Last updated 2026-10-06
This policy covers the PIT mobile app (iOS and Android), published by Xeratec. It is a companion to the broader PIT Privacy Policy and applies only to data handled by the mobile app.
Account credentials. When you sign in, the app sends your PIT email and password over HTTPS to authenticate. Your password is never stored on the device. A short-lived session token is stored in the device's secure storage (iOS Keychain / Android Keystore) to keep you signed in.
Receipt content you create. Photos you capture or choose, plus the description, date, amount, billable flag, customer, and project you enter. This data is uploaded to PIT's servers when you save a receipt. Mileage entries you log (date, distance, purpose) are uploaded the same way.
Sales and time data you enter. In Sales mode: visits you log on your route, notes, visit scores, follow-ups and meetings, and any contact details (name, email, phone) you record for the businesses you visit. In Time mode: the time entries you log and submit. This is uploaded to PIT when you save it, or when your phone next has a connection if you were offline.
Camera and photo library access. The app requests camera access only when you tap “New Receipt” to capture a photo. To import an existing photo it uses the system photo picker (on Android, the app holds no storage or media permission at all), so it only ever receives the photo you select. The app does not read your camera roll in the background.
On-device text recognition (OCR). To auto-fill the amount field, the app runs text recognition locally on the captured image using Apple Vision (iOS) or Google ML Kit Text Recognition (Android). This runs entirely on your device — the image is not sent to any server for OCR. Only the receipt image and the fields you confirm are uploaded to PIT.
No analytics, tracking, or advertising. The app does not include any third-party analytics, advertising, attribution, crash-reporting or tracking SDKs. We do not collect device identifiers, your location, your phone's contacts, or usage telemetry.
We do not sell your data, share it for advertising, or use it to train AI or machine-learning models.
Receipt metadata (description, amount, dates, customer, project), mileage, sales activity and time entries are stored in PIT's managed Postgres database. Receipt images are stored in encrypted object storage (Amazon S3) and are only retrievable with a valid PIT session that belongs to the receipt's owner or a PIT administrator. All network traffic between the app and PIT's servers uses TLS.
The mobile app does not share your data with any third party. The only network destination it contacts is PIT's own backend at the domain configured by your organization (typically pit.xeratec.com).
PIT's backend uses cloud hosting (Railway) and object storage (Amazon S3) as subprocessors to operate the service, as described in the main PIT Privacy Policy.
Receipts, sales activity and time entries remain in PIT until you or your organization delete them. Deleting a receipt in the app removes its metadata from the database and its image from object storage within minutes.
To delete your mobile session, sign out from the app — this clears the session token from your device's secure storage. To delete your account and all associated data, contact your PIT administrator or email privacy@projectissuetracker.com. Account deletion removes personal data within 30 days, excluding encrypted backups that roll off within 90 days.
Camera (NSCameraUsageDescription / CAMERA): used only when you tap “New Receipt” to capture a document photo via your device's document scanner.
Photo library (iOS NSPhotoLibraryUsageDescription): used only when you choose “Pick from library” to import an existing photo. The app reads only the image you select. On Android the app uses the system photo picker and requests no storage or media permission.
Network: the app communicates only with PIT's backend over HTTPS.