Last updated: October 25, 2026

Scope. This Privacy Policy applies to N78-Ops on Android (the Android app store) and iOS (the Apple App Store), including the Basic, Pro, and Premier tiers where offered on each platform.

This Privacy Policy describes how Nivo78 Mobile Apps, LLC (“we,” “us”) offers N78-Ops (“the App”) and how the App handles information when you use our Android or iOS applications. It is provided to help you understand our practices and to meet the transparency expectations of app stores (including the Android app store and the Apple App Store) and applicable laws. If you do not agree with this policy, please do not use the App.

Disclaimer, taxes, and use at your own risk

Front-end tool; your accounting software is the single source of truth. N78-Ops is a front-end operations tool for organizing field work, quotes, scheduling, and customer handoffs. It is not an accounting system, a general ledger, or a bookkeeping service. Whatever accounting software you use (for example QuickBooks) is your system of record and the single source of truth for your books, balances, invoices, payments, and tax figures. N78-Ops only helps you capture and hand off clean data to that software; if the App and your accounting software ever disagree, your accounting software is authoritative. Reconcile, issue formal invoices, and file from your accounting software, not from N78-Ops.

Job-status transition limits (GAAP-oriented). The App restricts which job statuses can change into which others so field records stay aligned with sound accounting practice: completion locks the service/completion date used for revenue recognition; paid-in-full and declined jobs stay closed historical records; and you cannot rewrite invoice or payment history by flipping a status. Corrections use explicit refund, returned-payment (NSF), or bad-debt actions that map to proper accounting documents—not silent status edits. The allowed/blocked transition matrix and a short explanation appear in in-app Help under Job status & ledger guardrails and in the public support center on nivo78.com.

Not professional advice. N78-Ops is a software tool to help you organize business records. It is not legal, accounting, tax, or financial advice.

Store and portal independence. N78-Ops is not affiliated with, endorsed by, or sponsored by Google, Apple, Microsoft, Intuit/QuickBooks, or other store or accounting portals.

Your tax responsibility. You enter tax rates and business data in the App. The App may calculate display lines from rules you configure, but you are solely responsible for all taxes and related obligations—including sales and use tax, income tax, payroll tax, estimated payments, filings, remittances, penalties, and any other tax or regulatory requirements. We do not prepare, file, or remit taxes for you.

Provided as-is; your risk. The App is provided “as is” and “as available.” Your use of N78-Ops and any decisions you make based on information in the App are at your own risk. To the fullest extent permitted by law, we disclaim warranties and are not responsible for data loss (including lost or corrupted business records, failed backups, or device problems), business losses, income or revenue losses, tax outcomes, missed deadlines, or other harm arising from your use of the App, except where applicable law requires otherwise.

Real business data. If you use the App with live clients, quotes, and financial records, you are responsible for accuracy, backups, device security, and verifying totals before you rely on them or send them to customers.

1. Who we are

N78-Ops is the public product name for this application on Android and iOS. The app is published by Nivo78 Mobile Apps, LLC. On Android, the package identifier is com.nivo78.ops on the Android app store. On iOS, the App Store bundle identifier is the one shown with your install (development builds may use a team-specific bundle ID). Both platforms share the same product name and this privacy policy.

For privacy inquiries, use the contact path described in Section 13 below.

2. Information the App processes

Business and account data you enter. The App is designed to work primarily on your device. Information you add—such as clients, quotes (including scheduling dates, expected job duration, and start times), tasks, notes, expenses, job photos you attach to quotes, mailing and service addresses (street, city, postal/ZIP or Eircode, and phone), and related business records—is stored locally on your device unless you enable optional cloud features or take an action described below. Profile and client country fields support mailing for the United States, Canada, the United Kingdom, Ireland, Australia, and New Zealand. Country choice formats address and phone fields only; it is not a tax, VAT, or GST engine.

Default: data stays on your device. Your personal and customer business records remain on the phone unless you choose to move a copy elsewhere. Nivo78 does not receive your full client or quote database, and there is no background upload of your business data. Data may leave the device when you: send email or SMS from handoffs the App opens; turn on Hosted quote and invoice links in email (off by default) and send a quote, invoice, or receipt while online; share or export files; enable optional scheduled on-device backup (Premier, where offered); purchase a subscription through the platform store (the Android app store; Apple In-App Purchase on iOS where offered); or send feedback mail you compose.

Exports, backups, and sharing. When you run export, backup, accountant-pack (ZIP), or similar flows, the App writes files to locations you choose (for example through the system document or Files picker, or your email app). Full portable backups are verified Bkp_*.zip archives in the App’s backup hub (documents/N78-Ops locked storage). Each backup is a normal ZIP file: password-protected backups store an AES-256-GCM encrypted snapshot inside the ZIP using the master password you set in the App (the same password used for restore); plain backups store a readable JSON snapshot inside the ZIP without encryption. Anyone who obtains a plain backup ZIP can open it and read that JSON. The App no longer creates standalone plain Bkp_*.json files; older Bkp_*.json backups from prior versions may still restore. On Android, when you create a full backup, the App may also write a mirror copy to My Files Documents/N78-Ops on the device. On iPhone, the same hub folder is also visible in the Files app under On My iPhone → N78-Ops when file sharing is enabled. The App verifies each full backup can decode before marking it successful. For each export you choose password-protected or plain for that run only. Password-protected files use the master password you set during setup (the same password used for restore)—not a separate per-export password. Plain exports are readable by anyone who receives the file. Recovery key. When you set a master password, the App shows a one-time recovery key. Store it off this device. The App keeps only a one-way check of that key on the device—not the key itself—and never sends it to Nivo78. The recovery key lets you set a new master password if you forget; it does not reveal the old password and does not open old password-protected files. After you use it, a new key is created and the old one stops working. There is no email, phone, or support reset. Client spreadsheet CSV exports cannot restore the App—only full backups can. Pro and Premier Secure storage sealed entries are not included in portable backups—unlock Settings → Secure → Secure storage and Copy each sealed value before a phone swap. Job photos linked to quotes are included in full backups when the files are on this device. Accountant-pack ZIP files always include spreadsheet and HTML quote files on tiers that offer that export; optional QuickBooks import files are included only when QuickBooks export is enabled in Settings → Data & backups (or Data & files on paid tiers). We do not receive copies of those files unless you deliberately send them to us.

Quote, invoice, and receipt delivery. When you email a quote, invoice, or receipt and Hosted quote and invoice links in email is enabled under Settings → Quote & invoice options (it is off by default):

• Hosted view link (when online). If your install supports hosted delivery, your device can reach our document service, and the generated page is within size limits, the App may upload a single HTML view of that quote, invoice, or receipt to infrastructure operated by Nivo78 Mobile Apps, LLC on nivo78.com. The upload includes the formatted document (line items, totals, taxes, terms, validity text when shown, your business name, and an embedded business logo when you use one on the document) plus limited metadata used to operate the service: document type, quote identifier, client name as you entered it, and the recipient email you chose for that send. The App places a view link in the email draft for your customer. Anyone who has that link can open the page until it expires or is revoked (default 30 days from upload unless a shorter period is sent). After that, hosted quotes, invoices, and receipts are removed from the host and the link stops working. Links use long random identifiers; we do not publish a directory of hosted documents.
• PDF on your device (fallback or PDF-only). If you are offline, the host is unreachable, the page is too large, upload otherwise fails, your mail app cannot open with the view link in the body after a successful upload, or your tier uses PDF-only delivery, the App builds a PDF on your device and hands it to your mail or share app. We do not store that PDF on Nivo78 servers for that send.

Share PDF, print, text, or other channels that do not use the hosted upload path follow PDF or plain-text behavior for those flows. You choose when to send; review the draft in your mail client before sending.

When you enable Copy me on client texts and emails in Settings → Profile (off by default), client email drafts may include your business email in Bcc. Client texts address only the client phone. Your mail and messaging apps send the message; we do not receive a copy unless you send it to us.

In-app feedback email. If you use a feedback screen and send mail through your own email app, we receive the message you compose. The compose body includes a short intro; the full structured report is attached as a plain-text (.txt) file (or placed in the message body if the attachment cannot be saved on your device). That report includes a device and app version block for triage (operating system such as Android or iOS, whether the device is a phone or tablet, and the hardware model—not a user-assigned device name), plus aggregate counts (clients, quotes, invoice-sent status, tasks, expenses, and similar), non-identifying profile preferences (for example date format, clock style, scheduling defaults), registry toggle flags, and a redacted error and warning log kept on the device. On Android 11 or newer, the report may also include short redacted crash or ANR process-exit summaries from the operating system (reason, time, and a truncated trace preview; not a full crash dump). iPhone does not attach Android-style process-exit blocks. Bug reports also include a remount-gate trail (last Home or safe-route phases and busy reason codes only—no client names) so a crash mid-remount can be located after restart. On iPhone TestFlight (beta) builds only, Bug reports may also append a comprehensive TestFlight flight log (navigation routes, control taps, remount phases, and lifecycle events—no client names) persisted on the device for crash recovery; App Store production iPhone builds do not include that log. Optional Include data diagnostics may also append a redacted registry key list (presence and size only). The report does not include full client lists, quote line items, dollar amounts, or complete business record dumps. Review the attachment or message body in your mail client before sending.

We do not sell your personal or business data to data brokers. We do not use your information for third-party advertising or behavioral ad profiling. The App does not read advertising identifiers for ads and does not read phone state for advertising or analytics. On Android, Google Play Billing libraries may try to declare the Google advertising ID permission; release builds of N78-Ops remove that permission so the App does not use an advertising ID.

Payment-related data. The App does not collect or process your customers’ credit or debit card numbers for job payments. When you collect payment outside the App (cash, check, card reader, payment link, etc.), those providers’ terms apply to their checkout—not to card data inside N78-Ops. Platform store billing may process annual in-app subscriptions for Pro and Premier tier upgrades where your install supports them (see Sections 5 and 6).

Tax. You enter tax rates and business data on your device. Quote tax lines are calculated from the rules you configure in the App. All tax remittance, filings, and compliance with federal, state, local, and other authorities are your sole responsibility.

3. Permissions and device access

The App may request access only as needed for features you use. Exact permission names and dialogs differ by platform (Android vs iOS):

• Network (Internet): For store billing where applicable, hosted quote, invoice, and receipt view links when you email documents and the device is online (upload to the nivo78.com document service), opening help or policy pages you choose, and other online functions you initiate.
• Phone calls: In-app Call buttons open the system Phone app with the number filled in. The App does not place the call itself and does not request Android Phone permission (CALL_PHONE). You complete or cancel the call in the Phone app.
• Text messages (SMS / Messages): The App does not send texts in the background. When you choose to text someone (for example a quote summary), the App opens your normal messaging app with the recipient and draft message filled in—you send from there.
• Biometric authentication: Optional use of fingerprint or face unlock (or device credential / passcode) to protect sensitive areas, via the operating system’s biometric APIs (including Face ID / Touch ID on iOS where offered).
• Calendar (read): If you grant it, the App can read calendar events on your device for scheduling assistance (for example busy-time and conflict hints on the schedule screen), restore-time conflict checks when you restore from a backup, and related flows you start. Calendar read is requested at runtime when a feature needs it—not silently on every cold start. New events: when you add a job to your calendar, the App opens your calendar app with a prefilled event so you can review and save it (no silent write to your calendar database from the App). Calendar contents are not uploaded to us for advertising.
• Calendar (remove events): The App does not silently delete calendar events. If a device-calendar row no longer matches an in-app job, the App opens that event in your calendar app so you can delete or edit it there.
• Location (precise / approximate): On Pro and Premier, if you use mileage GPS tracking and grant location permission, the App may read device location on this phone only to log trip miles. Location is not uploaded to Nivo78 servers. You can deny permission and enter miles manually. While a GPS trip is active, the App may temporarily store the last GPS fix on the device to calculate the next distance segment; committed mileage rows store miles, not coordinates or a route history. Active-trip GPS data is omitted from standard portable backups.
• Background location (Premier automatic only): If you choose Premier and Settings → Mileage options → Start tracking → Automatic (vehicle Bluetooth), N78-Ops may collect location even when the App is closed or not in use (Android “Allow all the time”; iPhone “Always”) so GPS can start when the saved work-vehicle Bluetooth connects. GPS starts only for a work-related drive already on the schedule. Personal drives do not start GPS. On iPhone the work vehicle is the Bluetooth name(s) entered on that screen (a car, or another Bluetooth audio device). On Android the work vehicle is a paired device plus a one-time companion confirmation. Trip distance stays on this phone. Nivo78 does not receive live location. Manual GPS does not require Always / all-the-time permission. On Android, the App shows an in-app disclosure and requires Continue or Cancel before the system permission prompt. On iPhone, the explanation is on Mileage options when Automatic is selected and on the system Location sheet.
• Foreground location service (Android): While an active GPS mileage trip is running, Android may show an ongoing notification and keep a foreground service with location type so tracking continues when the screen is off. Stopping the trip ends that service.
• Background location updates (iOS): While an active GPS mileage trip is running on iPhone, the App may continue location updates in the background. Stopping the trip ends those updates.
• Bluetooth and companion device (Android Premier): Optional vehicle Bluetooth pairing may request BLUETOOTH_CONNECT so you can pick a paired device, and a one-time companion device confirmation so Android allows starting mileage tracking from the background when that vehicle connects. Bluetooth identifiers stay on the device; they are not sent to Nivo78.
• Vehicle Bluetooth (iOS Premier): Optional automatic mileage may use Bluetooth (including CarPlay audio) to match the Bluetooth name(s) entered for the work vehicle and to detect connect and disconnect. iPhone shows a system Bluetooth usage notice for that purpose. Identifiers stay on the device; they are not sent to Nivo78. The App does not use Bluetooth for advertising or to track other people.
• Notifications: The App may request notification permission for optional accounts-receivable chase reminders, job head-out / arrival reminders, and overdue-backup reminders (on Android 13 and later via POST_NOTIFICATIONS; on iOS via the system notification prompt when those features are used). These run on your device only. No marketing push notifications are sent.
• Exact alarms (Android): The App may use SCHEDULE_EXACT_ALARM (or the system alarm-clock path) so job head-out reminders fire at the scheduled local time. Alarms stay on the device.
• Files and storage: Your business data is kept in the App’s private storage on the device (not a public scan of your whole phone). When you export, back up, attach photos, or save a file, the system may ask you to pick a location or image using the platform document, Files, or photo picker—you choose the item, and the App reads or writes only what you selected. The App does not use broad “read all files on the device” access for routine operation.
• Keychain / secure storage (iOS): Sensitive secrets and secure configuration may use the iOS Keychain or equivalent platform secure storage on the device. Contents are not uploaded to Nivo78.
• iOS privacy manifest (required-reason APIs): On iPhone, the App includes Apple’s privacy manifest. The operating system may access on-device app preferences, file timestamps, available disk space, and system boot time so the App can store settings, write files, and check storage. Those APIs run on the device. They are not used for tracking or advertising. The App does not declare tracking domains.

You can allow or deny several of these in system Settings (Android Settings or iOS Settings); some features may be limited if permission is denied.

4. Optional scheduled backup (Premier)

Optional scheduled backup on Premier runs on a schedule you set under Settings → Backup settings (or Backup folder) and writes verified Bkp_*.zip files to documents/N78-Ops on the device—password-protected when your master password is available in the App session, otherwise plain ZIP archives with readable JSON inside. On Android this uses WorkManager; on iPhone it uses a system background refresh task when iOS allows it. Manual encrypted full backups use AES-256-GCM inside the ZIP when you choose password-protected export from Data & backups. This is an on-device schedule—not a Google Drive or iCloud sync built into N78-Ops. If you later copy backup files into Drive, iCloud Drive, or another cloud folder yourself, that provider’s policy applies to the copy you made.

5. Payments: job payments and store billing

Job and client payments. N78-Ops does not provide an in-app card form for your customers’ job payments. If you use a third-party processor, reader, or payment link outside the App, that provider’s privacy policy governs their checkout.

Android — app store billing may process annual in-app subscriptions for Pro and Premier tier upgrades when your version of the App offers them and your install supports Android app store billing. Google’s privacy policy applies to that checkout experience. We do not receive your full payment card number from the Android app store; payment processing is handled by Google and the card networks.

iOS — Apple In-App Purchase may process annual in-app subscriptions for Pro and Premier when offered on the App Store build. Apple’s privacy policy applies to that checkout experience. We do not receive your full payment card number from Apple.

Basic tier. The Basic plan is free forever and does not require a subscription. Pro and Premier are optional annual paid upgrades through the platform store for that install (Settings → Plan & subscription where billing is available). We do not receive your full payment card number from Google or Apple.

6. Third-party services (summary)

The App may rely on services including, where applicable:

• Google (Play services, Play Billing, and related Play libraries on Android) — policies.google.com/privacy
• Apple (App Store / In-App Purchase and related Apple services on iOS) — apple.com/legal/privacy

Those providers process data under their own policies when their SDKs, APIs, or servers are used by the App or by your configuration. N78-Ops does not integrate Google Sign-In or Google Drive APIs for backup in the builds described by this policy.

7. Security

We use industry-standard protections where applicable, including Android’s EncryptedSharedPreferences and iOS Keychain (or equivalent platform secure storage) for sensitive app configuration, and encryption appropriate to high-sensitivity content (for example AES-GCM for certain vault-style data). Hosted document upload and customer view pages are served over HTTPS. No method of storage or transmission is 100% secure; you should protect device access with a strong screen lock / passcode and treat view links like sensitive business correspondence—anyone with the link can read the page until it expires or is revoked.

Secure storage clipboard. When you copy a sealed vault value, N78-Ops clears that text from the system clipboard after about one minute on Android, iOS, and desktop—unless you copy something else first. The App does not re-display sealed values on screen after save; copy is the handoff path.

8. Biometric authentication

Sensitive areas may use biometric unlock (fingerprint or face) or device PIN/pattern/password through the system. Biometric data is processed on your device by the operating system; we do not receive a copy of your fingerprint or face template.

9. Calendar

This section supplements Section 3. Calendar read access is used only for features you use (scheduling, conflict awareness, restore checks) and is not used for marketing. New calendar entries are created through your calendar app after you confirm.

10. Legal acceptance record

Before you use core workflows, the App shows a one-time Legal & Privacy gate. When you accept, the App stores a small record in its private on-device storage (encrypted app registry) under the key used for legal acceptance. That record includes: the disclosure version you accepted, the time of acceptance, and the app version shown at acceptance. The App uses the disclosure version to re-prompt you when legal disclosures change materially. This acceptance record is not included in portable backups or restores. Uninstalling the App removes it with other application data according to the operating system’s normal uninstall behavior (Android or iOS).

11. Data retention and deletion

Data you create remains on your device until you delete it in the App, use built-in reset or wipe options where available, or uninstall the App (which removes application data from the device according to Android or iOS uninstall behavior). Optional copies you move off the device (exports, backups you copy into cloud folders yourself) follow the storage location you chose.

Hosted quote, invoice, and receipt pages. When you use optional hosted view links, a copy of the formatted HTML may sit on our document host on nivo78.com until the expiration time (typically 30 days after upload) or until revoked. After that, hosted quotes, invoices, and receipts are removed from the host and the view link stops working. Your authoritative business records remain on your device unless you delete them in the App.

Deleting data in the App. Removing business records (for example clients, quotes, tasks, or vault entries) and using factory reset require explicit confirmation in on-screen dialogs: a stray tap alone should not erase data. You can cancel those dialogs to leave information unchanged. Factory reset uses three warning steps; on the final step, if you configured a master password, you must enter it and tap Reset data (the password is checked when you confirm). If you never set a master password, Reset data is available on that final step after the warnings, with no password field. On Android, factory reset also clears mileage GPS permission prompt state and the work-vehicle companion link; on Android 13 and newer it revokes Location (including Allow all the time) and restarts the App so those prompts appear again. On iPhone, Location Always / When In Use stays under system Settings until you change it there.

How to request deletion of data we may hold. Email support@nivo78.com to ask us to delete personal data we may still hold from optional hosted view links or prior support or feedback email. On-device business records are removed only on the device (delete in the App, Settings → Backup & Export → Backup & data settings → Factory reset, or uninstall). Hosted quote, invoice, and receipt pages are also removed from the host automatically (typically within 30 days) or when revoked.

12. Children’s privacy

The App is intended for business users and is not directed at children. We do not knowingly solicit personal information from children under 13 (or the age required by your region). If you believe we have inadvertently collected such information, contact us and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy in the App and at https://nivo78.github.io/N78-Public-Legal/pages/N78-Ops.privacy.html, and update the “Last updated” date. Continued use of the App after changes means you accept the updated policy.

14. Contact us

Questions about this Privacy Policy: email support@nivo78.com. You may also use the developer contact options on the N78-Ops Android app store or Apple App Store listing where the App is published (for example Contact developer / App Store support links).

Terms of Use for N78-Ops are published at https://nivo78.github.io/N78-Public-Legal/pages/N78-Ops.terms.html and are also linked from the in-app Legal & Privacy gate and Settings.

Nivo78 Mobile Apps, LLC
Tyler, Texas