Privacy Policy

Float Business ("we", "us") is an independent, sole-proprietor product. This policy covers the Float Business web app: the finance dashboard at /dashboard, and the public Discover directory at /submit and /dashboard/discover.

Contact for anything in this policy: floatapp.help@gmail.com.

Account data — email address, and password (hashed) or Google account identifiers, if you sign in with Google.

Financial dashboard data — whatever you enter yourself: expenses, sales, invoices, customers, journal entries. This is your business data; we don't independently verify it.

Discover submission data — if you submit a product, we collect your name, email, product details, and, if you connect Gumroad, your published product list and revenue figures via Gumroad's API.

Gumroad connection data — an OAuth access token that lets us read your published products and revenue. We never see your Gumroad password.

Technical data — device/browser type, pages visited, and product usage events, collected via PostHog. Error data — stack traces and request context when something breaks, collected via Sentry.

Cookies/local storage — used for session auth and to remember your light/dark theme preference. Not used for advertising.

To run the dashboard: calculate what's safe to withdraw, store your records, and keep your session signed in.

To run Discover: review your submission, publish it if approved, and let visitors browse listed products.

To fix bugs and understand product usage, via Sentry and PostHog.

To contact you about your submission, account, or material changes to this app.

If you're in the EU/UK, our basis for processing is: performance of a contract (running your account and dashboard), and legitimate interest (fraud prevention, product analytics, error monitoring).

You can request access to, correction of, or deletion of your data at any time by emailing floatapp.help@gmail.com. We'll respond within 30 days.

If you're in California, you have the right to know what's collected and to request deletion under the CCPA. We do not sell personal data.

Supabase — hosts our database and authentication.

Google — if you use Sign in with Google.

Gumroad — if you connect your Gumroad account for Discover.

PostHog — product analytics.

Sentry — error monitoring.

We don't sell your data, and we don't share it with anyone beyond what's needed to run the product above.

Account and dashboard data is kept as long as your account is active. Rejected Discover submissions and their associated Gumroad tokens are deleted on request. Email floatapp.help@gmail.com to close your account or remove a submission.

We use industry-standard practices — including database access controls and, for stored OAuth tokens, encryption — but no system is 100% secure. If you believe your data has been exposed, email floatapp.help@gmail.com immediately.

Float Business isn't intended for anyone under 18. We don't knowingly collect data from minors.

We're based in Kenya and use US/EU-based service providers (Supabase, Google, Sentry, PostHog). By using Float Business, you consent to your data being processed in these locations.

We'll update the date below if this policy changes materially, and post the update here.