Privacy policy.

Google Play edition

The public Android edition keeps your books on your device. When you choose to email or share an invoice, it prepares a PDF and opens the installed Gmail app, another mail app, or Android’s sharing options. You choose the app, account and recipient, and complete the send there. That app receives the content you share and handles delivery under its own policy.

The Google Play edition does not request direct access to your Google account. The optional direct Gmail connection described below applies to approved test builds.

Business records on your device

Gildfold uses the information you enter to manage your books. This can include your business profile and logo, customer and supplier names and contact details, products, stock movements, jobs, quotes, invoices, payments, expenses, and receipt photos you choose. The app stores this data in its private storage on your device. Cloverwright does not receive a copy of your workspace.

You can use the ledger offline. Device screen lock in Settings lets you protect access using your phone’s authentication. Your phone’s operating system also manages the security of its storage.

Sharing invoices and files

When you save a PDF, share it, or open it in a mail app, you choose the destination. A shared invoice can show customer and business details, products or services, prices, taxes, credits, payments and payment instructions. The receiving app or storage provider can access the content you send to it. Email recipients can keep or forward their copy.

Where the app records that it opened a mail composer or sharing options, this records a handoff. Check your mail app’s Sent folder for the actual message.

Optional Gmail in test builds

Approved iPhone and Android testers can choose to connect their own Gmail. Gildfold asks Google to identify the sender’s email address and to allow the app to send email. These permissions do not allow Gildfold to read your inbox.

On iPhone, Gildfold stores Google authorization credentials in the device Keychain. On Android test builds, Google Play services manages authorization and Gildfold stores your chosen email address locally. The address lets you see and confirm the sender.

When you send through a connected account, your device sends the sender and recipient addresses, subject, message and invoice PDF to Google over an encrypted connection. Google handles delivery to the recipient. If you enable automatic email on issue, issuing a new invoice to a customer with an email address can also send that PDF. You can turn the option off in Settings.

The local invoice history records the recipient, time, sending status and Gmail’s message identifier when available. Gildfold uses Google account data to identify the sender and deliver invoice emails you authorize. Cloverwright does not sell Google user data or use it for advertising. Gildfold’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google API Services User Data Policy

Backups and exports

You can export a readable JSON workspace backup, CSV records or a PDF. Backups may contain contact details, financial records, saved images and email history. Google authorization tokens are excluded. Choose a local destination to keep your backup offline. Selecting a cloud storage service gives that provider the file. Anyone with access to an exported file can read it. A backup is a snapshot of your books at the time of export.

Retention and deletion

Business records remain on your phone until you replace the workspace with a backup, erase the business data, or remove the app and its local data. Open Workspace → Settings to delete your business data. On Android this also removes the local sender selection and cached invoice PDFs. You can also clear app storage in Android settings.

For a connected test account, disconnect Gmail in Gildfold’s Settings. On iPhone, disconnect removes the saved credentials and requests revocation from Google. If that request fails, remove Gildfold in Google Account connections. On Android, disconnect clears the sender and turns off automatic sending. To revoke Google’s permission, remove Gildfold from your Google Account. Google Account connections

Delete exported files separately from the locations or providers you selected. Copies you already sent or shared remain with their recipients.

Website and privacy contact

This site uses no advertising cookies or analytics trackers. Its hosting provider handles connection information needed to deliver pages, such as the IP address making a request.

Cloverwright develops Gildfold. For privacy questions and requests, email hello@cloverwright.com. If you contact us, we receive the address and information you choose to send so we can respond.