Privacy Policy
Effective date: July 27, 2026
This Privacy Policy is drafted in English. Any translation, including the Spanish version of this page, is provided for convenience only; if there is any discrepancy, the English version controls.
The short version
YardPath keeps your business data on your devices and syncs it privately through your own iCloud account. There is no YardPath account, and no YardPath server stores your business records, your customers, jobs, invoices, and mileage never land on our infrastructure. The one exception is a message you choose to send us: if you write to us through the contact form, that message is held briefly on our infrastructure so it doesn’t get lost, then deleted, see Contact form. We don’t sell your data, show ads, or build advertising profiles.
What YardPath stores, and where
The customers, jobs, mileage trips, invoices, and settings you create are stored locally on your device and, if you’re signed in to iCloud, synced across your Apple devices via Apple’s CloudKit into your private iCloud database. This data is controlled by your Apple ID and governed by Apple’s privacy policy. We do not have access to it.
This covers the records you create in the app. It does not cover a message you deliberately send us, which is handled as described under Contact form.
Location
Location is used only to record mileage between jobs, and only when you turn on mileage tracking. Your location data stays on your device and in your private iCloud; it is never sent to us or to any third party. There is no fleet tracking or shared location.
Contacts
If you choose to import or export customers, YardPath accesses iPhone Contacts solely for that action and only with your permission. Exports are written to a dedicated “YardPath Customers” contacts group. Contacts access is never used for any other purpose.
Messages and invoices
When you notify a customer or send an invoice, YardPath composes an SMS or email from your own device and accounts, it hands the message to Apple’s Messages/Mail. YardPath does not route those messages through our servers.
Diagnostics
If you export diagnostics for support, the log is designed to exclude personal information, no customer names, addresses, phone numbers, invoice amounts, or GPS coordinates. You choose when and with whom to share a diagnostics file.
Contact form
When you write to us, we collect only what you type: your message, and, if you choose to fill them in, your name, email address, and support code. If you’re writing from inside the app, the message also carries the PII-light diagnostics snapshot described under Diagnostics.
Your message is held briefly on our own infrastructure (Cloudflare, on servers currently located in the United States) so that delivery is reliable even if a service further down the line is having a bad day, a hiccup becomes a delay instead of a lost message. From there it’s filed into our private support tracker (GitHub) and emailed to us. The stored copy is deleted within 90 days of delivery. We do not store your IP address or any device fingerprint.
The form uses Cloudflare Turnstile to tell humans from bots. Turnstile processes the request to make that check, and it runs before anything is stored, so a submission that fails the bot check leaves nothing behind. See Cloudflare’s privacy policy for how Cloudflare handles what it processes.
We use what you send only to answer you and to improve the app. It is never sold and never used for advertising.
Analytics & tracking
YardPath does not include third-party advertising or analytics SDKs and does not track you across apps or websites.
Contact
Privacy questions? Reach us through the contact page.