Privacy Policy

Who this covers, and what it covers

This is the privacy policy of DosSantos Systems LLC ("we", "us"), 488 Pleasant St, Unit 1A, New Bedford, MA 02740. It applies to:

• This website, dossantossystems.com.
• Every app we publish under our own name, on any platform: today PlaneCost: Track Airplane Cost, Sweep: The Screenshot Cleaner, Payday Away: The Countdown App, Tucked In, Just Invoices, Pet Papers, ClearSky: Airport METAR Widget, Color Cam: The Color Finder, Hexponents: Daily Math Puzzle, Palette Party: Color Match and It's Just Blackjack. An app we release later is covered from the day it is released. Section 05 lists them.
• The work we do for clients — the software we design, build, and in some cases run for other businesses.

It does not cover a separate company's product just because we built it. If we built or host something for another business, that business decides what happens to the data in it and publishes its own policy; section 07 explains what our role is in that case.

For our apps, this policy sits alongside the Terms of Service.

What we hold to, across everything

These are commitments, not aspirations. They apply to every product in section 01. Where an app departs from one, its annex says so, and an exception is written into this policy before it ships, not after.

• No advertising, except in our free games. The only ads in anything we publish are in Palette Party, It's Just Blackjack and the Hexponents iPhone and iPad app, all from Google AdMob, as Annexes H, I and J describe. Nothing else we publish has an ad network, an advertising identifier or an ad SDK.
• No trackers or data brokers of our own. No cross-site tracking, no fingerprinting, no enrichment services, and no selling or renting of data to anyone. In those free games, Apple's tracking prompt decides whether Google AdMob may track you across other companies' apps and websites, and you can say no.
• No sale of personal information. We have never sold anyone's personal information, and the business does not depend on it. California's privacy law also counts as "sharing" personal information used for advertising across other companies' apps and websites. The only place that can happen is the ads in our free games: if you allow tracking when Apple asks, Google AdMob may use your device's advertising identifier to choose the ads you see, and if you say no, it does not get that identifier.
• Local by default. Where an app can keep your data on your own device, it does, and we do not receive a copy.
• Ask, do not assume. If a product needs to collect something new to do its job, we say so before it does, in the product and on this page.
• Least data, shortest time. We would rather not hold something than hold it carefully.

This website

The site is static and we host it on our own hardware. There are no cookies, no logins, no analytics scripts, and no tracking pixels. The typefaces, scripts and images are all served from this domain — your browser makes no request to Google, to a CDN, or to anyone but us while loading a page.

Two things still happen, and they are worth stating plainly:

• Server logs. Our web server records ordinary request data — IP address, time, the page requested, referring page, and browser user-agent string. We use it to keep the site running and to see, in aggregate, how much traffic it gets. It is not tied to a person and it is not used to build a profile.

The inquiry form. If you send us one, we receive what you typed: your name, your company, your email address, the project type and budget range you picked, and your description of the problem. We use it to reply and to keep a record of the conversation. It is recorded on our own server, and a notification is emailed to us through SendGrid (Twilio SendGrid) — so your message passes through SendGrid, and our email provider, on its way to us. We do not sell it, share it, or add you to a mailing list, and there is no sales sequence. Ask us to delete it and we will.

App support forms. Our apps' support pages have a contact form, on this site or on the app's own website: today, the support pages of PlaneCost, Sweep, Payday Away, Tucked In, Just Invoices, Pet Papers, ClearSky, Color Cam, Palette Party and It's Just Blackjack. If you use one, we receive what you write, the email address you give us, the topic you pick, and the device and app-version details if you add them, and we use them only to reply to you. The message is stored without your IP address, it is encrypted on our server as soon as it arrives, and a copy is emailed to us through SendGrid. We never add you to a mailing list, and we never share your message.

Our apps, in general

Unless a product's own section below says otherwise:

• There is no account. You do not give us a name, an email address or a password to use the app.
• Your data is written to storage on your device. We do not run a server it syncs to, and we have no copy — if someone demanded your data from us, we would have nothing to give.
• There is no analytics or crash-reporting SDK. We do not measure which screens you open or how often you use it.
• If the app is sold or subscribed through an app store, that store handles payment and holds the payment details. We never see your card, billing address or store account. Stores give developers aggregate sales reports — units, revenue, country — which do not identify you.
• If an app asks for permission to use something on your device, such as your photos, it uses that access on the device, only for what the app does, and does not send what it reads to us. You can change the permission at any time in your device's settings.
• If an app offers sync, it runs through your account with the platform provider, under their policy, not through infrastructure of ours.

The apps this policy covers

This policy covers every app DosSantos Systems LLC publishes under its own name, on any platform, from the day it is released, including one that has not been added to this list yet. Today they are:

• PlaneCost: Track Airplane Cost, for iPhone and iPad: tracks what an airplane costs to own and fly, per hour. Annex A.
• Sweep: The Screenshot Cleaner, for iPhone: clears out old screenshots. Annex B, and its page on this site. It also has a privacy policy of its own.
• Payday Away: The Countdown App, for iPhone: counts down to your next payday in widgets. Annex C, and its page on this site. It also has a privacy policy of its own.
• Tucked In, for iPhone and Apple Watch: hands a babysitter, pet sitter or house sitter what they need for a visit, and lets parents follow along. Annex D, and its own website. It also has a privacy policy of its own.
• Just Invoices, for iPhone: logs the work you do for clients, sends your invoices and shows who still owes you. Annex E, and its page on this site. It also has a privacy policy of its own.
• Pet Papers, for iPhone and iPad: keeps your pets' vaccine records, certificates and care details, and shares them with a kennel, groomer or vet through an encrypted link or a PDF. Annex F, and its page on this site. It also has a privacy policy of its own.
• ClearSky: Airport METAR Widget, for iPhone and iPad: shows live airport weather, METAR and TAF reports, in widgets. Annex G. It also has a privacy policy of its own.
• Color Cam: The Color Finder, for iPhone and iPad: finds the colors in your photos. The general rules cover it, with no annex. It also has a privacy policy of its own.
• Hexponents: Daily Math Puzzle, for iPhone, iPad and the web: a daily logic puzzle on a hexagonal grid. Annex H, and its own website. It also has a privacy policy of its own.
• Palette Party: Color Match, for iPhone and iPad: a game that tests how well you see color. Annex I.
• It's Just Blackjack, for iPhone and iPad: a casino-style Blackjack game played with virtual credits. Annex J. It also has a privacy policy of its own.

An app is described in its annex at the end of this page. Where an app also has a privacy policy of its own, that page and this one are written to agree. If they ever seem not to, we follow whichever of the two collects or shares less.

If you contact us

If you write to Sales@DosSantosSystems.com, or use an app's support form (section 03), we have your email address and whatever you tell us — that is how email works. We use it to answer you, and we keep the thread for context if you write again. We do not add you to a mailing list. Ask us to delete the correspondence and we will.

If you send a screenshot or an export to help us reproduce a bug, we use it for that bug and delete it afterwards.

When we build or run software for you

Client work involves two different kinds of data, and they are governed differently.

Data about you as a client. Names, work email addresses and phone numbers, company details, contracts, invoices, and the ordinary record of a project — briefs, notes, tickets, designs, correspondence. We hold it to do the work, to bill for it, and to keep the records a business is required to keep. We do not use it for marketing to anyone else and we do not sell it.

Data inside the systems we build for you. Your customers' data in your application is yours, not ours. We act on your instructions: we handle it only to build, fix, run or migrate the system, only for as long as that needs, and never for our own purposes. In the language of data-protection law you are the controller and we are the processor. Practically:

• We ask for the least access that will do the job, and prefer test or anonymized data where it will.
• Credentials you give us are kept out of anything we publish and are rotated or handed back when the work ends.
• We do not copy production data onto machines that are not part of the engagement.
• If you need a data processing agreement, or need us named in your own privacy notice, ask.
• If we become aware of a breach affecting your data, we tell you — promptly, with what we know — so you can meet your own notification duties.

If you are a customer of one of our clients and have a question about your data, ask that business: they decide what is collected and why. We will help them answer you.

Who else touches any of this

We keep the list short on purpose, and it is the whole list:

• Apple — the App Store, for every app we publish there, and the other Apple services an app uses or its annex names: iCloud sync, StoreKit, push notifications, Game Center, App Attest and Sign in with Apple.
• Twilio SendGrid — delivers the notification email when someone uses a form on this site (the inquiry form, or an app's support form), and any transactional email our own products send.
• Our email providers — host the inboxes those notifications, and any email you send us, arrive in.
• Google AdMob — shows the ads in Palette Party, It's Just Blackjack and the Hexponents iPhone and iPad app (Annexes I, J and H), under Google's privacy policy.
• aviationweather.gov — the U.S. National Weather Service's Aviation Weather Center, which ClearSky asks for the weather reports of the airports you follow (Annex G).
• Stripe and Google Sign-In — for Hexponents only: Stripe takes payments on its website, and Google verifies you if you choose Sign in with Google (Annex H).
• Our own servers — this website and our internal systems run on hardware we control, not on a third-party platform.

An engagement may require us to work inside infrastructure you have chosen — your cloud account, your CRM, your payment processor. Those are your vendors under your agreements with them, not subprocessors of ours.

Children

Nothing we publish is directed to children, and we do not knowingly collect information from one. In most of our apps that is easy to honor, because they collect nothing from anyone. Where an app's annex says it does collect something, that app is not directed to children under 13 either.

How long we keep things

Data in our apps lives on your device for as long as you keep it, and we hold no copy to expire, except for Tucked In's live features, Pet Papers' share links and Hexponents' accounts, whose retention is set out in Annexes D, F and H. For everything we do hold: inquiries and support correspondence are kept while the conversation is useful and deleted on request; client project records are kept for the life of the engagement and for as long afterwards as our contract, and tax and accounting rules, require; server logs are kept for a short operational window and are not archived. Ask us to delete something and we will, unless a law requires us to keep it — in which case we will tell you that is why.

Your rights

Wherever you live, you can ask us what we hold about you, ask us to correct it, ask us to delete it, or ask for a copy in a portable form. Write to Sales@DosSantosSystems.com. We do not charge for this, and we will not treat you differently for asking. If you are somewhere with statutory rights — the CCPA/CPRA in California, the GDPR in the UK or EU, or a comparable state or national law — those rights apply to whatever we actually hold, and we honor them regardless of where you are.

For our apps the honest answer is usually that we hold nothing, and the controls are already in your hands: the data is in the app, exports let you take it, and deleting the app removes the local copy — plus, if you used sync, deleting the app's data in your platform account removes the synced copy.

Security

Our strongest security measure is not holding your data. Where an app keeps everything on your device, its protection is your device's — passcode, encryption, and the settings on your platform account — which is why we prefer that arrangement over promising to guard a copy of our own.

For what we do hold: access is limited to the people who need it for the work, credentials are not shared or reused, our servers are kept patched, and anything reachable from the internet is served over TLS. No system is perfect, and we would rather say that than imply otherwise.

Where data is handled

We operate from the United States and our servers are in the United States. If you contact us or work with us from elsewhere, your information is handled here. For our apps, the question mostly does not arise: your data does not leave your device, and any sync is between you and your platform provider under their arrangements.

Changes to this policy

If we change what we collect, we will update this page with a new effective date, and we will do it before the change takes effect, not after. Material changes are also noted in the release notes of the product they affect.

Contact

DosSantos Systems LLC · 488 Pleasant St, Unit 1A, New Bedford, MA 02740 · Sales@DosSantosSystems.com

If you think we have got something wrong here, tell us. We would rather fix it than argue about it.

Annex A: PlaneCost: Track Airplane Cost

PlaneCost tracks what an airplane costs to own and fly. It follows the general rules above with no exceptions, which in practice means:

• Everything you enter — aircraft, costs, flights and notes — stays on your device. It is not sent to us.
• Premium is an auto-renewable subscription sold through the App Store using Apple's StoreKit. Apple takes the payment. The app asks Apple whether your subscription is active so it knows what to unlock; that check goes to Apple, not to us.
• It contains no third-party code for analytics, advertising or crash reporting.
• To reach us about PlaneCost, use its support form. Section 03 says what that collects.

Annex B: Sweep: The Screenshot Cleaner

Sweep helps you clear out old screenshots on your iPhone. It follows the general rules above with no exceptions. Its own privacy policy is the full account; in short:

• It collects no data. With your permission it reads the screenshots in your photo library, with their dates, their file sizes, and whether they are favorites or in an album. To find near-duplicates it works out an image fingerprint for each one with Apple's Vision framework, on your iPhone. If you give it access to only some of your photos, it sees only those.
• It keeps your choices, the fingerprints and file sizes, and your settings in its own storage on your iPhone. Deleting Sweep deletes them.
• It makes no network connections of its own. If you use iCloud Photos with "Optimize iPhone Storage", iOS may download a screenshot from your iCloud account so Sweep can show it to you. That is Apple's own photo sync, and the image comes to your iPhone, not to us.
• It is a one-time purchase through the App Store. Apple handles payment, and we do not receive your name, email address or payment details.
• It contains no third-party code for analytics, advertising or crash reporting.
• To reach us about Sweep, use its support form. Section 03 says what that collects.

Annex C: Payday Away: The Countdown App

Payday Away counts down to your next payday on your iPhone. It follows the general rules above with no exceptions. Its own privacy policy is the full account; in short:

• It collects no data. It uses what you enter: your pay schedule, your take-home pay if you choose to add it, how your widgets look, and your alert settings. It never asks for your bank details or connects to your bank.
• If you choose a photo for a background, you pick it in Apple's photo picker. Payday Away receives only that photo, and it does not ask for access to your photos. It keeps a resized copy on your iPhone for your widgets, and deletes it when no look uses the photo anymore.
• It keeps all of this in its own storage on your iPhone, where its widgets read it. Deleting Payday Away deletes it.
• It makes no network connections of its own. Its alerts are scheduled on your iPhone and never pass through us, and "Share the good news" goes only where you choose to send it.
• It is a one-time purchase through the App Store. Apple handles payment, and we do not receive your name, email address or payment details.
• It contains no third-party code for analytics, advertising or crash reporting.
• To reach us about Payday Away, use its support form. Section 03 says what that collects.

Annex D: Tucked In

Tucked In hands a sitter what they need for a visit and lets parents follow along. It departs from section 04 in one way: its live features, which are Tucked In Plus, store what they need on a server we run in the United States. Its own privacy policy is the full account. In short:

• Still no account. The app creates a random device key instead. There is no email or password, and no analytics, advertising or tracking code.
• What the server keeps. The visits you share (times, the sitter's name and phone number, notes, tasks, and the parts of your family library you include), what happens during a visit (check-ins, check-offs, messages, photos and Emergency screen actions), visit requests and message threads with sitters, a household's synced library if both parents use it, push notification tokens, and the purchase record Apple provides.
• Codes are protected. Door codes, alarm codes and Wi-Fi passwords are encrypted on the server, reach the sitter only from the start of the visit until the link expires, 12 hours after it ends, and are deleted then. Photos lose their location and other metadata before they are stored.
• How long. Visit photos are deleted 90 days after the visit, and message photos 90 days after they are sent. Visit history is kept until you delete your household, or for 90 days or a year if you choose that in Settings. The rest is kept until you delete your household, which the app does from Settings, erasing it from our server too. Web server logs are kept up to 60 days and encrypted nightly backups for 14 days.
• Who else touches it. Apple, for push notifications and App Store purchases, and SendGrid, for support messages.
• To reach us about Tucked In, use its support form.

Annex E: Just Invoices

Just Invoices helps you log your work for clients, send invoices and see who still owes you. It follows the general rules above with no exceptions. Its own privacy policy is the full account; in short:

• It collects no data. It uses what you enter: your business name, your name and your logo, how you get paid (your Venmo, Cash App, PayPal or Zelle details, and a mailing address or PO Box if you add one), your tax and invoice number settings, your clients' names, phone numbers and email addresses, the jobs you log, and your invoices.
• It keeps all of this on your iPhone, where its widgets read it. Deleting the app deletes it from your iPhone.
• iCloud, if you use it. Sync runs through your own private iCloud database, under Apple's privacy policy. We cannot see or open it. Without iCloud, everything stays on your iPhone.
• It uses Apple's pickers for contacts, photos and files, so it receives only the one contact, photo or file you choose, and it never asks for access to your address book or your photo library. To offer emoji logos, it checks on your iPhone whether an emoji keyboard is turned on, and that answer never leaves your iPhone.
• Apart from syncing with your own iCloud, it makes no network connections, to us or to anyone else. Invoices and reminders go only where you send them, through the share sheet, Messages or Mail. It does not process or see payments: those happen in the payment service your client uses, under that service's own policy.
• It contains no third-party code for analytics, advertising or crash reporting.
• Young people. It is made for anyone starting a first business, teenagers included. Because it collects nothing from anyone, it collects nothing from them either.
• To reach us about Just Invoices, use its support form. Section 03 says what that collects.

Annex F: Pet Papers

Pet Papers keeps your pets' records on your devices and in your own iCloud. It departs from section 04 in one way: a share link stores an encrypted copy of what you chose on a server we run in the United States, which we cannot read. Its own privacy policy is the full account. In short:

• Still no account. There is no sign-in. To make sure uploads come from the genuine app, your device registers a key with Apple's App Attest service, and our server keeps that key's ID, its public part and a counter.
• Encrypted on your device. A link's snapshot holds only the records and documents you chose, and your name and phone number unless you turn that off. It is encrypted on your device with a key that is part of the link itself, after the # sign, which browsers never send to a server.
• What the server keeps. The encrypted snapshot, the link's ID, a one-way hash of its management token, snapshot sizes and times, and when the link was opened (the 50 most recent opens, until you turn it off).
• Turning a link off deletes its encrypted data from our server and from every backup copy at once. We keep only a record that the ID was turned off, so it can never be reused.
• How long. Files a link update replaced stay readable for 10 minutes, and can stay in the nightly encrypted backup copies for up to 14 days. Database backups are kept for 14 days, and server logs, which hold no link IDs or IP addresses, for 14 days.
• Daily totals. We count how many shared pages are opened each day, and whether from a link or a QR code, and how many links are created, updated and turned off. These totals are not tied to a link, a device or an address.
• IP addresses are used only in memory to limit abuse, and forgotten within about an hour.
• It contains no third-party code for analytics, advertising or crash reporting.
• To reach us about Pet Papers, use its support form. Section 03 says what that collects.

Annex G: ClearSky: Airport METAR Widget

ClearSky shows airport weather in widgets. It departs from section 04 in one way: to get the reports, it connects to aviationweather.gov, the U.S. National Weather Service's Aviation Weather Center. Those requests name the airports you follow, and like any connection they reveal your IP address to that service. Your airports and settings stay on your device. Its own privacy policy says the same in full. To reach us about ClearSky, use its support form. Section 03 says what that collects.

Annex H: Hexponents: Daily Math Puzzle

Hexponents departs from section 04: it has accounts, and keeps your account and gameplay on a server we run in the United States. Its own privacy policy is the full account. In short:

• Your account. Your email address and display name, and a hashed password if you sign up with one. With Sign in with Apple or Google, a stable identifier and the email address from that provider.
• Gameplay. Your solves, streaks, progress and difficulty preferences, so you can pick up on another device, and the puzzles you make and the players you follow, if you use those features.
• Purchases. An identifier from Apple or Stripe that confirms Premium or a hint pack. Never your card or bank details.
• Reminders. A push token, if you turn on the daily reminder in the app.
• Logs. Server logs record the IP address, request path, user agent and time, for about 30 days.
• Ads. The iPhone and iPad app shows ads from Google AdMob unless you have Premium. To show and measure them, AdMob may collect device identifiers, your approximate location from your IP address, and information about the ads you see and tap, under Google's privacy policy. How Google uses information from sites or apps that use its services explains more. Apple requires an app to ask before it tracks you, and you can say no. The website shows no third-party ads.
• Who else touches it. Apple (the App Store, push notifications and Sign in with Apple), Google (Sign in with Google, and AdMob in the app) and Stripe (payments on the web).
• Your account and gameplay are kept while your account exists. To delete them, or for anything else, use its support page.

Annex I: Palette Party: Color Match

Palette Party is a game that tests how well you see color. It is free to play and shows ads, so it departs from section 04: Google AdMob shows those ads, and as the app's App Store privacy label says, it may collect your location, device identifiers, usage data and diagnostics, and may use them to track you across other companies' apps and websites.

• Your choice about tracking. Apple requires an app to ask before it tracks you. You can say no, or change your answer later in the Settings app, under Privacy & Security, then Tracking.
• Remove Ads. The in-app purchase turns the ads off.
• Game Center. Its leaderboards run on Apple's Game Center, under Apple's privacy policy. Your scores go to Apple, not to us.
• Google handles what AdMob collects under Google's privacy policy. How Google uses information from sites or apps that use its services explains more.
• To reach us about Palette Party, use its support form. Section 03 says what that collects.

Annex J: It's Just Blackjack

It's Just Blackjack is a casino-style Blackjack game played with virtual credits. Your credits and stats stay on your device. It departs from section 04 in one way: it offers optional rewarded ads from Google AdMob, which you can choose to watch for more credits. Its own privacy policy says the same in full.

• What AdMob may collect. To show and measure ads, Google AdMob may collect device identifiers, your approximate location from your IP address, and information about the ads you see and tap, under Google's privacy policy. How Google uses information from sites or apps that use its services explains more.
• Your choice about tracking. Apple requires an app to ask before it tracks you across other companies' apps and websites. You can say no, or change your answer later in the Settings app, under Privacy & Security, then Tracking.
• To reach us about It's Just Blackjack, use its support form. Section 03 says what that collects.