1 Who operates EarnPath
Al Ocaso Media LLC
Texas, United States
Privacy inquiries: legal@earnpath.app
Security reports: legal@earnpath.app
Website: https://earnpath.app
2 Information EarnPath collects
When you create an account and use the app, EarnPath collects:
- Identity — your name and email address, received from Apple or Google when you sign in. There is no password form and no password stored; authentication runs through your Apple or Google account.
- Professional profile — the role and sub-role you select, and the skills you configure.
- Work records — the gigs you log: the client and employer names you enter, amounts, dates, work frequency, and gig status.
- Financial configuration — the deductions, withholding rules, break-even point, and savings goals you set.
- Device identifiers — used only to deliver push notifications you enable.
A note on location. EarnPath does not collect GPS data and does not track your device’s location. The client and venue names you type can imply where you work — that information exists in the app only because you entered it, and it stays under your control.
What EarnPath does not collect or hold
- No payment card data. Subscriptions are processed by Stripe. Card numbers go to Stripe and never touch EarnPath’s servers; EarnPath keeps only the transaction identifiers needed to manage your subscription.
- No GPS or device location tracking.
- No messages between users. The feature does not exist.
- No data sales. EarnPath does not sell, rent, or broker user data, and does not build advertising profiles.
3 Why this information is collected
Every data point maps to a function of the service:
- Operating the core service — recording gigs, calculating gross to net, showing your dashboard.
- Syncing and backing up your records so they survive a lost or replaced device.
- Managing your subscription and billing.
- Delivering notifications you turn on.
- Surfacing patterns through Lens (Section 4).
- Responding when you contact support or exercise your privacy rights.
- Protecting the service — preventing fraud, abuse, and unauthorized access.
EarnPath does not collect data beyond what the service needs. Any new category of data collection requires an update to this policy before it begins.
4 Lens
Lens is EarnPath’s pattern recognition feature. It reviews your own records — and only yours — to surface what deserves your attention: an unusual expense, a savings goal reached, a gig left open longer than usual. Each Lens request is scoped to the minimum information that insight needs, is processed by a service provider (Anthropic) solely to generate the insight, and is never used to profile you for advertising.
5 Service providers
EarnPath relies on a small set of providers to run. Each receives only the data its function requires and operates under its own privacy policy.
| Provider | Function | What it receives | Location |
|---|---|---|---|
| Apple / Google | Sign-in | Name and email at authentication | United States |
| Stripe | Subscription billing | Billing details; card data is handled entirely by Stripe | United States |
| Supabase | Database hosting for sync and backup | Your synced account records, encrypted | United States |
| DigitalOcean | Server hosting | Data passing through EarnPath’s backend | United States |
| Anthropic | Processing of Lens requests | The scoped records each insight needs | United States |
| OneSignal | Push notification delivery | Device identifiers | United States |
6 Where your data lives
EarnPath is built offline-first. The primary copy of your records lives on your device and works without a connection. When a connection is available, an encrypted copy syncs to servers located in the United States for backup and recovery.
Closed gigs are immutable. Once you close a gig, no process in the system can alter it. Your history is a permanent record — by design.
7 Security
Security at EarnPath is a commitment and a practice, not a guarantee. The practices in force:
- Encryption in transit (TLS) on every connection between the app and the backend.
- Encryption at rest on the remote database.
- Server-side validation of your sign-in on every authenticated request.
- Monitoring for unusual database activity, off-hours access, and bulk export attempts.
- Strict internal access limits — minimum necessary access only, logged, and revoked when an engagement ends.
No system is immune to every risk. If a breach affecting your data is confirmed, EarnPath will notify affected users within 72 hours of confirmation, in plain language: what happened, what was exposed, what has been done in response, and what you can do.
8 Retention and deletion
| Data | Retention |
|---|---|
| Active account data | Retained while your account is active |
| After you delete your account | Flagged for deletion immediately; 30-day recovery window in case the deletion was accidental |
| After the 30-day window | Permanently and irreversibly deleted from all systems, including backups |
| Database backups | Encrypted and rotated; never retained longer than 30 days |
Before deleting your account, you can request a full export of your records. Written confirmation of deletion is available on request. Records of your subscription payments remain with Stripe under its own retention obligations.
9 Your rights
You can access, correct, export, and delete your data. These rights apply to every EarnPath user, in every state.
- In the app: your records, configuration, data export, and account deletion are directly in your hands.
- By request: write to legal@earnpath.app for anything the app does not cover.
Identity verification for data requests runs through the Apple or Google account registered to the data. An email alone cannot unlock anyone’s records — this protects you from impersonation. Requests are free and answered within 45 days; if more time is required, you receive notice and the period extends once.
California residents. The California Consumer Privacy Act formalizes the rights to know, correct, delete, and opt out of the sale or sharing of personal information. EarnPath does not sell or share personal information as those terms are defined, so there is nothing to opt out of. Exercising any right never results in discriminatory treatment.
10 How legal requests are handled
EarnPath responds only to valid legal process, reviewed by legal counsel before any data is produced. When compliance is required, the minimum data legally demanded is produced — nothing more. EarnPath’s policy is to notify you before complying with a legal request for your data, unless a court order or law prohibits notification; if notification is blocked, you are informed as soon as the restriction is lifted.
EarnPath cannot produce what it does not hold: there is no card data, no GPS trail, and no user-to-user messaging to produce.
11 Estimates, not tax advice
EarnPath’s calculations, projections, and withholding templates are estimates and reference data. They carry no link to any tax authority and are not tax, legal, or financial advice. Decisions about your taxes belong with you and a licensed tax professional.
12 Age
EarnPath is built for working professionals and intended for users 18 and older. It is not directed to children under 13, and EarnPath does not knowingly collect information from children under 13. If such collection is discovered, the data is deleted — report it to legal@earnpath.app.
13 Changes to this policy
This policy is updated when the law changes, when features change, or when data practices change. New data collection never begins before this policy is updated to describe it. Material changes are announced in the app and by email before they take effect, and the effective date above is revised.
14 Acceptance
By creating an account or using EarnPath, you accept the terms of this policy.
Al Ocaso Media LLC — legal@earnpath.app