Privacy Policy

Last updated: 16 October 2026

Who the controller is

The controller of your data is Top App, Rynek Główny 28, 31-010 Kraków, Poland, VAT ID PL6762666433 (“we”). For anything concerning your data, write to hello@topapp.pl — we answer within one month.

The short version

• You don’t need an account or an e-mail address. The app is issued an anonymous identifier, and that identifier is your account. Signing in with Apple is optional.
• We store what you enter and add: your project, budget, expenses, contractors, photos, receipts and invoices. That is your archive — so it stays on our server until you delete it.
• A receipt you scan is sent to an AI model (OpenAI) without your identifier.
• We do not track you for advertising, profile you, show ads, or collect your location.
• One button in Settings erases your account and your data.

What we process

Account

On first launch our server generates a random identifier (a UUID) and the app stores it in the system Keychain. Your projects hang off it. It contains nothing about you and survives deleting the app, which is how your projects come back after a reinstall.

If you choose to sign in with Apple, Apple gives us your Apple account identifier and — only if you allow it in Apple’s sheet — your first name, last name and e-mail address (which may be an Apple relay address). Your first name is shown to people you invite to a project.

Content you add

• Project: name, budget, currency, start date, rooms, stages and tasks, the handover checklist with defects, journal entries.
• Expenses: amount, date, shop or contractor, category, receipt line items, notes, warranty end date.
• Files: photos of receipts and invoices, contracts, before/after photos, defect photos, journal photos and the project cover. We keep them on our server because they are your archive of documents and warranties.
• Contractors: company or personal name, phone number, scope of work, contract value and payment schedule. This is third-party data that you enter — only add what you need to settle your renovation.

Receipt scanning (Luki)

When you scan a receipt or an invoice, the photo is stored on our server (it becomes part of your archive) and sent to an AI model together with the names of your rooms and stages, their planned and spent amounts, and the project’s currency and language — so Luki can suggest where the expense belongs. The model does not receive your identifier. The reading (amount, shop, line items) is saved with the expense. An invoice may show your own details (e.g. name, address) — if you don’t want that, cover them before taking the photo.

Technical data

• App language — so templates, messages and Luki’s comments come back in your language.
• Free-plan counters — so we know when the free allowance runs out.
• IP address — visible to our server on every request and written to server logs. We use it only to protect the service from abuse and to diagnose failures.

Payment reminders for contractors are local notifications — your phone schedules them, not our server.

Subscription

Payment is handled by Apple, and it is Apple — not us — that processes your payment details. We never see your card number. To check whether a subscription is active we use RevenueCat, which receives your anonymous identifier and the purchase record. All we store is the product identifier and the date the subscription runs until.

Sharing a project with a partner

If you invite someone to a project, they can see and edit the whole project: budget, expenses, contractors, photos, documents and the journal. The invitation is a link with a one-time code (created through Branch, see below) that you share yourself, however you like. You can remove a person from the project in Settings at any time.

Why, and on what legal basis

• Running your project, the archive, scanning, sharing, the subscription — performance of the contract you enter into by using the app (Art. 6(1)(b) GDPR).
• Contractor details you enter — your and our legitimate interest in settling the renovation (Art. 6(1)(f) GDPR).
• Security, rate limiting, server logs — our legitimate interest in keeping the service running and resistant to abuse (Art. 6(1)(f) GDPR).
• Matching an invitation link (Branch) — our legitimate interest in invitations working even after the app is installed (Art. 6(1)(f) GDPR).

Who we share it with

We use four processors:

• OpenAI (USA) — reading receipts and invoices. It receives the document photo and the project context described above, without your identifier. OpenAI states that API data is not used to train its models and is retained for up to 30 days for abuse monitoring. The transfer to the USA relies on Standard Contractual Clauses.
• RevenueCat (USA) — subscription management. It receives the anonymous account identifier and the App Store purchase record.
• Branch Metrics (USA) — project invitation links that open the app, including right after it is installed. When a link is created, Branch receives the invitation code and the link preview (the project name, and the inviter’s first name if they signed in with Apple). When the app starts and when a link is opened, the Branch SDK sends a device identifier scoped to the app (the identifier for vendor on iOS, a Branch install identifier on Android), the IP address and basic device data to match the tapped link. We set Branch to its minimal attribution level: no advertising identifier and nothing passed to ad networks. The transfer to the USA relies on Standard Contractual Clauses.
• Amazon Web Services — our server, database and files sit in Frankfurt, that is inside the European Union.

We do not sell data or share it with advertisers or data brokers. Apart from Branch in its minimal mode, used only for invitation links, we use no analytics or advertising tools.

How long we keep it

We keep your projects, documents and photos for as long as you use the app — we do not delete them automatically after a period of inactivity, because an archive of invoices and warranties is useful for years after the work is done. Server logs rotate out within days. Backups of the database and files are kept for 14 days and then overwritten.

How to erase your data

In the app: Settings → Delete account. That removes your account and every project you were the only member of, with all its expenses, photos and documents. Projects shared with a partner pass to them, because that data is theirs too; if you want those gone as well, delete the project before deleting your account, or write to us. It is immediate and irreversible. You can also delete single expenses, photos, entries and contractors in the app at any time, or write to hello@topapp.pl.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. Write to hello@topapp.pl. If you don’t sign in with Apple we don’t know who you are, so to act on a request we will ask you to point us to your project (e.g. its name and roughly when you created it) or to send the request through the contact option in the app.

You may also lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland — or with the authority in your own country of residence.

Children

Tynko is not directed at children under 16 and we do not knowingly collect their data. If you are a parent and believe your child has given us data, write to us and we will erase it.

Changes

We will announce material changes in the app before they take effect. The date of the last update is at the top of this page.

See also: Tynko Terms of Use.