Who and what this covers
CoreCredit is published by Idlery Services LLC ("Idlery", "we", "us"). This policy explains how information is handled in the CoreCredit iPhone application and on the websites at corecredit.idlery.com and idlery.com.
It does not cover Apple's handling of your information. Apple's own privacy policy and terms govern the App Store, your Apple Account, and any purchase you make through it.
The short version
CoreCredit is local-first and account-free. Your shop's records live on the device you entered them on. Idlery does not operate a CoreCredit backend in Version 1, so there is nowhere for your ledger to be sent and no copy of it for us to hold, search, recover, or hand to anyone else.
We do not sell app data.
There are three narrow places where information does reach someone other than you, and this policy describes each of them precisely rather than pretending they do not exist: an email you choose to send to support, a subscription purchase that Apple processes, and the ordinary server logs created when your browser requests a page from these websites.
No account, no sign-in, no CoreCredit backend
There is nothing to sign up for. The app has no login screen, because in Version 1 there is no Idlery-operated system behind it to log in to.
Because no such system exists, Idlery holds no copy of your cores, vendors, storage bins, invoice or repair-order references, photographs, notes, or totals. We cannot look them up, recover them, restore them, or disclose them, and we could not do so in response to a request from anyone else either.
What the app stores on your device
The app stores what you put into it, using Apple's on-device storage inside the app's own container:
- Your shop profile, including anything optional you choose to add to it.
- Vendors and their return windows, and your storage bins.
- Core records: amounts, part details, invoice and repair-order references, dates, status, and notes.
- Return batches and their references.
- The event history recorded behind each core.
- Evidence photographs you attach.
- Your settings, including reminder preferences, and the last known state of your subscription entitlement so a paying shop is not locked out while offline.
None of this is uploaded by the app.
Apple device backups
Because CoreCredit's data lives in the app's container, it may be included in your ordinary Apple device backups — iCloud Backup or an encrypted computer backup — in the same way any other app's data is, according to your own Apple settings.
That is a backup of your own device, made by you and governed by your arrangement with Apple. It is not a transmission to Idlery, and it does not give us access to anything.
Camera, scanning, and on-device recognition
CoreCredit requests camera access only after you initiate a scan or a photo capture. It is never requested on launch, and the camera is not used in the background.
Barcode recognition and optical character recognition (OCR) operate offline, on your device, using the frameworks built into iOS. Images and recognised text are not sent to Idlery and are not sent anywhere else for processing.
Nothing a scan reads is written to a record automatically. Recognised values are presented for your review, and become part of a record only when you confirm them.
If you decline camera access, the app explains why it was asked and every field remains available for manual entry.
Photos and evidence
Photographs are attached to a core record only when you take or select them.
CoreCredit does not request broad Photo Library access. When you choose an existing image, it is supplied to the app through Apple's own picker, which hands over only the items you selected.
Attached photographs are stored on the device with the record they belong to, and are included in an export only if you generate one that contains them.
Notifications
Deadline reminders are local notifications: they are scheduled by your device and delivered by your device. There is no push server, and no message is sent to Idlery.
Notification permission is requested only when you enable reminders. A reminder contains only information already in your own ledger. Declining, or turning reminders off later, affects nothing else in the app.
Subscriptions and Apple
Any optional subscription is sold by Apple through the App Store, and subscription operations are processed by Apple through StoreKit. Apple handles the purchase, your payment method, renewals, cancellations, and refunds. The app never sees your payment details.
The app asks Apple whether a subscription is currently active, and that answer is verified on your device. There is no Idlery receipt-validation server. The only thing kept from that check is a note of the last known entitlement state, stored on the device.
What Apple does with purchase information is covered by Apple's own privacy policy and terms.
Exports and sharing
Exported files — CSV ledger exports, JSON backups, dispute packets, and printable tags — are generated on your device when you ask for them.
An export leaves the app only when you deliberately share or save it, through the system share sheet, to a destination you choose. Once you have sent a file it is outside CoreCredit's control and is governed by whatever app or service received it.
Temporary exported files are written to app-controlled cache storage on the device and are swept after approximately 24 hours.
What is not in the app
- There is no analytics SDK, and no usage statistics are gathered. Nobody is told which screens you open or how often you use CoreCredit.
- There is no advertising SDK and no advertising.
- There is no crash-reporting SDK.
- There is no tracking. CoreCredit does not track you across other apps or websites, and contains no attribution or measurement software.
- Idlery does not sell app data.
- The app does not request your location, contacts, calendar, health data, or microphone.
- There is no sync. No cloud ledger, no shared workspace, and no way for two devices or two employees to see the same records through CoreCredit.
Email you send to support
If you email support@idlery.com, the content of that message is information you have voluntarily provided to Idlery. It reaches us the way any email does, together with the address you sent it from and whatever you chose to include in it.
We may retain support correspondence as reasonably needed to answer your request, to follow up on a related issue, and to maintain appropriate business records.
Please do not send us your customers' personal details. A description of the screen or the behaviour is almost always enough to help.
These websites
The websites at corecredit.idlery.com and idlery.com are static pages hosted on Netlify. As with any website, Netlify may process standard request, security, and server-log information — such as IP address, user agent, requested URL, and timestamp — in order to serve the pages and protect the service. That processing is governed by Netlify's own policies.
These websites set no analytics or advertising cookies. There is no analytics script, no advertising or tracking script, no third-party font service, no embedded social media, no chat widget, and no email capture form. Nonessential cookies are not set, which is why there is no cookie banner asking you about them.
Where CoreCredit is offered
CoreCredit is intended for users in the United States, and initial availability is the United States only. It is not offered in other App Store storefronts at launch.
Because the app has no server and no account, using it does not transfer your records anywhere, including across a border. They stay on the device they were entered on.
Age
CoreCredit is a tool for running a repair shop. It is not directed to children.
You must be at least 18 years old to use CoreCredit, or use it with the permission and supervision of a parent or legal guardian.
Your choices and removing information
- Individual records. Use the app's own controls to edit or remove individual cores, vendors, bins, photographs, and other entries.
- Everything on the device. Deleting the app removes its container, and the locally stored app data inside it, from the device. This is subject to any copies that remain in Apple-controlled device backups you have already made.
- Exports you have already sent. Files you exported and shared elsewhere are not affected by either action. Those copies are wherever you put them.
- Permissions. Camera and notification access can be changed at any time in the Settings app on your device.
- Support correspondence. To ask about email you have sent us, write to support@idlery.com.
Idlery cannot delete or recover records it has never held a copy of.
Changes to this policy
This policy carries an effective date. If a future version of CoreCredit changes what is stored, where it goes, or who processes it, this policy and the app's privacy declarations will be updated in the same release, and the effective date will change with them.
How to contact us
Privacy questions about CoreCredit go to support@idlery.com. That address reaches the people who make CoreCredit.
CoreCredit is published by Idlery Services LLC. Email is the support and privacy channel; no postal address is published.