Privacy Policy

This privacy policy explains how Hoist ("the app") collects, uses, and protects your information. Hoist is operated by BullForge Labs Ltd ("we", "us", "our"), a company registered in England and Wales.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data we collect

Account data: email address and password (optional, only if you create an account for sync features).

Business data you enter: client details, job information, invoices, quotes, receipts, mileage records, expenses.

Photos you take: receipt scans are processed on-device using Apple’s Vision framework; image files are stored locally unless you sync via iCloud.

Anonymous diagnostics: if you opt in, crash reports and performance data via Apple’s standard iOS analytics. Never tied to you personally.

How we use your data

All your business data is used solely to power the app’s features for you — generating invoices, tracking mileage, calculating job costs. We never sell, share, or monetise your data.

Where your data lives

By default, all data is stored locally on your iPhone. If you enable iCloud sync, data syncs via your personal iCloud account — we have no access to it.

If you create a Hoist account for enhanced sync features, encrypted data is stored on servers within the UK or EU.

Your rights under UK GDPR

You have the right to access your data, correct inaccuracies, delete your data, restrict processing, and object to processing. You can exercise any of these rights by contacting us.

You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have mishandled your data.

Data retention

Local data remains until you delete the app or clear it from settings. If you have a Hoist account and request account deletion, all associated data is permanently deleted within 30 days.

Third-party services

Apple: iCloud (if enabled), App Store purchases, iOS analytics.

Apple Vision framework: receipt OCR is processed on-device using Apple’s machine learning. No data leaves your device.

We do not use Google Analytics, Facebook SDK, or any advertising trackers.

Children’s privacy

Hoist is a business tool for adult tradespeople and is not intended for use by anyone under 18.

Changes to this policy

If we make significant changes, we will notify you via the app or email. The last updated date at the top of this page will reflect any changes.

Contact

To exercise your data rights, ask questions, or raise concerns, contact BullForge Labs Ltd at admin@bullforgelabs.com.