, Google Play will show the applicable local price and taxes before purchase. An active product configuration does not mean the app or purchasing is already publicly available.
• Losing or not restoring Pro does not delete your business records. If the workspace has more than one active site, you can still view, export and back up records; saving new business data is restricted until Pro is restored or extra sites are paused or archived.

Retention and deletion

• Archiving keeps a site and its history; it is not deletion. To remove local app data, use Android Settings → Apps → PoolMargin → Storage → Clear storage, or uninstall the app. Make a backup first if you need the records later. Local deletion also removes the locally cached Pro receipt; a valid purchase can be restored through Google Play.
• Exported ZIP files and password-protected backups remain in the location you selected until you delete them there. Clearing PoolMargin data does not remove these files or Google’s purchase history. We cannot remotely recover or erase a workspace that remains only on your device.
• Google retains purchase and billing service information under its own policies. PoolMargin has no developer-managed account to delete. For privacy questions or a request concerning information you emailed to support, contact info@blacksunset.ee.

Your rights and contact

Where data-protection law applies, you may request access, correction, deletion, restriction or portability of personal data controlled by the publisher, and object to processing. Most product data described here is held only on your device and can be managed there.

You may also lodge a complaint with the Estonian Data Protection Inspectorate.

This policy may be updated when the app or legal requirements change. The revision date above shows the current version.