Data Usage Policy

This page is a more detailed, technical companion to our Privacy Policy — it lists exactly what data Tylor collects, why, and who it's shared with.

Data we collect

Data type	Required?	Purpose
Name, email, phone number	Required	Account creation, sign-in, password reset
Business name, location, business type	Required	Onboarding and dashboard personalization
Customer records, measurements, orders, payment records	Required for app function	The core of the app — visible only to you and your staff
Subscription and billing status	Required for Premium	Granting Premium access. We never see or store your card details — Paystack and Apple/Google handle payment directly
Push notification token	Required for reminders	Delivering order and payment notifications
Style photos and a business logo you upload	Optional	Attaching a visual reference to an order, and showing your logo on invoices. Photos are resized and their hidden metadata — including GPS location — is removed when you upload them
Invoice details: business contact details, bank account name and number, invoice line items	Required for invoicing (Premium)	Printed on the invoices you create. Anyone you send an invoice link to can view that invoice, so only share it with the customer it's for
Crash and performance data	Optional	Diagnosing bugs — only collected if error reporting is enabled
App usage analytics	Optional	Understanding which features are useful — aggregated, only if analytics is enabled

Third parties we work with

Paystack — payment processing for Premium subscriptions (Android)
Apple / Google — app distribution, push notifications, and (for iOS) in-app purchase processing
Meta / WhatsApp Business Platform — delivering payment reminder messages to your customers, only when you enable WhatsApp automation
Sentry — crash reporting, only if enabled
PostHog — product analytics, only if enabled
RevenueCat — subscription status and entitlement management
Cloudflare (R2) — storage of the photos and logos you upload, and of encrypted backups of our database
Resend — transactional email delivery
Cloud hosting and database providers who store your data on our behalf

None of these third parties are permitted to use your data for their own purposes.

How we protect your data

Passwords are hashed and never stored in plain text
Session tokens are stored using your device's secure storage
Data is encrypted in transit between the app and our servers
Uploaded files and database backups are encrypted at rest; backups are kept for 14 days
Invoice links use long random codes that can't be guessed
Your business data is scoped to your account — staff you invite can only see what you give them access to

Deleting your data

You can delete your account at any time from More → Delete Account. This removes your account and business data from our systems, except for limited records we're required to retain for legal or accounting purposes (for example, payment history).

Marketing

We only email you for account-related purposes — like password resets — never for marketing, unless you separately opt in.

Questions

Email support@tylor.app with any questions about how your data is handled.