Privacy Policy

This policy applies to those five web apps, at brain-squid.web.app, the-timetabler.web.app, folder-fabricator.web.app, invested-interest.web.app and quid-vault.web.app.

It does not apply to Book’d Off, the Android app. That is a separate application with its own policy — read the Book’d Off privacy policy.

These apps run in your browser and work on files held on your own device. There are no accounts and nothing to sign up for. We do not receive, store or hold a copy of your notes, timetables, spreadsheets, portfolio or bank statements, and there is no analytics, advertising or tracking in any of them.

Two of them talk to the outside world: Invested, because it reads a Trading 212 account, and QuidVault, when you choose to have Mistral read your documents or suggest categories. Both are set out below.

In all five apps:

• Your files. The apps read and write files in a folder you choose, using your browser’s File System Access API. Your notes, timetables, generated folders and documents, and your Invested and QuidVault vaults stay where you put them. Nothing is uploaded to us. The one thing that can leave is what you choose to have Mistral read in QuidVault, described below.
• A reference to that folder or file, held in your browser’s IndexedDB, so the app can offer to reopen what you had open last time.
• Your preferences — theme, colours, layout and similar — in your browser’s local storage.
• A cached copy of the app itself, so it can open offline.

None of this reaches us. Clearing the site’s data in your browser removes it, and deleting your files removes those.

Brain Squid, The TimeTabler and Folder Fabricator: nothing. Beyond downloading the app itself, these three make no requests carrying your data. Brain Squid loads its typefaces from Google Fonts, and will load an image or file you have linked to yourself from wherever you pointed it; neither of those tells anyone what is in your notes.

Invested is different, because it reads a Trading 212 account. Some requests therefore have to leave your browser: the calls to Trading 212 itself, which pass through a relay because a browser cannot reach that API directly, and lookups of public market data such as share prices and exchange rates. Your vault, holdings and figures are still never sent to us.

Invested has its own privacy policy, which sets out exactly what the relay does, names every market-data source, and explains how your Trading 212 API key is stored and what access it is given. It is the definitive policy for that app and is kept with the app itself rather than restated here, so the two can never drift apart.
Read the Invested privacy policy →

QuidVault is the other, and only when you ask it to be. With a Mistral API key of your own entered in its settings, a scanned statement, receipt or payslip you drop in is sent from your browser to Mistral to have its text read, and if you switch suggestions on, the wording of a transaction is sent to Mistral to suggest a category for it. Nothing passes through us. Without a key, nothing leaves your device: a CSV, Excel or downloaded PDF statement is read entirely on your machine, and so is an Invested vault file you point it at.

QuidVault has its own privacy policy, which sets out exactly what is sent to Mistral and when, and how your key, your statements and your documents are stored. It is the definitive policy for that app and is kept with the app itself rather than restated here, so the two can never drift apart.
Read the QuidVault privacy policy →

All five apps are served as static files by Google Firebase Hosting. As with any website, Google’s servers record ordinary request information such as the address the request came from, what was requested and when, for a limited period. That is a by-product of serving you the page; it does not tell us or Google anything about what you then do inside the app, because that happens entirely in your browser.

None of these apps set cookies, and none of them contain analytics, advertising or tracking of any kind. There is no profile of you to build, because there is no account and nothing is sent to us.

Because we hold no personal data about you, there is nothing for us to access, correct, export or delete on your behalf — it is all in your own files, under your control. If you think we hold something we should not, or you have a question about this policy, email contact.allinsoftware@gmail.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

If this policy changes, the date at the top changes with it and the new text appears here.