Privacy Policy

This Privacy Policy applies to the mobile application Execution (Android package name com.varlextech.execution, the "App"), developed and published by Varlextech Limited ("Varlextech Limited", "we", "us", or "our"). It explains what information the App handles, how it is used, the third-party services integrated into the App, and the choices you have.

By installing or using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Summary

• Execution stores everything — tasks, projects, clients, deals, time entries, revenue records, and settings — in an encrypted database on your device only. The core app works fully offline: no account, no cloud sync, no analytics, and no tracking.
• Optional, opt-in features may use third-party services: purchases are processed by the app stores and managed by RevenueCat, and optional cloud features (such as AI assistance and connectors) use Supabase with an anonymous session. These are described in Section 5 and are never required for the core app.
• You can delete all data the App stores by clearing the app's storage or uninstalling it — the encryption key is destroyed with it.

2. Information stored on your device

Execution saves the following data locally on your device, inside a SQLCipher-encrypted SQLite database in app-private storage. The 256-bit encryption key is generated on first launch and kept in the platform secure store (iOS Keychain / Android Keystore):

• Tasks and plans — tasks, projects, due dates, calendar schedules, and related notes you enter.
• Business records — clients, deals, interactions, time entries, and revenue records you choose to track.
• Delegation records — collaborators, delegations, and deliverables you create.
• Settings and preferences — theme, enabled modules, notification preferences, and gamification progress.
• Purchase entitlement — a flag recording whether a Pro purchase is active on your device.

This data never leaves your device and is not accessible to Varlextech Limited, except where an optional cloud feature you explicitly enable transmits the specific data needed for that feature (see Section 5). Local data is deleted when you clear the App's data or uninstall the App.

3. Device permissions

The App requests the following permissions, each optional and used only on-device:

• Calendar (optional): with your permission, the App reads your device calendar to show a timeline, and writes events only when you explicitly mirror a task to your calendar. If you edit or delete a mirrored event in your calendar app, the App adopts that change. Event data stays on your device; it is never sent to us or anyone else.
• Notifications (optional): due-date reminders are scheduled locally on your device. Nothing is sent over the network.

4. Information Varlextech Limited does not collect

We do not ourselves collect, request, or have access to:

• Your name, email address, phone number, or contacts
• Account credentials (the App has no sign-up or login; optional cloud features use an anonymous, random session ID)
• Precise location, photos, microphone, camera, or files outside the App's private storage
• Payment card details (all payments are processed by the app store)
• Any analytics or telemetry — the App includes no Varlextech Limited-operated analytics, tracking, advertising, or crash-reporting service

5. Optional third-party services

The App integrates the following third-party services, which are used only when the corresponding optional feature is enabled. Each acts as an independent data controller and processes data under its own privacy policy. The App is fully functional without any of them — with no purchase and no cloud features enabled, the App makes no outbound network connections at all.

5.1 RevenueCat (in-app purchase management)

If you purchase an optional Pro upgrade, the App uses RevenueCat (RevenueCat, Inc.) to process, validate, and restore that purchase. RevenueCat receives:

• An anonymous, randomly generated app user ID (not linked to your identity)
• Purchase history and store receipts for the products you buy
• Basic device metadata (platform, OS version, app version, locale, currency) needed to deliver purchases

• RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

5.2 Supabase (optional cloud features)

Certain optional, opt-in modules — such as AI assistance and connectors (for example, importing email threads you choose to link) — are backed by Supabase (Supabase, Inc.) edge functions operated for the App. When you enable such a feature:

• The App creates an anonymous session (a random identifier — no email, password, or profile is requested or stored).
• Only the data needed for that feature to operate is transmitted — for example, the text you submit to an AI request, or connector items you choose to import. Raw payloads are not retained for analytics; the App logs only technical metadata (request hash, token counts, cost) for rate-limiting and abuse prevention.
• Connector sync state (such as a cursor marking imported items) is stored to prevent duplicates.

These features are opt-in, can be turned off at any time in the App's module settings, and every one has a deterministic on-device fallback — the core app always works fully offline.

• Supabase Privacy Policy: https://supabase.com/privacy

5.3 Google Play Billing / Apple StoreKit (payments)

All payments are processed entirely by Google Play (on Android) or the App Store (on iOS) under the store's own terms and privacy policies. Varlextech Limited never sees or stores your payment card information.

• Google Play Terms: https://play.google.com/about/play-terms/
• Apple Media Services Terms: https://www.apple.com/legal/internet-services/itunes/

6. How information is used

• Core app function — storing and organizing your tasks, schedules, business records, and settings on your device.
• Reminders and scheduling — local notifications and calendar mirroring, only with your permission.
• Purchases — completing transactions, unlocking Pro modules, and restoring purchases across reinstalls (RevenueCat, app stores).
• Optional cloud features — only when you enable them, to provide AI responses or connector imports (Supabase).

For users in the EEA/UK, the legal bases are: performance of the contract (providing the app and purchases you request), legitimate interests (security and abuse prevention), and your consent (optional permissions and opt-in cloud features).

7. Data sharing and sale

Varlextech Limited does not sell your personal information and does not share data with third parties for their own marketing. The only disclosures are the transmissions made by the services listed in Section 5, and only when you use the corresponding optional feature.

8. Data retention and deletion

All data the App stores itself remains only on your device and is erased when you clear the App's storage or uninstall it. Because the local database is encrypted and the encryption key is destroyed with the app, deleted data is unrecoverable by design. Third-party providers retain the data they collect for the periods described in their own privacy policies. You may also contact us at varlextechltd@gmail.com to request deletion of any data held about you by our providers, and we will forward or action the request as appropriate.

9. Your rights and choices

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent.

• Delete your data: uninstall the App or use "Clear data"/"Clear storage" in your device's app settings — this removes all locally stored data and the encryption key.
• Control permissions: revoke calendar or notification access at any time in your device settings; the App keeps working without them.
• Disable cloud features: turn off optional modules in the App's settings at any time.
• Purchases: restore or manage purchases via the App's purchase screen, or through your app store account.
• Contact us: for any privacy request (access, deletion, questions), email varlextechltd@gmail.com. We respond within a reasonable time and will not discriminate against you for exercising your rights.

EEA/UK users may also lodge a complaint with their local data protection authority.

10. Children's privacy

Execution is intended for a general audience and is not directed at children under 13 (or the applicable age of digital consent in your region). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App's third-party services, please contact us at varlextechltd@gmail.com and we will work with the relevant provider to delete it.

11. Security

All app data is stored in a SQLCipher-encrypted database on your device, with the encryption key held in the platform secure store (iOS Keychain / Android Keystore) — even someone with a copy of the database file cannot read it without the key. The optional third-party services used by the App transmit data over encrypted (HTTPS/TLS) connections. No method of transmission or storage is 100% secure, but we select reputable providers and minimize data collection by design.

12. International data transfers

Third-party providers such as RevenueCat and Supabase may process data on servers located in the United States and other countries. Where required, such transfers are covered by the safeguards described in those providers' privacy policies (e.g., Standard Contractual Clauses or adequacy frameworks). Data stored locally on your device is not transferred.

13. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted at this URL with an updated "Effective date". If future versions add new optional cloud features, they will remain opt-in and this policy will be updated before release. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.

14. Contact us

If you have questions about this Privacy Policy or the App's data practices, contact:

Varlextech Limited
Email: varlextechltd@gmail.com