Privacy Policy

1. Introduction & Application Scope

This Privacy Policy explains how Boutique Pilot (formerly known as Smart Ladies Tailor Assistant; Android package ID: com.smartladies.tailorassistant) ("we", "our", or "the application") collects, stores, processes, and protects information when you use our mobile application.

We believe that boutique owners, master tailors, and garment artisans deserve absolute privacy for their confidential client lists and business financials. We have specifically designed our system so that we have no technical means to view, access, or sell your local customer records or financial books.

2. Category 1: Local Device Data (100% Offline Vault)

All daily operational business data entered into the application resides exclusively in private scoped Android application storage:

/data/user/0/com.smartladies.tailorassistant/databases/tailor_assistant.db

3. Category 2: Cloud Account & Authentication Data

To provide account recovery, single-device boutique security, and license entitlements, the application connects to Supabase Auth over encrypted HTTPS:

• User Email Address: Used as your unique account identifier and for secure password resets.
• Encrypted Password Hash: Stored securely using standard bcrypt password hashing algorithms. We never store or see your raw text password.
• Full Name & Boutique / Shop Name: Used to customize your in-app experience and digital bill headers.
• Mobile Number (Optional): Provided voluntarily during registration for account recovery.
• Device Binding Identifier: When you sign in, the device registers a bound ID. If another person attempts to sign in on your phone, access is blocked with CROSS_ACCOUNT_DEVICE_BOUND to protect your confidential boutique records from cross-contamination.

4. Category 3: Subscription & In-App Purchase Processing

Boutique Pilot offers an optional Boutique Pilot PRO (formerly Smart Tailor PRO) subscription:

• Payment Handler: All monetary payments are processed directly by Google Play In-App Billing. The developers never see, collect, or store your debit card, credit card, bank account, or UPI credentials.
• Purchase Verification: When a transaction is completed, Google Play issues a cryptographic purchaseToken. This token is securely transmitted via HTTPS to a backend Supabase Edge Function (verify-google-purchase) which confirms payment authenticity directly with the Google Play Developer API.
• Licensing Entitlements: Upon verification, your account record in subscription_entitlements is updated with active plan details, renewal status, and expiration date. An offline cache is stored locally on your phone so features remain active even when working without an active internet connection.

5. Third-Party Libraries & Telemetry Audit

The application codebase has been thoroughly audited for third-party trackers and software dependencies:

6. Device Permissions Requested

The application requests only minimum necessary Android operating system permissions:

• Internet Access (android.permission.INTERNET): Required strictly for cloud authentication, purchase validation with Google Play, Google Fonts loading, and user-initiated design image URL imports.
• Notifications (android.permission.POST_NOTIFICATIONS): Required on Android 13+ solely to trigger local order delivery alerts 24 hours prior to scheduled delivery deadlines. Reminders are generated locally on your phone.
• Photo Selection & External Storage (android.permission.READ_EXTERNAL_STORAGE, maxSdkVersion 32): The application enables users to attach fabric photos and design reference images to customer profiles and orders. On Android 13+ (API 33+), this operates via the secure Android System Photo Picker without requiring storage permissions. On Android 12 and below (API ≤ 32), read access to external storage is requested solely to import user-selected fabric photos from the device gallery. The application never scans, accesses, or indexes other files or untargeted media.
• Device Contacts (android.permission.READ_CONTACTS, android.permission.WRITE_CONTACTS): An optional convenience feature allowing the tailor to directly save newly added customer names and phone numbers to the device's native address book upon creating a client record. Contact records are handled exclusively on-device; contact lists are never harvested, uploaded to remote servers, or shared with third parties.

7. Data Retention & Account Deletion

• Local Database Retention: Your local customer profiles, measurements, orders, and ledger records are retained indefinitely on your physical smartphone until you explicitly delete them in the app, clear app storage in Android settings, or uninstall the application.
• Server-Side Account Deletion: You have the right to request permanent deletion of your cloud account credentials, profile metadata, and subscription purchase logs. For complete details and instructions, please review our Account Deletion Workflow.
• Independence of Data: Deleting your cloud account removes your server-side identity, but does not delete your local SQLite business database on your physical device. You remain in complete control of your local records.

8. Information Security Qualifications

We employ industry-standard security safeguards to protect your information:

• All cloud communication is encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
• Session tokens and device identifiers on Android are isolated within the operating system's application sandbox and protected with Android Keystore encryption where supported.
• Passwords are salted and cryptographically hashed before being written to server-side databases.

9. Children's Privacy

Boutique Pilot is a specialized commercial productivity tool designed for adults and professional boutique operators. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18.

10. Developer Contact & Pending Legal Review

If you have questions, feedback, or inquiries regarding this Privacy Policy, please contact our developer support desk: