LEGAL / 01 Plain language
Privacy
policy.
Onsite Math works without an account. Your calculations, jobs, client names, estimates and notes stay on your device unless you turn on an iCloud backup or deliberately export or share them. The app has no advertising, no third-party analytics and no tracking across apps or websites. Sharing basic usage counts is optional and off by default.
1. Who is responsible
The controller for the limited personal data described in this policy is Eutopix Labs P.S.A. (prosta spółka akcyjna), ul. Hoża 86/410, 00-682 Warszawa, Poland, registered by the Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy KRS, under KRS 0001237465 · NIP 7011310736 · EU VAT PL7011310736 · REGON 544584646 · share capital PLN 20,000.
Privacy questions and rights requests: support@onsitemath.com (please put “Privacy” in the subject). This policy covers the Onsite Math app on iPhone, iPad and Apple Watch, onsitemath.com, and correspondence with support.
2. Data stored on your device
The app stores settings, saved jobs (job name, client name, notes, calculations and material takeoffs), calculation history and purchase entitlement state in its local app container so its features work. Eutopix Labs does not operate an account system or a server for these records and does not receive them. We cannot view, retrieve or delete them for you. Removing the app may remove local data unless an Apple device backup restores it. You control any PDF or other content you export through the system share sheet; the destination you choose handles its copy under its own terms.
3. Optional iCloud Drive backup
You can back up your saved jobs to iCloud Drive in your own Apple Account, manually or, with Pro, automatically. Backups are off until you turn them on. Each backup file contains your saved jobs, including client names, notes, calculations and takeoffs, plus technical details used to manage backups: the app version, the time of the backup, your device's name and a random identifier for this installation. The files are stored in an “Onsite Math” folder that is visible in the Files app.
Apple stores and syncs these files under your iCloud settings and Apple's terms. Eutopix Labs never receives them. The app keeps the newest 10 automatic backups from each device plus one per month for the last 12 months; manual backups stay until you delete them. Turning backups off does not delete existing copies: delete them in the app's backup screen or in the Files app.
4. For businesses and organisations
Job and client information you enter stays on your device or in your own iCloud Drive. When you record information about clients or other people, you (or your organisation) are the controller of that data and decide why it is collected, how long it is kept and with whom it is shared. Eutopix Labs receives none of it and acts as neither controller nor processor for it. There are no sub-processors for job data and no developer access to it. The only data the app can send to Eutopix Labs is the optional usage counts described below. This also applies when an organisation deploys the app through Apple Business Manager or device management.
5. Optional usage sharing
Onsite Math does not track you across apps or websites and does not use an advertising identifier. In versions that offer Usage analytics in Settings, you can choose to share basic counts to help Eutopix Labs improve Onsite Math. Sharing is off by default and normal features remain usable without it. Counts cover app opens, successful tasks, paywall and plan choices, purchase outcomes and useful returns, plus app version and build number, platform, distribution channel (App Store, TestFlight or unknown), UTC day and consent-cohort week. We do not send job or client names, calculations, document contents, text, recordings, precise locations, financial amounts, name, email, advertising identifiers or persistent account, installation or device identifiers. Purchase outcomes are categories, not transaction identifiers or amounts; locally used transaction identifiers are not uploaded. A temporary random batch identifier recognizes retries. Nothing is collected or queued for analytics before consent.
Eutopix Labs operates the collector using Cloudflare Workers and Cloudflare D1. The database is restricted to the European Union, but Cloudflare's network may process requests elsewhere and necessarily sees the network address during transport. The collector’s application code does not log or store IP addresses, request headers or raw request bodies. Cloudflare may still process infrastructure and security information under its own obligations and applicable safeguards. Requests are not guaranteed anonymous or entirely processed within the EU. No advertising personalization or cross-company tracking is added.
Unsent counts expire after 7 days. Daily cleanup removes retry identifiers older than 8 days and aggregate counts older than 400 days. Provider recovery copies may retain earlier database states for an additional recovery window, currently up to 30 days depending on the Cloudflare plan. Turning sharing off deletes unsent counts and local sharing metadata; requests already sent may already have been accepted. Combined totals contain no person identifier, so we cannot locate or erase a person's past contribution. We process these counts only with your consent, which you can withdraw at any time by turning sharing off.
6. Purchases
Apple processes App Store purchases and restores. We use Apple StoreKit to determine whether Pro features are available. Apple may process purchase, account, payment and diagnostic information under Apple’s own policies; we do not receive your full payment details. Apple provides us with App Store sales, subscription, proceeds and performance reports, which can include product and transaction details, country or storefront, subscription status and an Apple-generated subscriber identifier, but not your name or email address. We use them to provide purchases, keep financial and tax records and understand aggregate performance.
Optional local notifications, such as a reminder before a free trial ends, are scheduled on your device and only if you allow notifications.
7. Advertising measurement (Apple)
Onsite Math shows no ads, does not use the advertising identifier (IDFA), never shows an App Tracking Transparency (ATT) prompt and does not track you across other companies' apps or websites.
- Apple's own measurement. If you install Onsite Math after tapping an Apple Ads advertisement, Apple may count the install and attribute it to that ad using its own App Store measurement. Apple is responsible for that processing; see Apple's privacy policy.
- EU/EEA, UK and Switzerland. From the first update of Onsite Math released after 14 October 2026, the app sends no SKAdNetwork or AdAttributionKit conversion value in these regions. Earlier versions may send the coarse, aggregate value described below in every country.
- Other regions. Outside these regions (and, in earlier versions, everywhere) the app may send a coarse, aggregate conversion value through Apple's SKAdNetwork/AdAttributionKit: a number from 0 to 3 describing progress during the first days after installation (for example: app opened, first calculation completed, offer viewed, subscribed or bought). It contains no identifier, no IDFA and nothing about you, and no ATT prompt is shown. Apple passes it on delayed and combined with other installs; Eutopix Labs receives only aggregated postbacks that identify no one. Legal basis: our legitimate interest in measuring our own advertising (Art. 6(1)(f) GDPR where applicable).
8. Ratings, website and support
The app may ask the operating system to show Apple’s standard rating prompt after meaningful use. Apple controls whether the prompt appears.
onsitemath.com is hosted on Cloudflare, which processes ordinary request data such as IP address, requested page, time, browser information and security signals to deliver and protect the site. The site sets no cookies of its own and has no analytics, advertising, embeds or contact forms. Cloudflare may set a strictly necessary security cookie if it shows a security challenge.
If you email support, we receive the address, message and attachments you choose to send and use them only to answer or resolve your request.
9. Purposes, legal bases and retention
- Support correspondence: to answer your request (steps at your request and performance of our agreement, Art. 6(1)(b) GDPR) and to keep a useful support history (legitimate interest, Art. 6(1)(f)). Normally deleted or anonymised within 24 months after the request is closed.
- Optional usage counts: your consent (Art. 6(1)(a)), which you can withdraw at any time. Retained as described in section 5.
- App Store purchase and sales data: to provide Pro (contract, Art. 6(1)(b)) and to keep accounting and tax records (legal obligation, Art. 6(1)(c)). We keep these records for as long as Polish accounting and tax law require — usually 5 years from the end of the calendar year in which the related tax fell due (Accounting Act art. 74; Tax Ordinance arts. 70 and 86) — or longer while a dispute requires it. App purchases are sold by Apple, so your purchases do not appear in our accounting records.
- Website request data: to deliver and secure the site (legitimate interest, Art. 6(1)(f)). Kept by Cloudflare according to its operational logging policies.
- Ad-measurement signals (outside the EU/EEA, UK and Switzerland; in versions released up to 14 October 2026 everywhere): aggregate measurement of our own campaigns (legitimate interest, Art. 6(1)(f)). We receive only aggregated postbacks, which identify no one.
- Jobs and iCloud backups: not processed by Eutopix Labs. They remain until you delete them.
10. Recipients and international transfers
Apple (App Store, StoreKit, iCloud, notifications and device services) acts under its own terms and privacy policy. Cloudflare, Inc. hosts the website and, if you turn on usage sharing, runs the usage collector. Our email provider processes support messages. Professional advisers, courts or authorities may receive limited data where legally required.
Apple and Cloudflare can process data in the United States and other countries outside the European Economic Area. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses otherwise.
11. Your rights
Under the GDPR you may ask for access to, rectification, erasure or restriction of personal data we hold about you, receive it in a portable format, object to processing based on legitimate interests, and withdraw consent at any time where we rely on consent. Send requests to support@onsitemath.com; we normally reply within one month. Jobs and backups that stay on your device or in your iCloud are under your control, and we cannot see or delete them.
You can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority where you live or work.
California (CCPA/CPRA): we do not sell or share personal information. The only categories we handle are identifiers and messages you send by email, commercial information in Apple's purchase reports, website network data and, if you opt in, aggregate usage counts, used for the purposes above.
Do Not Track: this site and our apps do not track you across third-party sites or services, so they behave the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
We do not use automated decision-making or profiling.
12. Children
Onsite Math is a general-purpose professional utility and is not directed at children under 16. We do not knowingly collect children’s personal data.
13. Security and changes
Local app data is protected by the safeguards of your device. If this policy changes, the updated version and effective date will appear here. Material changes will be reflected in the app or its store listing when appropriate.
Changes: 14 October 2026 (update), clarified Apple ad measurement by region (the regional exclusion applies from the first update released after 14 October 2026), accounting-record retention and Do Not Track. 14 October 2026, full controller details, iCloud backup, legal bases, retention, rights, transfers, advertising attribution and the role statement for business data added.
Contact
Questions may be sent to support@onsitemath.com. Postal address: Eutopix Labs P.S.A., ul. Hoża 86/410, 00-682 Warszawa, Poland. See also the legal notice.