1. Company
Gratuvia is a product of Prokvik LLC, a New Mexico limited liability company. In this policy, "Prokvik," "Gratuvia," "we," "us," and "our" refer to Prokvik LLC and the Gratuvia product.
Send privacy questions to admin@prokvik.com.
2. Records stored on the device
Gratuvia can store employers, positions, hourly wage rates, schedules, worked shifts, breaks, tips, tokes, gratuities, tip-share amounts, payroll settings, deductions, retirement settings, pay periods, paycheck estimates, paycheck-history snapshots, actual paycheck information, and app preferences on the device.
Tip-slip and paystub records can also contain the original image, image metadata, OCR text, confidence data, parser results, and corrections you confirm. Gratuvia remains usable without creating an account or enabling cloud sync.
3. OCR and original images
The Android build processes supported tip slips and paystubs with OCR that runs on the phone. The app can create temporary crops or working images for recognition. It keeps the original selected or captured image as a separate private record.
OCR does not become a trusted earnings or payroll entry by itself. You review the result before saving it. If the local OCR engine is unavailable, the core OCR path does not silently send the image to a cloud OCR service.
4. Local database and file protection
Structured records are stored in a SQLCipher-protected SQLite database. The database key is generated on the device and stored with the platform's secure-storage system.
Original tip-slip and paystub files are kept in the app's private document storage and hashed with SHA-256. Gratuvia can compare that hash with an imported, synced, or restored file to check whether the bytes match the saved record.
No app can guarantee perfect security. Device protection also depends on the operating system, passcode settings, backups, malware exposure, and physical access to the phone.
5. Portable backups
Gratuvia can create a portable backup encrypted on the device with AES-256-GCM. The recovery key is separate from the encrypted backup file.
You choose where to save the exported file. If you place it in iCloud Drive, Google Drive, Dropbox, OneDrive, a NAS, or another storage service, that provider handles the encrypted file under its own terms and privacy policy. Saving the file there does not give Prokvik the recovery key.
Keep the recovery key. Prokvik cannot recover a portable backup if the key needed to decrypt it is lost.
6. Optional Gratuvia accounts
You can use Gratuvia without an account. If you choose to create one, Gratuvia uses an email address and password for authentication. The authentication service assigns a user ID to the account and processes the credentials needed to create the account, sign in, reset a password, and delete the account. Passwords are not stored by Prokvik in readable form.
Gratuvia currently uses Supabase as a service provider for account authentication, database services, and encrypted sync storage. Data sent to these services is transferred over an encrypted connection.
Gratuvia also creates a random app-installation identifier used for sync state and conflict handling. It is an app-generated identifier, not a hardware serial number.
7. Optional encrypted cloud sync
If you enable Account & sync, Gratuvia encrypts the structured Gratuvia data on your device with an account vault key before uploading the sync payload. The readable earnings, payroll, schedule, and other synced record contents are not uploaded as plaintext.
Original tip-slip and paystub images included in sync are also encrypted on the device before upload and stored as private encrypted objects. Gratuvia verifies image hashes and file sizes when restoring them to another device.
The cloud service can store encrypted payloads, encrypted image objects, account identifiers, sync revision information, and related service metadata needed to provide the feature. The account recovery key is used on your device to recover the encryption key on another device. Keep that recovery key somewhere safe.
An existing device that holds original images may need to complete a sync before a new device can restore those originals. Gratuvia is designed to reject an incomplete media restore rather than silently present missing originals as a complete recovery.
8. Data Prokvik and service providers can receive
Account information
If you create a Gratuvia account, the account service processes your email address, user ID, authentication information, and security or service metadata needed to operate the account. Prokvik can use account information to provide sign-in, password recovery, account support, security, and account deletion.
Encrypted sync service data
If you enable sync, the service receives the encrypted sync payload and encrypted media objects plus operational metadata such as the account identifier, app-generated device identifier, revision values, object names or hashes, timestamps, and integrity-related metadata needed to store, retrieve, and reconcile the encrypted data.
Support email
If you contact support, Prokvik receives what you send. That can include your email address, message, screenshots, attachments, and diagnostic details.
Website requests
When you open gratuvia.app, the hosting and security systems serving the site process standard request data needed to return the page and block abuse. That can include an IP address, browser or device type, requested path, timestamp, and security-related request data. The current website does not use behavioral advertising.
9. Device permissions
Gratuvia requests a device permission when a feature needs it. Camera or photo access is used to capture or select tip slips and paystub images. File or photo-library access is used when you choose to import, save, export, or share a record. Notification permission is used for reminders you enable.
You can change permissions in the device settings. A feature that depends on a disabled permission will stop working until that permission is restored.
10. How Prokvik uses received data
Prokvik uses account, support, sync-service metadata, and website data to provide the requested service, authenticate accounts, operate encrypted sync, answer support requests, investigate bugs, protect the service, prevent abuse, respond to legal requests, and enforce the Terms of Service. Information you send as product feedback can also be used to fix or improve the feature you reported.
11. Sale, advertising, service providers, and disclosure
Prokvik does not sell personal information. The current Gratuvia app does not include third-party behavioral advertising SDKs.
Prokvik uses service providers, including infrastructure and authentication providers, to operate features on Prokvik's behalf. Prokvik can also disclose information it actually holds when required by valid legal process, to protect rights or safety, or as part of a merger, acquisition, or sale of the Gratuvia business subject to applicable law.
12. Retention and deletion
Local records stay on the device until you delete them, reset the related app data, or remove the app, subject to the device's own backup behavior. An exported backup stays wherever you saved it until you delete it there.
If you created a Gratuvia account, you can permanently delete the account and its associated encrypted cloud sync data from Settings → Privacy & export → Account & sync. You can also find account-deletion instructions at gratuvia.app/delete-account/.
Deleting the cloud account does not remotely erase copies that exist only on your devices or in backup files you saved yourself. Those copies must be deleted from the device or storage location where they remain.
Prokvik can retain support messages, website security records, and records that must be retained for legal, fraud-prevention, dispute, tax, payment-provider, or compliance reasons for as long as reasonably necessary for those purposes.
13. Your choices and privacy rights
You decide whether to enter information, grant optional permissions, create an account, enable encrypted sync, create an export, or send support material. Local records can be deleted with controls available in the app. Exported files must be deleted from the place where you saved them.
Privacy law in your location can give you rights over personal information Prokvik holds, including access, correction, or deletion rights. Send a request to admin@prokvik.com. Prokvik can ask for information needed to verify the request.
Prokvik cannot access, correct, or delete readable record contents that exist only on your phone, in a backup location controlled by you, or only as ciphertext that Prokvik cannot decrypt without your recovery material.
14. Children
Gratuvia is not directed to children under 13. Prokvik does not knowingly collect personal information from children under 13 through the service. Contact us if you believe a child sent personal information to Prokvik.
15. Policy changes
When this policy changes, the revised text will be posted at this URL with a new effective date. A material change to data collection or use will also receive any notice or consent required by law or the applicable app store.
16. Contact
Prokvik LLC
Albuquerque, New Mexico, United States
admin@prokvik.com