This Privacy Policy explains how Jay Wright, operating as The TM Toolkit ("we," "us," "our"), collects, uses, and protects information when you use Tour Expense and other apps in The TM Toolkit suite (the "Service"). It applies to tour managers, crew, and anyone else who interacts with the Service.
When you create an account, we collect your name and email address to authenticate you and identify your data within the Service.
Information you or your crew enter to use the Service, including photos of receipts, expense amounts, categories, vendor names, tour and date details, per diem records, and approval notes.
Crew members can submit expenses via a tour-specific link without creating a full account. This flow collects whatever the crew member enters — typically a name and receipt photo — tied to the tour manager's tour.
Subscriptions are purchased and billed entirely through Apple's In-App Purchase system. We never see or store your payment card details — those are handled by Apple. We receive purchase and renewal status (e.g. active, expired, product purchased) from our subscription-management provider, RevenueCat.
If you enable notifications, we store a device push token to deliver them. We may also collect basic technical information (such as app version) for support and debugging.
We do not sell your personal information, and we do not use it for third-party advertising or behavioral ad tracking.
We use a small number of service providers to operate the app. Each only receives the data it needs to perform its function:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, and file storage | Account info, expense/tour data, receipt photos |
| Anthropic (Claude API) | Reads receipt photos to auto-fill amount, vendor, and category | Receipt photo you submit for scanning |
| Apple (App Store) | Processes subscription payments | Payment details (Apple never shares these with us) |
| RevenueCat | Tracks subscription/entitlement status | Purchase and renewal events, app user ID |
| Resend | Delivers transactional emails | Recipient email address, email content |
These providers are contractually restricted from using your data for any purpose other than providing their service to us.
We retain your account and expense data for as long as your account is active, so your tour history and exports remain available to you. If you request deletion (Section 6), your data is fully erased within 14 days, except where we're required to retain records for legal or accounting purposes.
Data is encrypted in transit. Access to your data is restricted using row-level security policies, so accounts can only read and write their own data. No method of transmission or storage is 100% secure, but we take reasonable, industry-standard measures to protect your information.
You can download a copy of your data — every tour's expenses and per diem entries, plus every receipt and signature photo — anytime from Settings > Download My Data in the app.
You can delete your account and all associated data anytime from Settings > Delete Account in the app. Deletion takes effect immediately (you're signed out and locked out right away); the underlying data is fully erased within 14 days. You can also request access, correction, or deletion by emailing support@thetmtoolkit.com.
The Service is intended for working touring professionals and is not directed at children. We do not knowingly collect information from anyone under 13.
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above. Continued use of the Service after a change constitutes acceptance of the updated policy.
Questions about this policy or your data? Email support@thetmtoolkit.com.