What we hold
A service business is built on its customer list. TankScope is designed so that we never hold yours in a form anyone can read — including us.
- Customers, addresses, phone numbers
- Your phone only.
- Tanks, readings, visits, notes, photos
- Your phone only.
- Invoices and payments
- Your phone only.
- Your voice, when you say the readings
- Turned into text on your phone, and kept there as a voice note with that visit so you can listen back. Never uploaded, never sent to your customer. It is in your backup file, locked with your passphrase.
- Cloud backups (Cloud plan)
- On our server, locked on your phone with your passphrase first. We cannot open them. Records only, not photos.
- Your account, if you sign in (optional)
- With us: your email address (and your name from Google, if you use Google), and your business's own details: its name, invoice prefix, time zone, phone, email, address and website, so another phone you sign in on fills them in. Nothing about your customers. Sign-in emails are sent through our email provider.
- Your email address (Cloud plan)
- With us and Stripe, to sign you in and bill the plan.
- Card details (Cloud plan)
- With Stripe only. We never see them.
- Your customers' cards (card autopay)
- With Stripe, on your own Stripe account — your customer enters the card on Stripe's page. Our server keeps only Stripe's reference numbers, amounts and invoice numbers: no names, no addresses.
The trade-off, said plainly
Because we cannot read your records, we cannot recover them for you. On the free plan the phone is the only copy unless you save a backup file. On either plan, forget the passphrase and a backup cannot be opened by anyone.
What goes over the network
The first time you use voice readings, the phone downloads its speech model (76 MB) from Hugging Face. The BSV payment option, if you use it, fetches an exchange rate, and the BSV wallet asks our server for its balance and passes on payments it has already signed, by the wallet’s address only: its key never leaves your phone. A customer paying in BSV opens a page whose link carries only your wallet address, the amount, the invoice number and your business name; it stores nothing. None of this carries anything about your customers. What you send a customer goes from your own email or messages.