Privacy Policy
Last updated Oct 26, 2026
AccLyf Books (acclyfbooks.com and our iPhone and Android apps) is run by NoobLyf, LLC ("we", "us"). This policy explains what we collect, why, who we share it with, and the choices you have. It is written to be read, so if anything is unclear, email support@nooblyf.com.
The short version
- We collect what you put into the app to keep your books, plus what we need to run your account.
- We don't sell your data, share it for advertising, or use it to train AI models.
- We don't use advertising or tracking cookies. The cookies we set keep you signed in and secure.
- Each business's books are visible only to the people that business invites.
- You can download all of a business's data at any time and delete your account in the app.
What we collect
Account information. Your name, email address and password (stored only as a one-way hash), two-step sign-in settings, and a list of devices you've signed in from, so we can warn you about new sign-ins. We also keep a security log of sign-ins, failed attempts and security changes (with the IP address and browser) so you and we can spot misuse of your account.
Business and accounting data. Everything you or your team enter or import: business details, chart of accounts, invoices, quotes, bills, expenses, customers and suppliers (names, emails, addresses), bank transactions, payroll totals, mileage, projects and time, reports, and the files you upload, such as receipts and logos. We keep an audit history of changes, as accounting records require.
Connected services. If a business connects a bank through Stripe Financial Connections, we receive account names, the last four digits, balances and transactions. We never see or store your bank sign-in details. If a business takes online payments, card and bank details go straight to Stripe; we receive only the payment result. If a business connects Gusto, we receive pay run totals (not individual employees' details).
Accountant applications. If you apply for a free practice account, we collect your firm's name, contact details and website, the credential you name (such as a license or enrollment number and issuing state, or a certification), your PTIN if you give it, and any proof file you upload. Only NoobLyf staff who review applications see them; we use them to check that you're in practice and keep them while your practice account exists.
Billing. Your subscription status and plan. Stripe handles card details; we never store full card numbers.
Technical information. IP address, browser or app type and basic logs our hosting providers record, used for security, rate limiting and fixing problems. On our public pages only (home, sign-up, sign-in and these legal pages), Vercel Web Analytics counts visits: the page, referrer, country and device type, without cookies or tracking you across sites. Nothing from inside your books is sent. We don't run advertising tools.
How we use it
- To provide the service: keep your books, send the emails you ask us to send, produce reports and exports.
- To keep accounts safe: sign-in protection, lockouts after repeated failures, alerts about new devices.
- To bill for the subscription and send account notices (for example, a trial ending or a failed payment).
- To answer support requests and fix bugs.
- To read the ideas you send from Request a feature. NoobLyf staff see the text and any screenshot, with your name, email and business name. We thank you by first name on the public What's new page only if you tick that box, and you can untick it later.
- To meet legal obligations, such as tax record keeping or a valid legal request.
We don't send marketing email unless you ask for it, and every such email will have an unsubscribe link.
AI features
When you ask AccLyf Books to read a receipt or use Ask AI, the receipt image or your question and the relevant figures from your books are sent to our AI provider (OpenAI or Anthropic) to produce the answer. Both process this data under business terms that don't allow them to train their models on it. We don't store the text of your prompts or the AI's answers, only a count of requests for usage limits. AI only suggests: nothing is posted to your books until you review and save it.
Who we share it with
We share data only with the service providers below, who process it on our behalf to run AccLyf Books:
| Vercel | Hosts the website and app servers (United States), and counts visits to our public pages (Web Analytics, no cookies). |
|---|---|
| Supabase | Database and file storage for your books and receipts (United States). |
| Stripe | Subscription billing, online invoice payments, bank feeds (Financial Connections) and sales tax rates. |
| Resend | Delivers email: sign-in links, invoices, reminders and notices. |
| OpenAI or Anthropic | Reads receipt images and answers questions in Ask AI, only when you use those features. |
| Gusto | Sends pay run totals, only if a business connects its Gusto account. |
| Zapier | Receives the events and data you choose, only if you connect a Zap with your API key. |
| Cloudflare | Turnstile checks that sign-up, password reset and repeated sign-in attempts come from a person. It sees your IP address and browser details, not your password. |
| Have I Been Pwned | Checks new passwords against known breaches. Only the first 5 characters of a one-way hash of the password are sent, never the password. |
We also share data when you tell us to (for example, emailing an invoice to your customer, sharing a public invoice link, or sending events to a webhook or Zapier), when the law requires it, or to protect people's safety or our rights. If NoobLyf, LLC is ever sold or merged, your data would move to the new owner under this policy, and we would tell you first.
Your customers' and suppliers' data
When a business stores details about its own customers, suppliers or employees in AccLyf Books, the business decides what is stored and why, and we process that data on its behalf. If you are one of those people and want your data changed or removed, please contact the business first. We'll help them respond.
Cookies
We use only the cookies the service needs: one that keeps you signed in, and short-lived ones that protect sign-in and connection flows (for example, when connecting Gusto). The phone apps and the installed web app also keep a small offline copy of the receipt screen and any receipts waiting to upload, on your device only.
How long we keep it
- Accounting data stays as long as the business uses AccLyf Books, and remains available to download after a subscription ends.
- If you delete your login, we erase your name, email, password and devices right away and remove you from every business. Entries you posted stay in those businesses' books, credited to "Deleted user", because their records must stay complete.
- To have a business's books deleted entirely, its owner can email support@nooblyf.com. We'll delete them within 30 days, except what the law requires us to keep. Backups roll off within a further 30 days.
- Records of emails a business sent and its audit history stay with that business's books and are deleted with them.
- Screenshots sent with feature requests are deleted 90 days after the idea ships or is set aside. Deleting your login removes your requests' details and screenshots; their titles stay so we can count interest. You can withdraw a request at any time, which deletes it and its screenshot.
Security
Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Passwords are hashed, two-step sign-in is available, and stored connection tokens (such as Gusto's) are encrypted. Each business's data is separated from every other business's, and only members it invites can see it. No system is perfectly secure; if a breach affects your data, we'll tell you without undue delay.
Your choices and rights
- See and correct your data in the app at any time.
- Download a business's complete data (Settings → Billing → Download all data), available to owners and accountants, even after cancelling.
- Delete your account in Settings → Sign-in & security.
- Ask us for a copy of your personal data, or to correct or delete it, by emailing support@nooblyf.com.
Depending on where you live (for example, California under the CCPA), you may have further rights, such as knowing what personal information we collect and asking us to delete it. We honor these requests for everyone, and we won't treat you differently for making one. We don't sell or "share" personal information as those laws define it. We'll answer within 30 days, and may need to confirm it's really you first.
Where data is stored
AccLyf Books is built for US businesses, and our providers store data in the United States. If you use it from elsewhere, your data is transferred to and processed in the US.
Children
AccLyf Books is a business tool for adults. We don't knowingly collect data from anyone under 18; if you believe a child has given us data, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top. For changes that matter, we'll also email account owners before they take effect.
Contact
NoobLyf, LLC, support@nooblyf.com. See also our Terms of Service.