AGM Apps ("we," "our," or "us") operates the Real-Time Salary mobile application for Android (the "App"). This Privacy Policy explains how we handle your information and protect your privacy when you use our App.
We are committed to your privacy. Your financial data belongs to you, and we have designed the App to keep your sensitive salary information secure and private.
When you use the App, you may enter the following information, all of which is stored locally on your device only:
We do not collect any personal information automatically. However, third-party services integrated into the App may collect certain technical information as described in Section 4.
The App offers two optional AI-powered features. Neither runs unless you start it. Both route through a server-side proxy hosted on Google Firebase Cloud Functions, which holds the AI API keys in Google Secret Manager so no key ever ships inside the App:
A note on which AI vendor: Discover previously used Anthropic's Claude API. It now uses Google Gemini. Anthropic remains configured as a standby fallback that we can switch on if the Gemini service becomes unavailable; if we do, your Discover queries would be forwarded to Anthropic instead. Both vendors' policies are linked in Section 4.4.
Our Cloud Functions do not store or log the content of your AI requests — no image, query, or earnings summary is written to any database or log we control. Once the response is returned, our copy is gone. What the AI vendor does with the request on its own systems is governed by its policy, linked in Section 4.4. Apart from these two features, which you start yourself, your locally-stored records are never automatically transmitted for AI processing.
Your financial data is never sold to third parties.
The App can save a backup copy of your data to your own Google Drive account. This is off until you turn it on, and nothing is uploaded until you tap Back up now.
If you use Flexible Schedule mode, you can record appointments that include a client's name and free-text notes. That is information about someone other than you, so it gets its own rules.
The free version of the App displays advertisements through Google AdMob. AdMob may collect and process the following information:
You can opt out of personalized ads on Android: Settings → Google → Ads → "Opt out of Ads Personalization" (or reset your Advertising ID).
For more information, see Google's Privacy Policy.
We use Google Firebase Analytics to understand how users interact with the App. Firebase may collect:
Your salary figures, schedules, appointments, and client information are never sent to Firebase Analytics. We do not include a crash-reporting SDK, so no crash or stack-trace data is collected. Please note that Firebase Analytics is one product among several Google Firebase services we use — the Cloud Functions and Firestore cache described in Sections 3.2 and 4.5 are also Firebase, and those do receive the AI request content you send. See Firebase's Privacy Policy.
If you are in the European Economic Area, the United Kingdom, or Switzerland, the App presents a consent form from Google's User Messaging Platform (UMP) when you first open it. You choose whether to allow personalized advertising, and you can change that choice at any time in Settings → Privacy Settings.
To be precise about the sequence, because it matters: the advertising components begin loading as the App starts, which can happen before you have finished answering the consent form. That start-up activity may involve a network request to the ad provider. Your answer governs whether personalized advertising is served to you. If you would rather no advertising component ran at all, a Real-Time Salary Plus subscription removes advertising from the App entirely.
Both AI features currently send their request to Google's Gemini API: the Invoice Scanner sends your photo and the earnings summary described in Section 3.2, and Discover sends your typed query with Google Search grounding enabled, which uses your query to run live Google Searches. Anthropic's Claude API remains configured as a standby we can switch Discover to if Gemini becomes unavailable. Every call is routed through our Firebase Cloud Functions proxy so the AI keys never ship inside the App. Each provider processes the request content under its own policy:
Both providers state that requests sent through their paid commercial APIs are not used to train their public models. We rely on those statements; we cannot independently verify what happens inside a vendor's systems, and we do not control how long a vendor retains a request. Apart from a scan or a search you start yourself, we send them nothing.
The Firebase Cloud Functions (proxyGemini, proxyDiscover, and the standby proxyClaude) run on Google Cloud infrastructure under our Firebase project real-time-salary-ios (project name retained from initial iOS release; serves both platforms). They:
Firestore is used to cache the results of Discover searches so common queries (e.g., compensation of well-known public figures) can be served instantly without a new AI call. The Firestore cache contains only the AI-returned public-figure compensation data — it does NOT contain any user-identifying information, your search history, your salary, or your device identifier. The cache is a shared lookup table used by all App users to reduce repeat AI cost.
The App also integrates Unity Ads and Liftoff (Vungle) as fallback ad networks alongside Google AdMob. Which network is active at any given time is controlled via our remote configuration file at agmapps.net/rts-ios-ad-config.json. Whichever network is active may collect:
Refer to each network's privacy policy for full details:
The App offers an optional "Real-Time Salary Plus" subscription ($0.99 / month). When subscribed, you receive:
When you make a purchase:
Start with the shape of the risk: because the App has no user accounts and your salary, schedule, appointment, and finances data never reaches our servers, a breach of our systems could not expose that data. There is nothing there to take. The only things we could conceivably hold are short-lived operational logs and the Discover cache of public-figure information, neither of which identifies you.
If we do become aware of a security incident affecting personal information under our control, we will investigate immediately and:
We want to be straight with you about one limitation: we hold no email address or other contact details for you, so we cannot send you a personal message. Publication in the App and on our website is how you would be told. We would rather state that honestly than promise a notification we have no way to deliver.
The App is intended for working adults and is not designed for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information through the App, please contact us at [email protected] and we will delete it.
Google Play Age Signals. On Android, the App asks the Google Play Services Age Signals API whether the person using the device falls into an age range that Google has already determined, and whether the account is supervised by a parent or guardian. We receive an age range and a supervision status — not a birthdate, not an age, and no identity information. We use it for one purpose: if the signal indicates the user may be below the age of consent, we mark advertising requests accordingly so that ad providers restrict what they serve. The signal is read on the device, used immediately, and not stored by us or sent anywhere by us. See Google's Privacy Policy.
The App is available worldwide. Your data is stored locally on your device in your own country. Third-party services (AdMob, Unity, Liftoff, Firebase, the AI providers, and Google Drive if you enable backup) may process data on servers in other countries, including the United States, according to their own policies.
If you are in the EEA, the UK, or Switzerland, the General Data Protection Regulation requires us to tell you the lawful basis for each thing we do. AGM Apps is the data controller; contact details are in Section 14.
| What we do | Lawful basis |
|---|---|
| Store your salary, schedule, appointments and finances data on your device so the App can work | Performance of a contract — Art. 6(1)(b) |
| Process an Invoice Scanner or Discover request you start | Performance of a contract — Art. 6(1)(b) |
| Upload a backup to your Google Drive | Your consent — Art. 6(1)(a). Off until you switch it on; withdraw by turning it off |
| Personalised advertising | Your consent — Art. 6(1)(a), collected through the UMP form and changeable in Settings |
| Non-personalised advertising and basic analytics that keep a free app viable | Legitimate interests — Art. 6(1)(f): funding and improving the App. You may object at any time (Section 10), or remove advertising with a Plus subscription |
| Operational logs for debugging and abuse prevention | Legitimate interests — Art. 6(1)(f): keeping the service secure and working |
| Age signals used to restrict ads shown to minors | Legal obligation — Art. 6(1)(c), and child-protection requirements of the app stores |
Providing your salary information is not a statutory or contractual requirement — but the App cannot calculate anything without it. There is no automated decision-making producing legal or similarly significant effects, and no profiling of you.
Where a processor handles data outside your region, that transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision, as set out in that provider's own terms — Google (Firebase, AdMob, Drive, Gemini), Unity, Liftoff/Vungle, and Anthropic each publish theirs. We have no servers of our own, so we do not transfer your data anywhere ourselves.
You have full control over your data:
This section applies if you live in a U.S. state with a comprehensive consumer privacy law — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, plus any other state whose law is in effect when you read this. Where a right below exists only under your state's law, we honor it for residents of that state.
Using the categories named in the California Consumer Privacy Act:
We never receive your salary figures, schedules, time-off, appointments, client names, appointment notes, tips, or Real-Time Finances entries. They live on your device, and in your own Google Drive if you switch on the backup. We hold no copy and have no way to look them up. We collect no Social Security numbers, no financial account or card numbers, no precise location, no biometrics, no health data, no contacts, and no messages.
We do not knowingly collect sensitive personal information and never use personal information to infer characteristics about you. An image you submit to the Invoice Scanner could incidentally contain sensitive content printed on a paystub — a Social Security number, a bank account number, a home address. Please crop or cover anything like that before scanning. We do not store submitted images.
We have never sold personal information for money and do not do so. But we are going to be straightforward about something a lot of apps word carefully: when personalized advertising is on, our ad partners receive your advertising ID and IP address and may use them to target ads to you in other apps. Under California law that counts as "sharing" for cross-context behavioral advertising, and under several other state laws it counts as "targeted advertising" or a "sale." We would rather tell you that plainly than rely on a narrow reading of the word "sell."
You can stop it at any time, free:
We do not sell or share the personal information of anyone we know to be under 16.
Where these web pages are read in a browser that sends a Global Privacy Control (GPC) or similar signal, we treat it as a valid opt-out of sale and sharing for that browser. Mobile operating systems do not send GPC to apps, so inside the App the equivalent is the device-level advertising opt-out described above — and we treat that device-level opt-out as a valid opt-out signal, as does every ad partner we use.
Email [email protected] with the request type in the subject line. We operate entirely online and deal with you directly, so email is our designated method. We will acknowledge within 10 business days and answer within 45 days, extendable once by another 45 with notice.
About verification: the App has no user accounts and we hold nothing tied to your name, so in most cases we genuinely cannot connect any record to you as a person. We will say so plainly rather than pretend otherwise, and we will treat a deletion request as an opt-out of sale and sharing. The fastest and most complete remedy is in your own hands: Reset All Data in Settings, or uninstall the App. That erases everything, immediately.
Authorized agents may act for you with your signed permission or a valid power of attorney. We may contact you to confirm it.
We may update this Privacy Policy from time to time. When we make changes, the "Last Updated" date at the top will be revised. Significant changes will be communicated through an App update notification. Continued use of the App after changes constitutes acceptance of the updated policy.
The App may contain links to external websites (such as our developer website, Google's terms, or third-party ad-network privacy policies). We are not responsible for the privacy practices of these third-party sites.
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
[email protected]Developer: AGM Apps · agmapps.net
For EEA Users: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.