AGM Apps ("we," "our," or "us") operates the Real-Time Salary mobile application for Android (the "App"). This Privacy Policy explains how we handle your information and protect your privacy when you use our App.
We are committed to your privacy. Your financial data belongs to you, and we have designed the App to keep your sensitive salary information secure and private.
When you use the App, you may enter the following information, all of which is stored locally on your device only:
We do not collect any personal information automatically. However, third-party services integrated into the App may collect certain technical information as described in Section 4.
The App offers two optional AI-powered features. Neither runs unless you start it. Both route through a server-side proxy hosted on Google Firebase Cloud Functions, which holds the AI API keys in Google Secret Manager so no key ever ships inside the App:
A note on which AI vendor: Discover previously used Anthropic's Claude API. It now uses Google Gemini. Anthropic remains configured as a standby fallback that we can switch on if the Gemini service becomes unavailable; if we do, your Discover queries would be forwarded to Anthropic instead. Both vendors' policies are linked in Section 4.4.
Our Cloud Functions do not store or log the content of your AI requests — no image, query, or earnings summary is written to any database or log we control. Once the response is returned, our copy is gone. What the AI vendor does with the request on its own systems is governed by its policy, linked in Section 4.4. Apart from these two features, which you start yourself, your locally-stored records are never automatically transmitted for AI processing.
Your financial data is never sold to third parties.
The App can save a backup copy of your data to your own Google Drive account. This is off until you turn it on, and nothing is uploaded until you tap Back up now.
If you use Flexible Schedule mode, you can record appointments that include a client's name and free-text notes. That is information about someone other than you, so it gets its own rules.
The free version of the App displays advertisements through Google AdMob. AdMob may collect and process the following information:
You can limit ad personalization or delete your advertising ID in Android Settings. The exact menu name varies by device and Android version.
For more information, see Google's Privacy Policy.
Android version 7.0.1 and later does not include the Firebase Analytics SDK. Earlier installed versions may use Firebase Analytics to understand how users interact with the App. In those versions, Firebase may collect:
Your salary figures, schedules, appointments, and client information are not sent to Firebase Analytics. We do not include a crash-reporting SDK. Removing Analytics does not remove the Firebase Cloud Functions and Firestore services described in Sections 3.2 and 4.5; those services receive the AI request content you choose to send. See Firebase's Privacy Policy.
If you are in the European Economic Area, the United Kingdom, or Switzerland, the App may present a consent form from Google's User Messaging Platform (UMP) when you first open it. Where the form applies, you choose whether to allow personalized advertising and can change that choice in Settings → Privacy Settings. When an age signal identifies someone below the age of consent, the App requests age-restricted ads without asking them to consent to personalized ads.
In Android version 7.0.1 and later, the App waits for the consent status and your purchase entitlement before explicitly initializing ad serving or requesting ads. If consent is declined, limited or non-personalized ads may still appear where permitted. Plus and lifetime access remove ads. Earlier installed versions may start advertising components while the consent form is still open; updating the App applies the newer sequence.
The Invoice Scanner sends your document images and the earnings summary described in Section 3.2 to OpenAI in updated app versions; older versions and the rollout fallback use Google Gemini. Discover sends your typed query to Google Gemini with Google Search grounding, which uses the query to run live Google Searches. Anthropic's Claude API remains configured as a standby for Discover. Every call is routed through our Firebase Cloud Functions proxy so the AI keys never ship inside the App. Each provider processes the request content under its own policy:
We use Google's paid Gemini API tier. Under Google's published terms for that tier, your requests are not used to improve Google's products or train its models; Google keeps them for a limited period solely to detect and prevent abuse, and may process them in any country where it operates. OpenAI states that API content is not used for model training by default; we set store: false for scanner requests, though its abuse-monitoring policy may still apply. Anthropic makes the same no-training commitment for its commercial API. We rely on those statements; we cannot independently verify what happens inside a vendor's systems, and we do not control how long a vendor retains a request. Apart from a scan or a search you start yourself, we send them nothing.
The Firebase Cloud Functions (proxyLuna, proxyGemini, proxyDiscover, and the standby proxyClaude) run on Google Cloud infrastructure under our Firebase project real-time-salary-ios (project name retained from initial iOS release; serves both platforms). They:
Firestore is used to cache the results of Discover searches so repeat queries can be served instantly without a new AI call. Each cache record holds the name of the person or job role searched and the AI-generated estimate — compensation figures, role, employer, a short source note, and the date it was fetched. It contains nothing about the person who searched: no user or device identifier, no search history, and no salary data of yours. The cache is a shared lookup table, so a result fetched by one user can be shown to another user who searches the same name.
If Discover shows information about you. Discover is meant for public figures and generic job roles, but the AI works from whatever name it is given and can get people wrong. If you believe Discover holds or shows information about you — whether you are a private individual, the result is inaccurate, or you simply want it gone — email [email protected] with the name as it appears in the App. We will delete the cached entry, and can block the name from being cached again. You do not need to use the App to make this request.
The App also integrates Unity Ads and Liftoff (Vungle) through LevelPlay mediation, with Google AdMob available on a separate fallback path. In Android version 7.0.1 and later, the App checks consent before initializing ad serving or requesting ads. Where GDPR consent is required, LevelPlay and the direct Unity and Liftoff paths are not used. Limited or non-personalized AdMob ads may still appear where permitted. An active ad provider may collect:
Refer to each network's privacy policy for full details:
The App offers an optional "Real-Time Salary Plus" subscription ($0.99 / month). When subscribed, you receive:
When you make a purchase:
Start with the shape of the risk: because the App has no user accounts and your salary, schedule, appointment, and finances data never reaches our servers, a breach of our systems could not expose that data. There is nothing there to take. The only things we could conceivably hold are short-lived operational logs and the Discover cache of names searched and AI estimates, neither of which identifies you.
If we do become aware of a security incident affecting personal information under our control, we will investigate immediately and:
We want to be straight with you about one limitation: we hold no email address or other contact details for you, so we cannot send you a personal message. Publication in the App and on our website is how you would be told. We would rather state that honestly than promise a notification we have no way to deliver.
The App is intended for working adults and is not designed for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information through the App, please contact us at [email protected] and we will delete it.
The AI features (the Invoice Scanner and Discover) are available only to users who are 18 or older, because our AI provider's terms require it.
Google Play Age Signals. On Android, the App asks the Google Play Services Age Signals API for an age range when available. We use its lower and upper bounds, not a birthdate, exact age, or identity information, to decide which ad treatment applies. For a confirmed underage range, the App sends an under-age treatment flag to Google's consent and ad services and keeps the other ad networks off. If the age range is unknown, the other networks also remain off. The raw range is not saved to persistent storage or sent to our servers. See Google's Privacy Policy.
The App is available worldwide. Your data is stored locally on your device in your own country. Third-party services (AdMob, Unity, Liftoff, Firebase, the AI providers, and Google Drive if you enable backup) may process data on servers in other countries, including the United States, according to their own policies.
If you are in the EEA, the UK, or Switzerland, the General Data Protection Regulation requires us to tell you the lawful basis for each thing we do. AGM Apps is the data controller; contact details are in Section 14.
| What we do | Lawful basis |
|---|---|
| Store your salary, schedule, appointments and finances data on your device so the App can work | Performance of a contract — Art. 6(1)(b) |
| Process an Invoice Scanner or Discover request you start | Performance of a contract — Art. 6(1)(b) |
| Upload a backup to your Google Drive | Your consent — Art. 6(1)(a). Off until you switch it on; withdraw by turning it off |
| Personalised advertising | Your consent — Art. 6(1)(a), collected through the UMP form and changeable in Settings |
| Limited or non-personalised advertising where permitted | Consent for device storage or access where required; otherwise legitimate interests — Art. 6(1)(f) — for limited ad serving where the law permits. You may object (Section 10) or remove ads with Plus. |
| Operational logs for debugging and abuse prevention | Legitimate interests — Art. 6(1)(f): keeping the service secure and working |
| Age signals used to restrict ads shown to minors | Legal obligation — Art. 6(1)(c), and child-protection requirements of the app stores |
Providing your salary information is not a statutory or contractual requirement — but the App cannot calculate anything without it. There is no automated decision-making producing legal or similarly significant effects, and no profiling of you.
Where a processor handles data outside your region, that transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision, as set out in that provider's own terms. Google (Firebase, AdMob, Drive, Gemini), OpenAI, and Anthropic publish theirs. Earlier installed versions may also use Unity or Liftoff/Vungle for advertising in GDPR regions. We have no servers of our own, so we do not transfer your data anywhere ourselves.
You have full control over your data:
This section applies if you live in a U.S. state with a comprehensive consumer privacy law — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, plus any other state whose law is in effect when you read this. Where a right below exists only under your state's law, we honor it for residents of that state.
Using the categories named in the California Consumer Privacy Act:
Your records stay on your device, except for the earnings summary sent when you choose to use the Invoice Scanner. We do not receive your full schedule, time-off, appointment notes, tips, or Real-Time Finances entries. A scanned document can itself contain names or other details. They live on your device, and in your own Google Drive if you switch on the backup. We hold no copy and have no way to look them up. We collect no Social Security numbers, no financial account or card numbers, no precise location, no biometrics, no health data, no contacts, and no messages.
We do not knowingly collect sensitive personal information and never use personal information to infer characteristics about you. An image you submit to the Invoice Scanner could incidentally contain sensitive content printed on a paystub — a Social Security number, a bank account number, a home address. Please crop or cover anything like that before scanning — and the same goes for other people's details, such as a client's address or account number printed on an invoice. We do not store submitted images.
We have never sold personal information for money and do not do so. But we are going to be straightforward about something a lot of apps word carefully: when personalized advertising is on, our ad partners receive your advertising ID and IP address and may use them to target ads to you in other apps. Under California law that counts as "sharing" for cross-context behavioral advertising, and under several other state laws it counts as "targeted advertising" or a "sale." We would rather tell you that plainly than rely on a narrow reading of the word "sell."
You can stop it at any time, free:
We do not sell or share the personal information of anyone we know to be under 16.
Where these web pages are read in a browser that sends a Global Privacy Control (GPC) or similar signal, we treat it as a valid opt-out of sale and sharing for that browser. Mobile operating systems do not send GPC to apps, so inside the App the equivalent is the device-level advertising opt-out described above — and we treat that device-level opt-out as a valid opt-out signal, as does every ad partner we use.
Email [email protected] with the request type in the subject line. We operate entirely online and deal with you directly, so email is our designated method. We will acknowledge within 10 business days and answer within 45 days, extendable once by another 45 with notice.
About verification: the App has no user accounts and we hold nothing tied to your name, so in most cases we genuinely cannot connect any record to you as a person. We will say so plainly rather than pretend otherwise, and we will treat a deletion request as an opt-out of sale and sharing. The fastest and most complete remedy is in your own hands: Reset All Data in Settings, or uninstall the App. That erases everything, immediately.
Authorized agents may act for you with your signed permission or a valid power of attorney. We may contact you to confirm it.
We may update this Privacy Policy from time to time. When we make changes, the "Last Updated" date at the top will be revised. Significant changes will be communicated through an App update notification. Continued use of the App after changes constitutes acceptance of the updated policy.
The App may contain links to external websites (such as our developer website, Google's terms, or third-party ad-network privacy policies). We are not responsible for the privacy practices of these third-party sites.
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
[email protected]Developer: AGM Apps · agmapps.net
For EEA Users: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.