Trade Quote — Estimate & PDF — Privacy Policy

Last updated: 29 October 2026 · Package: com.ibrahimtxy.ustateklif · Developer: bulbildir

1. What the app does

Trade Quote — Estimate & PDF keeps the records you enter and works them out for you. An example entry: Bathroom rewire · 4 items · 2 days.

The app reads nothing from the internet: it contacts no source, looks nothing up and has no account to sign in to. Every figure it shows is computed on this phone from what you typed.

2. Data we collect

The developer collects none. We run no server and receive nothing from your device — not your records, not your device identifier, not your usage, not crash reports.

What you share yourself. The email address and phone number fields are optional. What you type there is stored on this phone and printed on the PDF the app produces; it leaves the phone only when you send that PDF through the app you pick from the system share sheet. Because the document can leave the device, the Google Play Data safety section lists Email address and Phone number as data collected optionally, for app functionality. It is never sent to the developer and never shared with the advertising network.

The one exception is advertising, and the developer does not process that either: in the free tier Google serves the ads and may use your device's advertising ID (AAID) and IP address. See §5.

3. What is stored on your device

The records you enter, the settings you choose and the reminders you set, with the time each reminder last went off so that it is not sent twice. All of it lives in the app's private storage and is deleted when you uninstall the app.

4. Servers the app talks to

For its own work, none. The app contacts no source server: there is nothing to fetch. The only network traffic it makes is the advertising and purchase traffic described in §5 and §6, and the free tier is the only tier that makes the first of those.

5. Advertising

This section applies to version 0.1.0 and later. Earlier versions show no ads, contain no advertising library and read no advertising ID.

The free tier shows ads. They are served by Google AdMob; the developer does not choose what is shown and has no direct relationship with advertisers. The formats used are:

• Banner — at the bottom of the screen; it never covers your content.
• Rewarded — only when you tap the offer yourself; it relaxes free-tier limits for 24 hours.
• Native — a card inside the app's own screens, always marked with an “Ad” label.

Interstitial, rewarded interstitial and app open ads are no longer used; versions of the app released before 28 October 2026 also showed these formats.

• Paid members see no ads and no ad request is made — nothing leaves the device for AdMob, and no consent form is shown.
• To select, serve and measure ads, Google may use your device's advertising ID (AAID) and IP address. The developer never reads or stores that identifier; Google is the party that processes it.
• You can reset or delete the advertising ID in Settings › Google › Ads. The app keeps working if you do.
• In the European Economic Area, Switzerland and the United Kingdom, Google's certified consent form is shown before the first ad loads. You can change your choice later from the Privacy options link inside the app.
• How Google processes this data: policies.google.com/technologies/partner-sites

There is no analytics (Firebase Analytics and the like), no crash reporting (Crashlytics and the like) and no marketing tracker. How you use the app is never reported to the developer.

6. Permissions

7. Payment and membership

If you buy a paid membership, the payment is handled by Google Play. Your card details are never entered into the app and are never seen by the developer.

Monthly and yearly memberships renew automatically; Google Play charges your account at the start of each period. The lifetime membership is a one-off purchase and does not renew. You can cancel a subscription at any time in Google Play Store › Menu › Subscriptions; cancelling takes effect at the end of the period you have already paid for. Refunds are also handled by Google Play — the developer has no access to the payment.

The app has no server of its own. Whether your membership is active is read again every time the app asks Google Play (when you open the app and when you view the membership screen). That is why a cancellation or refund closes the membership the next time you open the app. If you changed device, Restore purchases on the membership screen brings back a purchase made with the same Google account.

8. Children

The app is not directed to children. The developer collects no data from anyone; the advertising data described in §5 is processed by Google.

9. Keeping and deleting your data

Everything the app stores stays on your device; there is no account and no server copy. Clearing the app’s storage, or uninstalling the app, deletes everything it has ever kept — nothing survives elsewhere, so there is no separate deletion request to make. A paid membership is held by Google Play, not by the app: it survives reinstalling and can be brought back with Restore purchases.

10. Changes

If this policy changes, the date at the top changes with it.

11. Contact

bulbildir@mail.com

12. This app in detail

The sections above apply to every app by this developer. What follows is written for this app only and describes exactly what it records, what it never records and what it will not claim.

SUMMARY
The developer receives none of your personal data. Everything it holds —
your jobs, your customers' names, addresses, phone numbers and email
addresses, the line items, prices and your own costs you type, discounts and
tax rates, the visit dates you plan, the dates and totals of the quote
revisions you send, a customer's approval signature and your own signature if
you take them, the payments you record, the invoices you issue and their
numbers, recurring invoice plans, the hours you time or enter, a site diary,
attachments you add, your logo, your price list and kits, the site photos and
videos and the SHA-256 digests and seals computed from those files — is stored
ONLY on your device. There is no account and no sign-in, and no network
connection is made in order to write a quote, to issue an invoice, to seal a
photo, to produce a PDF or to remind you about an unanswered quote, an overdue
payment or an invoice that is ready to send.

CUSTOMER DATA STAYS ON THIS DEVICE
Customer names, addresses, phone numbers, email addresses, prices and notes are
written to the app's private storage, which other apps on the phone cannot
read. They are never uploaded and never sent to us. Automatic cloud backup is
disabled (allowBackup=false), because a cloud backup would move your
customers' details onto someone else's server. A backup is made only when you
choose to write one, to a file you select yourself. The small backup contains
the LEDGER ONLY (jobs, lines, customers, price list, payments, invoices,
recurring plans, time records, photo times, digests and seals); the
full backup is a .zip file that also contains the photo and video files, the
attachments and your logo. Both go only where you save them. Restoring a full
backup checks every file name inside it and refuses a file that does not belong
there; a damaged file leaves your current data as it was. Restoring a backup
never moves the invoice counter back, so a number is not issued twice.

WHEN YOU SEND A QUOTE
The quote PDF is written into the app's own private folder and handed to the app
you pick from the system share sheet — WhatsApp, email, messages, a printer or a
file of your choosing. The receiving app gets a one-shot permission for that
document, the attachments sent with it and nothing else. We never see the
document, never see the recipient and never learn that you sent it; the app only
increments a counter on your own device. The PDF contains your business details
(your name, address, registration number, bank details, logo and signature if
you entered them, and the phone number and email address you entered, if any -
both fields are optional), your message to the customer, your customer's name,
address, phone and email, the lines and prices you typed, any discount, the tax
rates YOU entered, the payment terms, the list of attached documents, the file
names and digests of the site photos with small copies of the photos, and, once
a quote has been revised, the date and total of every earlier revision. If the
customer signed the quote on your phone, a last page carries their name, the
time of signing and the drawn signature. It does not contain your private job
notes, your site diary or your own costs. If you switch on "Send a copy to my
email", the email app you pick is asked to add your own address as a blind copy;
the app sends nothing itself. "Send as JPG" turns the same pages into images,
and "Print" hands the same PDF to the printing service you choose.

PAYMENTS AND RECEIPTS
You can record a payment you received yourself — cash, a bank transfer or your
own card reader. The amount, date, method and note are kept inside that job on
this phone, and a receipt PDF is made only when you send it. The app collects
NO payment, connects to no bank or payment provider, and a receipt is NOT a tax
invoice. An optional reminder tells YOU when a finished job's payment terms have
passed with money still owed; the app never messages your customer. The ready
payment-reminder text goes only where you send it. On a job with invoices, a
payment settles the oldest open invoice first and the receipt names the invoice
it paid.

INVOICES
An invoice is made only when you tap "Convert quote to invoice" or "Create
invoice". It copies the job's lines, taxes, discount, currency and payment terms
as they are at that moment and takes the next number from the prefix and
sequence YOU set in Settings (for example INV-0001). A wrong invoice is voided,
not deleted: it keeps its number and the reason you give, and a number is never
issued twice. The invoice PDF — your business details, the customer, the lines,
taxes and totals, what has been paid and the balance due — is written on this
phone and leaves it only when you send it. The tax rates on it are the ones YOU
entered; the app does not know any country's invoicing rules, files nothing with
any tax authority and is not an accounting or e-invoicing service.

RECURRING INVOICES
If you switch on a recurring plan for a job (every few weeks or months from a
start date, optionally for a set number of invoices), the phone issues each
invoice on its date — when you open the app or during the background check that
runs about once an hour — and shows YOU a notification:
"Invoices ready to send". Nothing is sent to your customer automatically: you
open the job and send the invoice yourself.

TIME RECORDS
The job timer stores only the moment you started it; nothing counts in the
background, no foreground service runs and no location is used. Hours you add
by hand are kept the same way, with an optional note. "Add to quote as labour"
turns the unbilled hours into one labour line at the hourly rate you set and
marks those records so they are not billed twice. The weekly timesheet CSV
(date, start, end, minutes, hours, customer, job reference, note, billed) is
made on this phone and goes only to the app or the file you pick.

THE CUSTOMER'S SIGNATURE AND YOUR OWN
The customer can sign a quote with a finger on your screen. What is kept is the
name they type, the time, and the drawn lines — stored inside that job on this
phone (and in a backup file only if you write one). It is printed only on the
PDF you choose to send. It records the customer's approval of that quote; it is
NOT a certified or cryptographic electronic signature and the app does not
analyse, compare or verify handwriting. If the lines, tax rate, validity or
currency of the quote change afterwards, the signature no longer applies and is
not printed. You can remove a signature at any time. Your own signature, if you
draw one in Settings, is kept the same way and printed at the end of your
quotes and receipts; you can remove it at any time.

CONTACTS
"From contacts" opens your phone's own contact picker. The app reads only the
one entry you choose — its name and phone number — through a one-time
permission the picker grants. It requests NO contacts permission
(android.permission.READ_CONTACTS is not in this package) and never reads your
address book.

SHARED MESSAGES
When you share text from another app to this app — a job request in an email
or a chat message — the text becomes a draft for a new job. It is kept only as
that job's private note on this phone; links in it are not opened and nothing
is sent anywhere.

ATTACHMENTS AND YOUR LOGO
A document you attach to a quote (a contract, a drawing, a plan) and the image
you choose as your logo are copied into the app's private storage and go only
where you send or save them. The logo is resized on this phone.

SPREADSHEET EXPORT (CSV)
"Share CSV" and "Save CSV" write one row per job — reference, customer name and
address, status, dates, visit, revision, materials, labour, tax and total,
whether a current signature is on file, discount, extra taxes, your cost and
profit, paid and balance, payment terms, due date, the customer's phone and
email, the invoiced amount, the numbers of its invoices and the minutes timed.
The file is made on this phone and goes only to the app or the file you pick.
Your private job notes are never included.

VISIT DATES AND THE CALENDAR
A visit date and time are text you type into a job. The app's Calendar tab only
shows those dates and the expiry dates of quotes awaiting an answer. "Add to
phone calendar" hands that one visit to your calendar app, which shows it to you
before saving. The app requests NO calendar permission and never reads or syncs
your phone's calendar. No reminder is sent for a visit.

THE CAMERA
The app does NOT request the camera permission
(android.permission.CAMERA is not in this package). When you tap "Add photo" or
"Add video", your phone's own camera app is opened through the standard system
action and it writes the picture or video directly into the app's private
folder, using a one-shot permission for that single file. The app never opens
the camera in the background and never records without you pressing the button.

NO LOCATION
This app requests NO location permission of any kind. A job's address is text
that YOU type. Coordinates would add nothing to a quotation and asking for them
would turn a pricing tool into something that follows a tradesperson around.

WHAT THE PHOTO SEAL IS
For every site photo and video the app computes a SHA-256 digest of the file and
stores it with the time, the time zone and the file size, then seals that
record to the previous one. Editing, removing or reordering a record makes the
seals stop matching, and the app says so. The file itself is never modified —
no date is burned into the image. The small photo copies printed in a PDF are
made for that document only; the digests always belong to the original files.
This is a local integrity mechanism, not a digital signature and not a trusted
timestamp authority: the times come from this phone's clock. The digests are
not secret; the whole point is that the customer you hand the quote to can
recompute them with a standard tool and check for themselves.

PRICES AND TAX ARE YOURS
The app ships with NO price list and NO tax rate. It does not know the VAT, sales
tax or any other rate for your country, your region or your kind of work, and it
never fills one in for you. Every rate, price, discount and quantity on a quote
was entered by you; the quote says so in writing. The app performs no pricing
and gives no tax, legal or financial advice. The quotes it produces are
QUOTATIONS, not invoices and not receipts: they create no tax record and
collect no payment. An invoice exists only when you issue one, carries the tax
rates YOU entered and is checked against no country's invoicing rules; the app
reports nothing to any tax authority and collects no payment.

INTERNET AND PERMISSIONS
The internet permissions (android.permission.INTERNET,
android.permission.ACCESS_NETWORK_STATE) are used for advertising only.
POST_NOTIFICATIONS, VIBRATE and RECEIVE_BOOT_COMPLETED are used for the quote
follow-up and payment reminders and for the "Invoices ready to send" notice of a
recurring plan, and WAKE_LOCK is added by the background work library while a
scheduled check runs. The advertising and measurement libraries
add com.google.android.gms.permission.AD_ID and
android.permission.READ_BASIC_PHONE_STATE to the package. Purchases use
com.android.vending.BILLING. The app requests NO external storage permission,
NO camera permission, NO contacts permission, NO calendar permission and NO
location permission.

ADVERTISING (Google AdMob)
The free version shows Google AdMob advertising. Three ad formats are used:
a bottom banner, a native ad inside the app's own content, and a rewarded
video you start yourself. There are no full-screen ads between screens or
when the app opens. AdMob may process identifiers such as the advertising
ID in order to serve ads. Users in the European Economic Area, the United Kingdom
and Switzerland are shown a consent screen through Google's
User Messaging Platform (UMP); you can change your choice later under
Settings > Privacy.
Google's privacy policy applies to AdMob's own processing:
https://policies.google.com/privacy

⚠️ Your customers' details, your prices, your notes and your photos are NEVER
shared with the advertising network. Ads are requested with no information
from your jobs.

PAID MEMBERSHIP
You can buy an ad-free membership through Google Play Billing. A paying member
sees no advertising at all: no ad is displayed and no ad request is even sent.
The paid plan also raises how many jobs you may keep open at the same time and
prints your branding on the quotes you send: your business name in the heading,
your tagline and your logo. Alternatively, watching a rewarded ad unlocks that
branding for 24 hours; it does not change how many jobs you may keep open, so a
job you are working on can never become inaccessible. Writing a quote, adding
photos and sending the PDF are NOT behind the paywall — only the branding and
the number of simultaneously open jobs are. Marking a finished job as Done never
deletes anything: the quote stays readable and can be sent again. Purchases are
handled by Google Play; the app never sees or stores your payment details, and
you can restore an existing purchase from the membership section.

DELETING YOUR DATA
A job with no sealed photos and no invoice can be deleted outright, with its
lines. A job that has sealed photos cannot: removing it would break the seal
chain and make every other job's photos look tampered with. A job that has an
invoice cannot either, because an issued invoice number must stay on record; a
wrong invoice is voided, not deleted. Mark such a job Done instead — that frees
a slot in your plan and keeps the record honest. A signature, a payment record,
a diary note, an attachment, a saved customer, a kit, a time record and your
logo can each be removed at any time. Uninstalling the app removes all of it:
the jobs, the customers, the invoices, the price list, the photos and the
counters. Nothing is kept anywhere else, because nothing was ever sent anywhere
else.

ACCURACY AND SCOPE
This app is a quoting, invoicing and record-keeping tool for one tradesperson.
It is not an accounting or e-invoicing service, not a payment provider and not a
legal or tax adviser, and it is not connected to any authority, wholesaler or
insurer. It shows that site photos have not changed since they were taken; what
a photo or a quote is worth in a dispute is decided by whoever reads it. Payment
collection, team management and calendar sync are deliberately outside this
version.

CHILDREN
The app is not directed at children.

CHANGES
This policy may be updated; the current version is published at:
https://bulbildir.it.name.tr/gizlilik/ustateklif.html

Questions: bulbildir@mail.com