A whole lot of stuff

PRIVACY_POLICY.md

@@ -0,0 +1,92 @@
+# Privacy Policy — Show Me The Fuel Refund
+
+**Effective date:** August 17, 2026
+
+This policy explains what "Show Me The Fuel Refund" (the "app") does and does not
+do with your data. If anything here is unclear, contact
+**ohbrer+ShowMeTheFuelRefund@gmail.com**.
+
+## Overview
+
+The app helps you collect and organize Missouri fuel purchase receipts so you can
+claim Missouri's Motor Fuel Tax Refund. It has no server or backend of its own —
+every vehicle, fuel receipt, and photo you log is stored locally on your device,
+and optionally backed up to a cloud storage account **you** choose and control.
+We (the developer) never receive, see, or have access to a copy of your data.
+
+## Data Stored Locally
+
+The app stores the following on your device only, unless you connect a cloud
+storage account (see below):
+
+- Vehicle information you enter (VIN, nickname)
+- Fuel purchase records (date, gallons, price, total cost)
+- Receipt photos you capture or select
+
+This data is never transmitted to us. Uninstalling the app, or never connecting a
+cloud backup, means this data exists only on that device.
+
+## Optional Cloud Backup
+
+If you connect a cloud storage account in Settings, a copy of the data above is
+also stored there — in storage **you** control:
+
+- **Google Drive** — via Google Sign-In and the Drive API
+- **Dropbox** — via the Dropbox API
+- **Microsoft OneDrive** — via the Microsoft Graph API
+- **WebDAV** — your own self-hosted server (Nextcloud, ownCloud, or similar)
+
+For OAuth-based providers (Google Drive, Dropbox, OneDrive), the app requests
+only the permissions needed to create, read, and write files in a folder it
+manages there. We do not read, log, or have access to anything stored in these
+accounts — the connection is directly between your device and the provider you
+chose. For WebDAV, your server credentials are stored using your device's
+OS-level encrypted storage (Android Keystore) and are used only to connect
+directly to the server you specify.
+
+## Advertising (Google AdMob)
+
+Unless you've purchased "Remove Ads for a Year," the app shows a single
+interstitial ad, at most once per app session, via Google AdMob. AdMob may
+collect data such as an advertising identifier and coarse, IP-based location to
+serve and measure ads. This collection is Google's, governed by
+[Google's own privacy policy](https://policies.google.com/privacy) and
+[AdMob's data disclosure](https://support.google.com/admob/answer/6128543) — it
+is not something this app adds on top of, and we have no access to it.
+
+## In-App Purchases
+
+"Remove Ads for a Year" is processed entirely through Google Play Billing. We do
+not receive or store payment information — that's handled by Google Play
+directly.
+
+## What We Don't Do
+
+- No analytics SDKs
+- No crash-reporting SDKs
+- No tracking of your usage or behavior
+- No server of ours that receives, stores, or processes your data
+- No selling or sharing of data with anyone, for any reason
+
+## Data Deletion
+
+You can delete your data at any time from **Settings > Data > Advanced**
+(purge all data, or a specific date range), and disconnect any cloud storage
+account from **Settings > Data**. Deleting the app removes everything stored
+locally; anything already backed up to your own cloud storage account remains
+there under your control until you delete it yourself.
+
+## Children's Privacy
+
+This app is not directed at children under 13 and does not knowingly collect
+data from them.
+
+## Changes to This Policy
+
+If this policy changes, the effective date above will be updated. Continued use
+of the app after a change constitutes acceptance of the updated policy.
+
+## Contact
+
+Questions, problem receipts/VINs, or error reports:
+**ohbrer+ShowMeTheFuelRefund@gmail.com**