AuditVault UK Privacy Policy

Effective 9 October 2026. This policy covers the AuditVault UK Android app, including development downloads, Google sign-in, receipt scanning, exports, subscriptions and advertising.

Who is responsible

NOVA BENEFICIA LTD, company number 17398965, is responsible for the app. Our UK registered office is 66 Paul Street, London, EC2A 4NA, United Kingdom. Contact contact@nova-beneficia.co.uk for privacy requests and support. AuditVault is independent of HMRC.

Your records stay on your device

Business and claimant details, optional company/tax identifiers, mileage, expenses, invoices, bills, payments, receipt images, scanned text and revision history are stored in a private database and folder for the signed-in account. Drawn report signatures are temporarily held in app cache. We do not automatically send these records to Firebase or advertisers. Android automatic backup is disabled. Google sign-in is not a record backup: uninstalling the app or losing the device can lose local records. Keep exports and original evidence.

Google sign-in and security

Google and Firebase process your account name, email, Google account identifier and Firebase user identifier for authentication and account management. We never receive your Google password. Firebase App Check and Play Integrity use app/device integrity signals to reduce abuse. Remote Config checks service availability. Providers may process IP addresses, device information and security or diagnostic data. The app does not include a separate Firebase Analytics SDK.

Receipt scanning and sharing

When you choose a camera or imported image, AuditVault copies it to the account-private device folder and uses bundled Google ML Kit to recognise Latin-script text on the device. Receipt images and recognised text are not uploaded to our backend. Review suggestions before saving. ML Kit may send app/device information, per-installation identifiers, performance, image format/resolution, usage events and error diagnostics to Google. Cancelled draft images are removed. Images selected from another app are not deleted from their original location.

PDF/CSV exports and images go to the Android destination you choose. Names and business records appear in reports; company number, UTR and VAT number are included only when selected. Exported files are not password-encrypted by AuditVault. Recipients and previously shared copies are outside our deletion controls.

AI removal and older versions

AuditVault UK 0.6.10 and later do not offer AI assistance or an AI chat box. The current 0.6.11 update does not send questions, conversations, receipt images or scanned text to a generative AI service. Older downloads may still display the retired feature; install the latest update and do not use that feature. Receipt-text recognition remains on your device.

If you used an earlier AI feature, any previously retained generated responses, reports, input hashes, quota counts and token-use metadata remain covered by the earlier retention limit of up to 90 days plus the next daily cleanup cycle, or account deletion where available. Contact us to request deletion of historical data. The removal does not itself erase records already held by a provider.

Google AdMob and privacy choices

Google AdMob supplies banner and optional rewarded ads. Google's User Messaging Platform checks privacy-choice availability on launch and obtains required choices before an ad request. Banners may appear on Home, Trips and Records after those checks; they are hidden during forms, scanning, dialogs and background use, and removed during an active rewarded pass or verified subscription. Rewarded ads are shown only when you choose them. Basic record features remain available when you decline or skip a reward.

Google may collect or use advertising/device identifiers, IP-derived approximate location, ad interactions, device/network information and diagnostics to deliver and measure ads and prevent fraud. Ad technologies may access device storage or use cookies, web beacons, IP addresses or other identifiers. We request non-personalised ads; these still process data and may require consent. We do not send business records, signatures or tax identifiers to advertisers and do not request GPS permission.

Where Google requires a privacy-options entry point, Settings → Ads & privacy choices lets you change your choices. Consent refusal may affect ad availability. Learn how Google uses information at Google's partner-site information page and review Google's Privacy Policy.

Where an older release uses server-side reward verification, a random session code is sent in Google's signed server callback. It contains no email, Google account ID or business identifiers. Our backend binds it to your account, checks the signature and ad unit, and removes reward-session records after 24 hours plus the next daily cleanup cycle, or on account deletion. Development downloads use Google test ads; test-ad passes unlock reports only and earn no advertising income.

Subscriptions, when activated

Google Play handles payment and subscription history. We receive purchase tokens, product and subscription state/expiry, and an account-binding identifier to deliver access and prevent receipt reuse. We do not receive full card details. Verification records remain while needed for the service. Deletion or uninstalling does not cancel billing: manage subscriptions in Google Play.

Purposes, providers and safeguards

We process account and optional service data to provide the service you request; security and anti-abuse data for our legitimate interests in preventing abuse and keeping the service reliable; and consent-dependent advertising/storage access on the basis of your choices. Legal obligations may require retention of limited payment/support records. We do not sell your business records or use them for ad targeting. Google/Firebase, Google Play, AdMob and ML Kit provide the services described above. Authorised company staff can access server verification, support and historical service data where necessary.

Providers may process data internationally under their applicable terms and transfer safeguards. Server connections use HTTPS and private backend security rules. Android app isolation protects local storage, but neither it nor exported copies is a guarantee against a compromised device.

Retention, deletion and your rights

Local records remain until deleted, the active account is deleted on that device, or the app is uninstalled. Account deletion removes the Firebase sign-in account and associated server account data when those services are active. Minimal hashed account/receipt anti-abuse markers may remain for up to 90 days plus the next cleanup cycle; Google retains its own payment records. AuditVault does not provide six-year cloud retention.

You can request access, correction, deletion, restriction or portability, or object to relevant processing, by contacting us. Rights depend on applicable law and circumstances. Where processing depends on consent, you can withdraw it without affecting earlier lawful processing. To delete without installing the app, see Data and account deletion. We verify control of the sign-in email; never send passwords or tax identifiers. You may raise a UK data-protection complaint with the Information Commissioner's Office.

Material changes are disclosed before affected processing. Return to Our Apps.