Privacy Policy

01Information we collect

What we collect depends entirely on which app you are using, so this section is organised app by app. Most of our apps keep your content on your device. Where an app sends anything — a usage measurement, a crash report, or data that has to reach a server for the app to work — we say so plainly and explain exactly what it sends.

• Nothing leaves the device: Offline Voice Notes & Summary, and Keepsake unless you turn on Keepsake Cloud.
• Optional end-to-end encrypted cloud, no analytics: Keepsake (Keepsake Cloud backup, sync and family sharing, from version 0.3.0).
• Your content stays on the device; usage and crash analytics only: Focus Dashboard, Simple Invoice & Estimate, and Refoto (only if you say yes).
• Optional cloud features, plus analytics: Simple CRM (sign-in, backup, sync and crew only if you choose them), Openslot (online booking and the web version only if you switch them on).
• Use our cloud by design, plus analytics: Storyboard: Family Organizer (family sync), PhotoWall (TV pairing).

Usage analytics and crash reports in our apps

The released Android versions of Focus Dashboard, Storyboard, PhotoWall, Simple CRM, Simple Invoice & Estimate and Openslot use Google Analytics for Firebase and Firebase Crashlytics. Refoto uses them only if you agree when it asks. We use them for one purpose: to learn which parts of an app are used and to find and fix crashes.

• What is sent: which screens are opened; that an action happened (for example, an invoice was created, a photo was sent to a TV, or an upgrade screen was shown), described by fixed labels and counts; crash and error reports with the technical details needed to fix them; standard device and app information — device model, Android version, app version, language, and a coarse location (country or region) that Google derives from your IP address; and a random identifier for the app installation, which changes if you reinstall.
• What is never sent: the content you create or store. No names, contact details, client or customer records, invoice amounts, notes, bookings, photos, recordings or file names, and no text you type. Your precise location is never part of analytics.
• No advertising: none of our apps show ads or collect the Android Advertising ID — that permission is deliberately removed from every app — and analytics data is never used for advertising or shared with advertisers.
• Development and testing: analytics are switched off in development builds and on Google's automated pre-launch test devices.
• Retention and deletion: Google keeps analytics event data no longer than the retention period set in our Google Analytics account (at most 14 months) and crash reports for 90 days. To have the analytics for your installation deleted, email support@nextlayertechnology.net and tell us which app.

Data processed by FocusDashboard

FocusDashboard is designed to be a private, on-device experience.

• Local Storage: Your custom profiles, widget toggles (Clock, Timer, Quotes), color preferences (HSV values), and scale settings are stored locally on your device. We do not collect or transmit this data to our servers.
• Music controls: The music widget shows what is playing and lets you pause or skip, with any music app. It relies on Android's notification access, which you grant yourself in system settings; FocusDashboard uses that access only to read the now-playing information on your device. It does not sign in to any music service and sends none of this anywhere.
• Sound visualizer: Android requires the "record audio" permission for its sound visualizer. If you turn the visualizer on, the app uses that permission only to read sound levels on your device to draw it; nothing is recorded, stored or sent.
• Weather: If you use the weather widget, the city name you type is sent to Open-Meteo, a free weather service, to fetch the forecast. The app does not ask for your location.
• Analytics: usage and crash analytics as described above.
• In-App Purchases: When you unlock premium styles, the transaction is processed securely through the respective app store provider (e.g., Google Play Billing). We do not collect or have access to your payment details. We only receive a verification token to unlock the feature on your device.

Data processed by Storyboard: Family Organizer

Storyboard is a private, shared space for your family. Unlike FocusDashboard, it syncs data between your family members' devices through our cloud infrastructure, so the family can see the same board, calendar, and lists.

• Account Information: When you sign in with Google, we receive your name, email address, and profile photo. These identify you to your family members inside the app.
• Content Your Family Creates: Photos, sticky notes, voice notes, and stickers placed on family boards; calendar events; chores and completion streaks; meal plans, recipes, and grocery lists; and entries in the family care log (medicine and vitamin names, doses, who they are for, and when a dose was given). This content exists so your family can see it. It is visible only to members of your family group.
• Health Cards: Storyboard does not ask for, and cannot store, a health-card or public-insurance number. An earlier version of the Care tab had a field for one; we removed it, because holding a government identification number is not a risk worth asking a family to carry for a wall planner. There is no such field in the app today.
• Care Profiles (optional, for grown-ups): If your family uses the Care tab, a parent can also record a family member's date of birth, blood type, allergies, ongoing conditions, doctor and pharmacy details, care notes, appointments, growth records, and blood-work results you enter yourself. Storyboard is not a medical device, and health information is never used for advertising, never sold, and never used to decide anything about you.
• Documents You Choose to Save: Each care profile has a place to keep pictures of paperwork — a health card, a prescription label, a lab report — so it is to hand at an appointment. These are photographs you take and add yourself; the app never scans, reads, or extracts anything from them, and it does not go looking for documents on your device. They are stored in your family's own private storage, readable only by the grown-ups in your family, never shown on the fridge display, and never sent to our AI features or included in a web address. They are deleted with the profile when you delete your account.
• Location Information (optional): If you enable location sharing, we collect your device's precise location to show your position on the family map and to power location-based reminders. Storyboard asks only for location while you are using the app; it does not request background location, so your position is not collected when the app is closed. Your location is visible only to members of your family group, and family owners can turn off map visibility for child members. Location sharing is entirely optional and you can revoke the permission at any time in your device settings.
• Device and Usage Information: A push-notification token so family members' devices can notify each other, plus basic analytics about feature usage and crashes so we can fix problems and improve the app. Analytics are never used for advertising.
• Install Referrer: If you install Storyboard from a family invite link, Google Play passes us the invite code so we can pre-fill it for you on first launch. This does not include browsing history or any other data.
• AI Features (optional): Some features (meal suggestions, board suggestions) send relevant context, such as your family's dietary preferences and recent meals, to Anthropic's API to generate a suggestion. This happens only when you use the feature, only the minimum context needed is sent, and results are cached for your family. The app is fully functional without AI features. Health information is never sent to our AI features: care profiles, medications, blood-work records and anything saved to a member's documents stay in your family's own storage and are never included in any AI prompt.

Data processed by PhotoWall

PhotoWall runs on your television, and a television has no keyboard — so the app uses a small pairing service of ours, hosted on Cloudflare at photowall.nextlayertechnology.net, to let you choose photos from your phone and have them appear on the TV.

• Pairing: When you pair a TV, we create a short-lived pairing session identified by a code shown on screen. It exists so that the phone you are holding and the TV in front of you can be matched to each other.
• Photos you choose to send: If you upload photos from your phone, those images are stored in our storage so that your TV can fetch and display them. They are used for nothing else — we do not scan them, analyse them, use them to train anything, or show them to anyone but your paired screen. They are removed when you remove them from the pairing page or unpair the TV.
• Google Photos: If you connect Google Photos, you pick the photos yourself in Google's own picker and we receive access only to that selection, using a token held for your pairing. PhotoWall never asks for, and cannot obtain, access to your whole Google Photos library.
• Apple shared albums: If you use a public Apple shared album, we hold the album link you give us so the TV can read that album. Anyone with that link can already view the album; we do not make it more public than it already is.
• In-app purchases: The one-time collage-pattern unlock is processed by Google Play Billing. We never see your payment details.
• Analytics: usage and crash analytics as described above — for example, that a TV was paired or a photo was sent, never the photo itself.

Data processed by Simple CRM

A dedicated page for this app is at nextlayertechnology.net/simple-crm/privacy. Simple CRM works entirely on your phone unless you choose otherwise, and without an account nothing leaves it.

• Optional sign-in: Sign in with Google or Sign in with Apple. We keep only the account identifier and an email address (with Apple, possibly a private relay address). No password exists to store.
• Backup, sync and crew (plans): while you are signed in and on a plan, your business records — customers and their contact details and addresses, projects, jobs, appointments, estimates, invoices, payments, costs, mileage and your price book — are stored on our server on Cloudflare so your other phones and your crew can reach them. Before, during and after photos and receipt images are never uploaded.
• Customer invite links: details a customer types into an invite form wait on our server until your app collects them, then are deleted; unused links expire after 14 days.
• Subscriptions: bought through Google Play; our server receives the purchase token to confirm the plan with Google, never your payment details.
• Analytics and crash reports: the Android app uses Firebase Analytics and Crashlytics to count feature use and report crashes. These never include the contents of your records.

Data processed by Simple Invoice & Estimate

A dedicated page for this app is at nextlayertechnology.net/simple-invoice/privacy. Your business details, logo, tax settings, clients, estimates and invoices are stored on your device with no account and no cloud copy. We do not collect them, and we could not read them if we wanted to. The only things the app sends are the usage and crash measurements described above — for example, that an invoice was created or exported, never what was on it. Sharing an invoice PDF hands the file to your own share sheet; where it goes from there is your choice. Pro upgrades are handled by Google Play Billing, which does not give us your payment details.

Data processed by Keepsake

Scanned documents, photographs, generated PDFs, folders and the text recognised from your pages are encrypted with AES-256 on your device using a key held in your phone's hardware-backed keystore, are gated behind your fingerprint or PIN, are excluded from Android's own cloud backups, and are securely wiped when you delete them. Scanning and text recognition run on the phone. Up to version 0.2.0 Keepsake declared no internet permission at all. From version 0.3.0 it has one, used only for Keepsake Cloud, and nothing is sent unless you sign in and turn Keepsake Cloud on. Keepsake sends no usage analytics or crash reports: the Firebase libraries in its code are switched off, and it has no advertising ID.

Keepsake Cloud (optional subscription). When you turn it on, you sign in with Google, and we keep your Google account's identifier and email address. Before anything is uploaded, your phone encrypts every file and every record — names, tags, folders and recognised text included — with a vault key that is created on your phone and never sent to us in a form we can open. The server stores only that ciphertext (on Cloudflare), along with who belongs to which vault, how many items there are, how large the encrypted files are and when they changed. Your recovery key, which opens the vault on a new phone, stays with you; because we never have it, we cannot recover your backup if you lose it. If you share a vault, the owner invites people with a one-time code; members can see each other's email addresses, and anything already synced to a member's phone stays on it if they are removed. The subscription is billed by Google Play; we receive a purchase token to confirm it, never your payment details. A dedicated page for Keepsake is at nextlayertechnology.net/keepsake/privacy.

Data processed by Openslot

Openslot starts entirely on the device the business runs it on: services, business hours, team members, rostered shifts, appointments and client records are stored locally and sent nowhere. If you switch on online booking, the app keeps a copy of your book on our servers — a database rented from Supabase in its Canadian region, served through Cloudflare — so your public booking page, your phone and the web version at nextlayertechnology.net/openslot/app show the same book. That copy holds your shop's details, your team's display names, services, shifts, bookings, and clients with their contact details and your notes. The public booking page is shown only your shop, team names, services and which slots are taken, never who took them. People who book through your page enter their name, phone number and an optional note, which become part of your book. A shop needs no account: your phone creates a random key and we store only a one-way hash of it, and each paired browser gets its own key, which you can revoke from the phone. People who book can, if they choose, sign in on the booking page with Google or an email address (through Supabase Auth) so the form fills itself and they can see and cancel their appointments at any shop that uses Openslot; for them we keep the account's email address and the name and phone number they save. Booking without signing in works exactly as before. Turning off online booking deletes the server copy at once. The Android app also sends the usage and crash analytics described above, which never include your clients or appointments; the web version sends no analytics. Because the client names, phone numbers and notes you keep in Openslot are records about your own customers, you remain their custodian under whatever privacy law applies to your business. A dedicated page for Openslot is at nextlayertechnology.net/openslot/privacy.

Data processed by Offline Voice Notes & Summary

Voice Notes declares no internet permission at all, so it cannot transmit anything, even in principle. Your recordings, the transcript produced on your phone by the speech model shipped inside the app, the structured summary generated from that transcript, and any edits you make to either all stay in the app's private storage on your device. Transcription is done on the device rather than by a cloud service, which is why it works in airplane mode; nothing you record is used to train anything, because we never receive it. Android's automatic cloud backup is switched off for this app, so your notes are excluded from Google Drive backup and from device-to-device transfer as well. A dedicated page for Voice Notes is at nextlayertechnology.net/voice-notes/privacy.

Data processed by Refoto

Refoto photographs printed pictures with your camera and restores them, and every part of that runs on the phone: the capture, the detection of each print in the frame, the measurement of fade, colour cast, speckling and softness, and every restoration stage. Your photographs, the restored copies and the app's library of them stay in the app's storage on your device, and the images you save go to your own photo library or your own share sheet because you chose to send them there. No photograph is ever uploaded, nothing is used to train anything, and there is no account. After your first scan, Refoto asks once whether it may send anonymous usage statistics through Google Analytics for Firebase and Firebase Crashlytics: how many prints a scan found and how many you kept, whether a restored photo was saved or shared, which screens were opened, and crash details. Until you say yes it sends nothing, and you can change your answer at any time with the privacy button on the library screen. Photographs, thumbnails, file names and titles are never sent. Android lists "full network access" for Refoto because of the Google Play Billing library, which handles the one-time unlock and never sees a photograph, and those optional statistics; Refoto has no server of its own. A dedicated page for Refoto is at nextlayertechnology.net/refoto/privacy.

Data collected on our website

When you visit the NextLayer Technology website or contact us by email, we may collect:

• Personal Identification Information: Your name, your email address, and anything else you choose to include, if you email us. The website has no contact forms, no accounts, and no shop, so there is nothing else for it to collect.
• Visit statistics, without cookies: We use Cloudflare Web Analytics to count page views, referring sites, and the browser, device type and country of visits. It sets no cookies, stores nothing on your device, does not build a profile of you or follow you across other sites, and is not used for advertising.
• Hosting: Cloudflare serves this website and, like any web host, processes your IP address to deliver pages and protect the site from attacks.
• No advertising: This website shows no ads and runs no advertising or cross-site tracking scripts.
• Web fonts: The typefaces used on this site are requested from Google Fonts, which receives your IP address as part of serving those files.

02How we use your information

We use the information we collect strictly to provide and improve our services:

• To provide the Storyboard service: syncing your family's content between family members' devices, sending notifications your family triggers, delivering invite emails you ask us to send, and powering optional AI features.
• To provide the PhotoWall pairing service: matching your phone to your television and delivering the photos you selected to that screen.
• To respond to support requests you send us.
• To understand feature usage in aggregate, fix crashes, enforce our usage limits, and keep our services secure.
• To verify premium feature unlocks within our apps.

03Who can see your Storyboard information

• Your family group: content and (if enabled) location are shared with members of the family group you joined. Family owners control member roles and can limit what child members can access. If you join more than one family board, each board's content is visible only to that board's members.
• Care profiles are for grown-ups: only members with a parent or grandparent role in your family can open, add to, or edit care profiles and the documents saved with them. That limit is enforced on our servers by security rules, not just by hiding the screen — a child's account cannot read this data even outside the app.
• No one else: Storyboard data is not public, not searchable, and not visible to other Storyboard users outside your family.

04Third-party services

We do not sell, trade, or rent your personal information. We use trusted service providers to operate our apps and business; they process data on our behalf and may not use it for their own purposes:

• Google Firebase (Google LLC): database, file storage, sign-in, push notifications, analytics, and crash reporting for Storyboard; usage analytics and crash reporting (Google Analytics for Firebase and Crashlytics) for Focus Dashboard, PhotoWall, Simple CRM, Simple Invoice & Estimate and Openslot on Android, and for Refoto if you agree.
• Anthropic: generates AI suggestions in Storyboard when you use AI features.
• Twilio SendGrid: delivers Storyboard invite emails you send.
• Google Maps: renders the Storyboard family map.
• Open-Meteo: supplies the forecast for the city you enter in Focus Dashboard's weather widget.
• Supabase: hosts the server copy of an Openslot book, in its Canadian region, when online booking is switched on, and the optional sign-in for people who book.
• Cloudflare: website hosting and DNS, cookie-free Web Analytics for this website, delivery of Openslot's booking page and web version, the serverless compute, database and object storage behind the PhotoWall pairing service, and the Simple CRM sync server, and the Keepsake Cloud server (which stores only end-to-end encrypted files).
• Google Sign-In and Sign in with Apple: optional sign-in for Simple CRM; Google Sign-In is also used by Keepsake Cloud and offered to people booking through an Openslot booking page.
• Google Photos: supplies only the photos you select in Google's own picker when you connect PhotoWall to Google Photos (subject to Google's Privacy Policy).
• Google Fonts: serves the typefaces used on this website.
• App Stores: app distribution and in-app purchases.

We may disclose information if required by law or to protect the rights and safety of our users.

05Children

Storyboard is a family app: parents may add their children to the family group as Child members. Accounts are created with Google Sign-In, and the app is intended to be set up and administered by adults. Family owners control what Child members can access, including whether children can see the family map or the care log. Care profiles and any documents saved with them are stricter still: they are visible only to parent and grandparent roles, never to Child members, and that rule is enforced on our servers. We do not knowingly collect personal information from children outside of a family group administered by a parent or guardian. If you believe a child has created an account without parental involvement, contact us at support@nextlayertechnology.net and we will delete it.

06Data retention and deletion

Website data is retained only as long as necessary to fulfill the purposes above, such as answering a support ticket.

Content kept only on your device — everything you create in Focus Dashboard, Simple Invoice & Estimate, Keepsake, Voice Notes and Refoto, in Openslot without online booking, in Keepsake without Keepsake Cloud, and in Simple CRM when you have not signed in — is stored on your device and nowhere else. Uninstalling one permanently removes everything it held, and because there is no cloud copy, we cannot restore it for you. Please keep your own export or backup of anything you cannot afford to lose.

Keepsake Cloud can be switched off at any time in Keepsake (Settings, then Keepsake Cloud). The owner of a vault can delete its cloud copy there, which removes every encrypted file from our servers at once; deleting your Keepsake Cloud account in the same place also removes your sign-in, and for an owner the vault. Documents on your phone are not touched. You can also email us from the address you sign in with.

Simple CRM accounts can be deleted at any time in the app (Settings → Cloud & team → Delete my account on Android; Business → Account → Delete account on iPhone) or by emailing us from the address you sign in with. Deletion removes your sign-in, your sessions and, if you own the business, its whole cloud copy and your crew's access to it. Records on your phone are not touched.

Openslot online booking can be turned off in Settings, which deletes the server copy of your book at once — clients, bookings, the booking page and every paired browser's access. Your phone keeps its own copy. If you can no longer reach the phone, email us and we will delete the server copy for you. People who signed in to book can have their account deleted by emailing us from that address.

Analytics and crash reports are kept by Google for at most 14 months (analytics) and 90 days (crash reports). Email us with the app name to have the data for your installation deleted sooner.

PhotoWall keeps a pairing session and any photos you uploaded only so your television can display them. Removing photos on the pairing page or unpairing the TV deletes them, and pairing sessions that fall out of use are cleared automatically. A Google Photos connection can be revoked at any time from your Google account's third-party access settings.

Storyboard data is retained while your account is active. You can delete your Storyboard account at any time:

• In the app: Settings, then Account, then Delete account.
• On the web (no app required): storyboard-app-10f93.web.app/delete-account.html

Deletion removes your profile, your location history, your care profile (medications, conditions, blood-work records and any documents saved for you), your reminders, and your family memberships. If you are the last member of a family, that family's board and all its content are deleted. Photos and notes you posted to a board that still has other members remain part of that family's shared space; that content belongs to the family, and the family owner can remove it. Anonymized analytics that cannot be linked back to you may be retained.

07Security

Storyboard data is encrypted in transit and at rest on Google Cloud infrastructure, and access is enforced by server-side security rules: your content is readable only by authenticated members of your family group. We implement reasonable security measures across our services to protect against unauthorized access, alteration, or disclosure. Where an app keeps your content only on your device, it takes a different approach to the same goal: there is no server copy of that content to breach. Keepsake encrypts every file with AES-256 under a key held in your phone's hardware-backed keystore, and its optional cloud backup is end-to-end encrypted, so a breach of our servers would expose only data we cannot read. No system is perfectly secure, but privacy is a design requirement of our apps, not an afterthought.

08Your rights

Depending on where you live (including the EU/EEA, UK, California, and Canada), you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. Storyboard's in-app deletion tool covers most of these; for anything else, contact us using the information below and we will respond within 30 days. We do not discriminate against users who exercise privacy rights.

09International transfers

Our apps' infrastructure runs on Google Cloud and Cloudflare, primarily in the United States; the server copy of an Openslot book is held by Supabase in Canada; and app analytics and crash reports are processed by Google, primarily in the United States. By using our services, you understand your information is processed there, protected by the safeguards described in this policy.

10Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our apps or legal requirements. For material changes affecting Storyboard, we will notify users in the app before they take effect, and we will always update the date at the top of this page.

11Contact us

If you have any questions or concerns about this Privacy Policy or how our apps handle your data, please contact us at:

NextLayer Technology
Email: support@nextlayertechnology.net
Website: nextlayertechnology.net