Information We Collect
We collect only the data necessary to operate MarginTap. The table below lists every category we touch.
| Data | When | Why |
|---|---|---|
| Email address | Waitlist signup, account creation | To notify you at launch and authenticate you afterwards. |
| Display name & business name | Profile setup (after launch) | To brand quotes and invoices generated in-app. |
| Quotes, invoices, clients, line items | You enter them | Core functionality — stored encrypted on your behalf so they sync across devices. |
| Device information (model, OS version, app version) | App usage | Diagnostics, crash reports, and product analytics (aggregated). |
| IP address | API requests | Abuse prevention, rate-limiting. Not retained beyond 30 days. |
Information We Do Not Collect
- No payment or credit-card information. All payments are processed by Apple (App Store) or Google (Google Play) — we never see your card.
- No photo-library access without an explicit user action.
- No contact-list access. Clients are added manually in-app.
- No background location.
How We Use Your Information
- App functionality — generating PDFs, syncing your quotes/invoices across your devices, sending email notifications you opt into.
- Authentication & sync — Supabase Auth manages sign-in; data is stored in EU-region Supabase Postgres.
- Product analytics — anonymous usage metrics (which screens you visit, which features you use). No personally identifying analytics.
- Customer support — when you email start@djump.io we keep that thread to help you.
Data Storage and Security
Your data is encrypted at rest and in transit (TLS 1.3). Database hosted on Supabase, EU region (Frankfurt). Row-level security ensures users can only read their own rows. We do not sell your data to anyone, ever.
Third-Party Services
- Supabase — database, authentication, file storage (EU region)
- Resend — transactional email (waitlist confirmations, contact form replies)
- Vercel — landing-page hosting
- Apple App Store / Google Play — distribution + in-app payments
- Sentry — crash reporting (no PII in stack traces)
Your Rights (GDPR)
If you are in the EEA/UK, you have the right to access, correct, export, restrict processing of, or delete your data. Email start@djump.io or use the in-app export/delete buttons once the app ships. We respond within 30 days.
Children’s Privacy
MarginTap is for working tradespeople and not intended for users under 16. We do not knowingly collect data from minors.
Changes to This Policy
If we materially change this policy, we’ll bump the version above and notify you by email or in-app banner. The current version is always the one on this page.
Contact
Questions, requests, or data-access demands: start@djump.io. Operator: DJUMP, MB, Šilutės pl. 35G-36, LT-94105 Klaipėda, Lithuania.