Your extra-work records and evidence stay on your device.
ExtraWorkLedger is a local-first record tool. It does not require a Polenest account, synchronize field records to a Polenest server, serve ads, perform cross-app tracking, or provide server recovery for your records.
Data handled by ExtraWorkLedger
| Local records | Projects, change-work records, inbox items, delay records, extra-fee message drafts, settings, and free-use history are stored in the app workspace on your device. |
|---|---|
| Evidence files | Files you choose or share into the app are copied to its local workspace. Polenest does not upload those files to its servers. |
| PDFs and backups | Reports and backup ZIP files are created locally. When you export or share them, the destination you select handles storage, synchronization, and further sharing under its own policy. |
| Purchase verification | For purchase or restore, the app sends its app ID, Store platform, product ID, app version, a random installation identifier, and Store purchase evidence to the first-party Polenest Entitlements service over HTTPS. Local record content is not sent. |
| Diagnostics | Apple, Google, or the operating system may provide crash and diagnostic information under their settings and policies. ExtraWorkLedger does not include third-party advertising or feature-usage analytics SDKs. |
| Support | Emails and details you send to [email protected] are used to answer your request and investigate the issue you report. |
Purchase and restore
Apple App Store or Google Play processes payment and the Store account. Polenest does not receive or store your card number. The Entitlements service validates Store evidence with Apple or Google and may retain the minimum verified purchase and entitlement record, transaction identifier, protected purchase identifier, random installation identifier, lifecycle status, and verification time needed to restore access, apply refunds or revocations, prevent abuse, and maintain service security.
Purchase and installation identifiers are not used for advertising or tracking. ExtraWorkLedger has no cross-platform account, so an App Store purchase and a Google Play purchase do not transfer between platforms.
Retention and your controls
| Local records | Use the app's delete controls to remove records. Uninstalling the app removes its local app container according to the operating system. |
|---|---|
| Exported files | Copies saved or sent outside ExtraWorkLedger remain under the control of the location, app, or person you selected. |
| Purchase records | Verified purchase records may be retained as needed to provide restore, apply Store lifecycle changes, prevent fraud, and meet legal obligations. |
| Lost device | If you lose the device without an accessible backup, Polenest cannot restore your local project records from a server. |
Contact and changes
For privacy questions or requests about first-party purchase-verification data, email [email protected]. Some transaction records may need to be retained for the purposes stated above. This page will be updated before the app adds account services, record synchronization, advertising, analytics, or other off-device data handling. Effective August 16, 2026.