Privacy Notice

1. Who we are

Resellers Pro Tools is an inventory, receipt and profit-tracking app for resellers. It is published on Google Play by The Motivational Hub LLC, a limited liability company organised under the laws of the State of Ohio, United States (“we”, “us” or “the Company”). The app is built and supported by the Company’s founder, Brandon France.

This notice covers the Resellers Pro Tools app for Android, published under the package name tools.resellerspro.app, and the website at resellerspro.tools. The Motivational Hub LLC is the data controller responsible for the personal information described below. The app’s licence agreement — shown when the app first opens, and afterwards under Options → Licence agreement — refers to this page as the Privacy Notice.

For any privacy question or request, contact app@resellerspro.tools.

2. Using the app without an account

You do not need an account. The welcome screen offers Continue without an account, and every feature works that way, including buying Premium.

Used like this, the app itself sends nothing about you to us. Your records are stored on your phone (Section 6). The only connections the app makes are to Google Play, on your phone, when you view or buy a subscription (Section 5) or when it shows its rating card (Section 9); to Google, for the scanner’s performance statistics (Section 9); and to whatever app or service you choose when you export, share or back up (Section 7). If you buy Premium without an account, Google may still send our server its notice of the purchase; that record is not linked to any person unless you later create an account and restore the purchase to it.

3. Your account (optional)

You can create an account with an email address and a password. An account lets our server confirm your Premium subscription with Google rather than relying only on the copy of the purchase held on your phone, and lets us email you when a new version is released. It does not upload your records: signing in on another phone shows an empty ledger.

What we store

• Your email address — used to identify the account, to send the confirmation link and password resets, to send release-update emails if that preference is on (Section 4), and to contact you about your subscription or an important change to the app or this notice.
• A hash of your password — passwords are salted and hashed by our authentication provider. We never store, see, or have any way to recover the password itself.
• A random account identifier, and the dates the account was created, confirmed, last signed in and last updated.
• Your release-update email preference — a single on/off flag kept on the account record (Section 4).
• Sign-in sessions — tokens on your phone keep you signed in until you sign out; our provider records the session so it can be refreshed and ended.

Emails the account system sends

When you sign up, our authentication provider sends a confirmation link to your address. If you ask to reset your password or to resend the confirmation, it sends that link too. These messages exist only to operate the account. Each link carries a one-time code that can be redeemed only by the installation of the app that asked for it, so a link intercepted or opened elsewhere is useless.

Sign-in and security logs

Our authentication provider records sign-in events — the time, the IP address, and the type of device or client used — so that suspicious activity can be detected and a compromised account recovered. These logs expire automatically within 90 days. They are kept on that schedule rather than deleted on request, because they are what protects accounts from unauthorised access; closing your account removes the account they point to. They are never used for advertising, profiling, or tracking you across other apps or sites.

4. Release-update emails

The create-account form says: “We’ll email this address when a new version of the app is released. You can turn this off any time in Account.” Creating an account with that notice shown switches the preference on for your account.

What we send. A message when a new version of the app is available, saying what changed. That is all — no offers, no Premium upsells, no newsletters. Each message identifies The Motivational Hub LLC, includes our postal address, and includes an unsubscribe link.

How to stop them. Any of these works: switch off Email me about new versions under Account in the app; use the unsubscribe link in any release email; or email app@resellerspro.tools. Your choice is stored on your account and takes effect from the next mailing.

How they are sent. From our own mailbox or through an email service provider acting on our instructions, which then holds your address only to deliver the message. We do not use open-tracking pixels or click-tracking links. The list is drawn only from confirmed accounts with the preference on. Without an account we have no address for you and send nothing.

5. Premium subscriptions and Google Play

Resellers Pro Tools has a free plan and an optional Premium subscription, billed monthly or yearly, sold only through Google Play.

Google Play — Google LLC, or the Google entity acting as merchant of record where you live — takes the payment and holds your billing details. We never see or store your card number, bank information or billing address. Google’s handling of the purchase is governed by the Google Privacy Policy and the Google Play Terms of Service.

What Google tells us about a subscription

So that the app can confirm Premium, Google gives us and we store, in our database, a small subscription record: the purchase token Google uses to identify the purchase, the latest order number, the product, plan (monthly or yearly) and any offer such as a free trial, the subscription’s state (active, cancelled, in a grace period, on hold, paused, expired, refunded or pending), its renewal or expiry date, whether it auto-renews, whether it is a test purchase made by a licence tester, and when the record last changed.

That record reaches us in two ways:

• From the app, when you are signed in. After a purchase or a restore, the app reports the purchase token to our server, which asks Google’s Play Developer API to confirm it and stores the result against your account.
• From Google directly. Google Play sends our server a real-time notification whenever a subscription of this app changes — a renewal, cancellation, refund, grace period, hold or pause — whether or not the app is open and whether or not you have an account. These notifications arrive through Google Cloud Pub/Sub, a Google service.

The hash that ties a purchase to your account

If you buy Premium while signed in, the app attaches a one-way hash (SHA-256) of your account identifier to the purchase, in the field Google calls the obfuscated account id. Google stores it with the purchase and returns it to our server, which is how we know the purchase belongs to your account and refuse to attach it to any other. The hash does not contain and cannot be turned back into your email address or name, and Google never receives either from us.

Purchases made without an account

If you buy Premium as a guest, the copy of the purchase that Google Play keeps on your phone is what unlocks the features. Google’s notification about the purchase may still reach our server, where it is stored without any account attached; it entitles nobody until you create an account and use Restore purchases, which links it to that account.

Refer & earn

Every account can have a referral code (it looks like RPT-K7M2Q), created by our server the first time you open Refer & earn. A friend who is new to Premium can enter it, and their first month is then free. When their first payment goes through, you earn a free month, which our server applies by asking Google Play to move your next bill back.

To make that work we store, in our database: your code; for each friend who enters it, a record linking their account to yours, with the date they entered it, when their first payment cleared (or that it expired or was refunded), and the state of your free month — waiting, banked until you have a paid subscription, or applied, with the new renewal date Google reported. We also note which of your friend’s purchase tokens and which of yours the record concerns, so a refund can be matched to it.

Nobody sees anyone else’s name or email address. You see your friends as “Friend 1”, “Friend 2” and so on, with dates and whether they subscribed; your friend sees only the code they typed. Sharing your code is up to you: the app hands a short message with the code and a Google Play link to your phone’s share sheet and sends nothing itself. We use these records only to run the program and to stop abuse, such as someone entering their own code.

Managing, cancelling and refunds

View, change or cancel the subscription at any time in the Google Play Store app under Payments & subscriptions → Subscriptions, or from Account → Manage subscription in the app, which opens that page. Uninstalling the app does not cancel a subscription. The licence agreement gives you a thirty-day refund right; to use it, request the refund through Google Play or email us with your Google Play order number. A refund is issued by Google, and we see it only as a change in the subscription’s state.

6. Your records stay on your device

Everything you record in the app — the licence agreement calls it your Records — is written to storage on your phone that belongs to the app alone. None of it is transmitted to us or to anyone else unless you send it somewhere yourself (Section 7).

• Receipts — store or seller, date, totals, payment method, notes, and a signature if you drew one on the phone at the point of sale.
• Inventory items — names, SKUs, bin and shelf locations, categories, cost, listed and sold prices, fees, the marketplaces you sold on, and the dates involved.
• Business records — expenses, mileage entries, write-offs, and the profit, cost-of-goods and profit-and-loss figures the app calculates from what you entered. Mileage is typed in; the app never reads your location.
• Photos — pictures of receipts and items that you take with the camera or pick from your photo library.
• Settings — your business name, stores, locations, payment methods and note presets, display preferences, the free-plan usage counters, and the version of the licence agreement you accepted.

Text records live in the app’s private database and photos in the app’s private documents folder. Both are sandboxed by Android to this app alone, so other apps cannot read them, and nothing is written to your shared photo gallery.

7. Backups, exports, imports and links you control

Several features move your records off the phone — but only when you choose, and only to places you pick. We are never a party to those transfers and never see the files.

Backup files you make

The app can write a dated backup file containing your receipts, items and settings (it lists photo filenames but does not embed the images). When you choose, it copies a backup or an export to a folder, cloud-storage account or app that you select through Android’s file picker — Google Drive or OneDrive, for example. A file saved to such a service is handled under that service’s own terms; the app never receives your credentials for it.

Android’s own backup

The app allows Android’s built-in backup. According to your device’s backup settings, Android may copy the app’s database — receipts, items and settings, but not photos — to the backup that Google keeps for your own Google account, and restore it when you reinstall the app or set up a new phone. During a direct phone-to-phone transfer, photos are included too. That backup is encrypted by Google, belongs to your Google account, is governed by Google’s terms, and is not accessible to us. You control it in Android’s settings (usually Settings → Google → Backup).

Exports

The app can produce CSV and spreadsheet files, printable labels, and profit-and-loss statements from your records. When you export or share one, your phone’s share sheet opens and you choose the destination — email, a cloud drive, a messaging app, a printer or local storage. From then on the file is governed by the privacy policy of the app or service you sent it to.

Imports

You can import an orders report that you have downloaded yourself from eBay Seller Hub, or an inventory spreadsheet, by picking the file through Android’s file picker. The file is read on your phone and is not uploaded anywhere. The app has no connection to your eBay account and holds no eBay credentials.

Links to other services

Some features hand a link to your browser or another app: looking up comparable sold listings opens an eBay search in your browser (the search terms go to eBay), Manage subscription opens Google Play, and Send feedback opens your email app (Section 10). What happens after that is governed by the app or service that opens.

8. Device permissions

The app asks for the minimum it needs. You can grant or deny each permission, and change your mind later in your device settings.

The app does not request location, contacts, microphone, phone, SMS, calendar or broad storage permissions. Denying camera access does not lock you out — the scan and photo screens fall back to manual entry.

9. What we do not collect

To be explicit, we do not collect, transmit or store:

• Your receipts, inventory, photos, signatures, mileage, expenses, costs, sale prices, fees or profit figures.
• Your name, postal address or phone number. The app asks only for an email address, and only if you create an account.
• Location data of any kind. The app does not request location permission and does not derive location from anything else.
• Contacts, calendar, call logs, SMS or microphone audio.
• Advertising identifiers, or any identifier used to track you across other apps and websites.
• Payment card numbers, bank details or billing addresses.
• Usage analytics, crash telemetry or behavioural data gathered by us.

The app contains no advertising SDKs, no analytics SDKs of ours and no third-party trackers. We build no profiles and sell or rent nothing. Google Play itself may collect installation, crash and purchase information under Google’s own terms; what we see of that is the aggregated statistics Google provides to every developer in its console.

The QR and barcode scanner

The scanner is Google’s ML Kit, which the app runs through Google Play services on your phone. The camera picture and the codes it reads are processed on the phone and are never sent anywhere. ML Kit does send Google basic performance and usage statistics so that Google can maintain the scanner: the device’s manufacturer, model and Android version, the app’s package name and version, scanner settings such as image format and resolution, how long scanning took, and error codes. Google encrypts this in transit and says it does not pass it to third parties. We do not receive it. Google describes it on its ML Kit data disclosure page, and it is governed by the Google Privacy Policy. It is sent only when you use the scanner; typing a SKU instead sends nothing.

Google Play’s rating card

After you have recorded some sales, the app may ask Google Play to show its rating card, which lets you rate and review the app without leaving it. The app asks rarely and never in demo mode, and Google Play decides whether the card actually appears. The card is drawn by Google Play, not by the app. If you submit a rating or review, Google Play receives it with your Google account and publishes it on the app’s store page under Google’s terms. The app is not told whether the card appeared, whether you rated, or what you wrote. We see a published review only as Google shows reviews to every developer, and may reply to it publicly. You can edit or delete your review in the Play Store at any time.

10. Feedback and support

The app has no server of its own for messages. Send feedback composes an email in your own email app, addressed to app@resellerspro.tools, and nothing is sent until you press send there.

When you email us — feedback, a support question, a refund request or a privacy request — we receive your email address, what you wrote and whatever your email app adds to a message. We use it only to read, reply and act on the request. A refund request needs your Google Play order number, or must come from the email address of the Google account that bought the subscription, so that we can identify the purchase. Messages are kept only as long as needed to resolve the matter, and are deleted on request.

11. Service providers and other sharing

We do not sell, rent or trade personal information, and we do not share it for advertising or marketing. A small number of providers process data for us, on our instructions, to run the account system, the subscription and the website. Google also runs two parts of the app under its own terms: the scanner and the rating card (Section 9).

Beyond these, we disclose personal information only where the law compels it — a valid court order or subpoena, for example — or where it is necessary to investigate fraud, abuse of the subscription, or a threat to someone’s safety. Because your records never reach our servers, they cannot be produced in response to such a request. If the Company or the app is ever sold or merged, account information may transfer to the successor, who would be bound by this notice; we would give notice in the app or by email before that happened.

12. Where your data is stored

Account and subscription records are stored by Supabase on servers in the United States (Oregon).

Google processes purchase information on its own infrastructure, which may be anywhere Google operates. If you are in the European Economic Area, the United Kingdom, Switzerland or another region with data-transfer rules, using an account or buying a subscription means your account information is transferred to and processed in the United States. Where a transfer mechanism is required, we rely on the standard contractual clauses or equivalent terms our providers offer.

Your records are not transferred anywhere by us. They remain on the phone in your possession, and in any backup or export you choose to make.

13. How your data is protected

We protect your information partly by holding as little of it as possible, and partly through these measures:

• Encryption in transit. All traffic between the app and our servers, and between our servers and Google, uses HTTPS/TLS.
• Encryption at rest. The account database and its backups are encrypted at rest by our hosting provider.
• Hashed passwords. Passwords are salted and hashed with an industry-standard algorithm and are never stored in a readable form.
• One-time account links. Confirmation and reset links use a code that only the phone which requested it can redeem, so an intercepted email cannot take over an account.
• Row-level access control. A signed-in account can read only its own subscription record. Nothing but our own server can write one, so a modified app cannot grant itself Premium, and purchases cannot be re-homed from one account to another.
• No secrets in the app. The keys that let our server talk to Google and to the database never ship inside the app.
• App-private storage. Your records and photos are written to storage sandboxed to this app, inside your device’s own encryption and behind your screen lock. We strongly recommend keeping a PIN, pattern or biometric lock enabled.
• Minimal permissions. Camera only; files and photos are reached through the system pickers one file at a time. Broad storage permissions are deliberately removed from the app.

No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. If a breach ever affects your account information, we will notify affected users and the relevant authorities as the law requires. Please use a strong, unique password, and tell us at once if you suspect unauthorised access.

14. How long we keep things

Accounts that have never held a subscription and have not signed in for a long time may be removed as inactive. We will email the address on the account before doing so.

15. Deleting your account or your data

You can close your account at any time, and you never need to give a reason.

Closing your account

Use our account deletion page, which prepares the request for you, or email app@resellerspro.tools from the address on the account. We confirm by reply and complete the deletion within 30 days, usually much sooner.

Delete your account →

Deleting the account erases your email address, password hash, account identifier, preferences and sessions, and removes your address from any release-email list. Subscription records are unlinked from you and kept only as anonymous transaction records for the period in Section 14. Your referral code is deleted, and referral records are unlinked from you in the same way. Deletion is permanent; we cannot restore a deleted account. If you would rather remove only part of what we hold — support emails, say, or a website sign-up — without closing the account, see our data deletion page.

Data on your phone

Your records on the device are separate from your account, and closing the account does not touch them. To erase them, open Account → Delete all data in the app, which permanently removes every receipt, item, setting and photo from that phone, or uninstall the app or clear its storage from your device settings. Export first if you might want the records later — we hold no copy and cannot recover them. Any copy in Android’s backup belongs to your Google account and is managed from your Android backup settings; copies you exported or backed up elsewhere are wherever you put them.

16. Your privacy rights

Depending on where you live — including under the GDPR in the EU, the UK GDPR, and the CCPA/CPRA in California — you have rights over your personal information.

• Access — ask for a copy of the account and subscription information we hold about you.
• Correction — ask us to correct anything inaccurate.
• Deletion — close your account (Section 15), or ask us to remove specific data via our data deletion page.
• Portability — your records are already portable: the app exports them to CSV and spreadsheet files, and writes full backup files, at any time.
• Objection and restriction — object to, or ask us to restrict, processing of your account data, including release-update emails, which you can stop at any time (Section 4).
• Withdraw consent — where processing rests on consent, withdraw it at any time without affecting what was done beforehand.

We do not sell or share personal information as those terms are defined under California law, we do not use it for targeted advertising or profiling, we do not collect sensitive personal information, and we will never treat you differently for exercising a privacy right.

Our legal bases for processing under the GDPR are: performance of a contract (running your account and delivering the subscription you paid for), legitimate interests (keeping accounts secure, preventing fraud and subscription abuse, answering your messages, and telling people who created an account about new versions of the app, with an easy way to opt out), legal obligation (tax and accounting records), and consent where we separately ask for it.

To exercise any right, email app@resellerspro.tools from the address on your account. We respond within 30 days. If you are in the EEA or the UK and are unhappy with our response, you may complain to your local data protection authority.

17. Children’s privacy

Resellers Pro Tools is a business tool for adults running a resale business. It is not directed at children, and we do not knowingly collect personal information from anyone under 13, or under the minimum age that applies where you live.

If you believe a child has created an account or sent us personal information, contact us and we will delete it promptly.

18. This website

resellerspro.tools is a small informational site on standard shared web hosting.

• Server logs. Like nearly every web server, the host records standard access logs — IP address, browser type, pages requested and time — for security and troubleshooting. They are kept for a limited period on the host’s standard rotation and are not used to build a profile of you.
• Launch sign-up form. If you enter your email address to hear about the app, we store the address together with the time, which form you used, the IP address and the browser type of the request. The last two exist only to stop abuse of the form and are never used for anything else. The list lives in a file on our host that only we can read. We use it to tell you about the app’s launch and new versions, nothing more, and every email includes a way to unsubscribe. To be removed sooner, email us.
• Fonts. These pages load the Archivo typeface from Google Fonts, so your browser requests the font files from Google’s servers and Google receives your IP address for that request, under the Google Privacy Policy.
• Cookies. The public pages set no cookies and load no advertising or analytics scripts. The only cookie on this site belongs to the private, password-protected sign-up dashboard that we use ourselves.

19. Changes to this notice

We update this notice when the app gains features that change what it does with information. The version and effective date at the top change, and the revised notice takes effect when posted at this address, which we keep stable so it can be checked at any time.

If a change materially affects how your information is handled, we will give notice inside the app, or by email to the address on your account, before it takes effect. Continuing to use the app after that means you accept the revised notice.

• October 5, 2026 — v4 Refer & earn described: the referral code, the referral records we keep, that no one sees another person’s name or email, and how long the records are kept.
• October 3, 2026 — v3 The QR and barcode scanner (Google’s ML Kit) and the basic performance statistics it sends Google described. Google Play’s optional rating card described. Google’s ML Kit added to the providers in Section 11.
• October 1, 2026 — v2 The Motivational Hub LLC named as publisher and controller. Accounts described as optional. Google Sign-In removed. Google Play subscription records, the account-id hash and Google’s real-time notifications described. Release-update emails added. Android’s built-in backup, exports, imports and outbound links described. Retention for subscription records added.
• August 26, 2026 — v1 First version.

20. Contact us

Questions, privacy requests, or anything unclear above — please get in touch. A real person reads every message.