Privacy Policy

Last updated: 7 October 2026

This policy explains what information is collected, used and shared when you visit tyrosuite.com, use the Boxing Timer app for Android (app.boxing.timer) on Google Play, use the SproutSave expense tracker for Android (com.tyrosuite.sproutsave), or use the TindaMate utang ledger for Android (com.tyrosuite.tindamate.utang). All are operated by Wuffalo Eight ("we", "us"), trading as Tyrosuite. You can reach us any time at support@tyrosuite.com.

ResiboNow (app.resibonow) is also ours, but it runs on its own domain and publishes its own policy — see the ResiboNow privacy policy. Deletion instructions for every app, ResiboNow included, are on our account deletion page.

1. Summary

• None of the apps on this page has accounts. There is no sign-up, no login, and no server holding your data. We operate no database of user information for them.
• The website is a static site. Your timer settings on the web are stored only in your own browser.
• Boxing Timer and SproutSave both show ads through Google AdMob. AdMob and its partners collect device and usage information — including your device's advertising ID — to serve and measure ads. This is the main way data leaves your device in those apps.
• SproutSave's ad requests carry nothing about your money. No amounts, merchants, categories, income or location are attached to an ad request (see Section 4).
• Your SproutSave ledger never leaves your phone, and receipt photographs are never uploaded. Receipt text is read on the device itself.
• TindaMate is fully offline — your customer and utang data is encrypted and stored only on your device. There is no account and it carries no ads (see Section 5).
• Outside the European Economic Area, the UK and Switzerland, ads may be personalised. Within those regions you are asked for consent first, and can choose non-personalised ads.

2. The website (tyrosuite.com)

The website is served as static files. It sets no advertising or analytics cookies and has no login. Two things are worth noting:

• Fonts. Pages load web fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). Google receives your IP address as part of that request. See Google's Privacy Policy.
• Local storage. The in-browser boxing timer saves your chosen rounds, rest and warning settings in your browser's local storage on your device. This never leaves your device and is not sent to us. Clearing your browser data removes it.
• Hosting logs. Our hosting provider may process standard server request data (such as IP address and user agent) transiently to deliver the site and guard against abuse.

3. The Boxing Timer Android app

3.1 What the app itself stores

Your round, rest, warm-up and volume preferences are stored locally on your device so the app remembers them between sessions. The app works fully offline and does not upload these settings.

3.2 Advertising through Google AdMob

The app uses Google AdMob (a Google advertising service) to display ads, which is how the app is funded. To serve, cap, and measure those ads, Google and — where mediation is used — other advertising partners may collect and process:

• your device's advertising ID (a resettable identifier) and, in some cases, an app-set ID;
• IP address and derived approximate (coarse) location, such as country or city;
• device information — model, operating system version, language, screen size, network type, and similar technical attributes;
• ad interaction data — which ads were shown, viewed or clicked, and diagnostic data about ad delivery.

Both apps declare Android's advertising ID permission (com.google.android.gms.permission.AD_ID) and the Privacy Sandbox ad-services permissions required by the current Google Mobile Ads SDK. Ad content in both apps is capped at Google's “G” (general audiences) rating, which excludes gambling, alcohol and other mature categories.

This information is used to select ads (personalised or non-personalised), limit repetition, measure performance, and detect invalid activity and fraud. Google acts as an independent controller of the data it collects through AdMob. For details of how Google uses this data, see How Google uses information from sites or apps that use its services and the Google Privacy Policy. For an overview of AdMob data practices, see About AdMob and privacy.

3.3 Google Play Services

Like most Android apps, Boxing Timer relies on Google Play services, which may collect information for functionality, security and abuse prevention as described in Google's Privacy Policy. The app does not contain in-app purchases and does not process any payment information.

3.4 Consent and personalised ads (EEA, UK, Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, the app presents a consent message (provided through Google's User Messaging Platform) before serving personalised ads. You can decline, in which case you will see non-personalised ads, which still require limited data (such as coarse location and basic device data) to be shown and measured. You can change your choice later from within the app where that option is offered.

4. The SproutSave Android app

SproutSave is an expense tracker available free on Google Play for Android (com.tyrosuite.sproutsave). It runs entirely on your device — there is no account, no sync and no server — and it shows one ad on the home screen.

4.1 There is no account and no server

SproutSave opens straight into the app — no email, no password, no sign-up, no sign-in screen. There is no account to create, and we run no server that holds your entries. Everything you record lives in the app's private storage on your phone and nowhere else.

This means there is no copy of your ledger for us to read, hand over, lose, or be compelled to produce. It also means there is no cloud backup: if you lose the phone or uninstall the app without exporting first, the data is gone. Use Settings → Back up & restore to make an encrypted backup file you keep yourself, or Export as CSV.

If we ever add an optional sync service, this page will be updated and the app's Google Play Data safety section changed before it ships.

4.2 How your ledger is protected on the device

Entries are stored in a database in the app's private storage, which other apps cannot read. The free-text fields you write — the note and the merchant name — are additionally encrypted using a key held in Android's secure storage. A PIN app-lock, if you enable one, is stored as a hash, never as the digits you typed.

4.3 What actually leaves your device

Only two things, and neither carries your financial data:

• Ad requests to Google AdMob, described in 3.2 and 4.4.
• Exchange-rate lookups, described in 4.7.

Your expenses, income, budgets, goals, categories, tags, receipts and everything the app learns from scanning your receipts stay on the device.

4.4 Ads in SproutSave

SproutSave shows a single sponsored card on the home screen, labelled “Sponsored”. There are no full-screen ads, no ads between actions, and no ads anywhere else in the app.

The ad request is deliberately empty of anything about you: no keywords, no content URL, no custom targeting parameters. Your expenses, income, merchant names, categories, budgets, goals, receipts and precise location are never attached to an ad request, and the part of the app that requests ads has no access to your ledger. Google still receives the device and ad-delivery data listed in 3.2, because that is how any ad is delivered — but it learns nothing about your finances from us.

Where your region requires it, you can review or change your ad consent at any time under Settings → Ads → Ad privacy options.

4.5 Receipt photographs stay on your phone

Receipt photos you attach to an expense are stored in the app's private storage on your own device. They are not uploaded anywhere — not to us, not to any third-party file host, and not to the ad network. They are included in a backup file only if you make one yourself, and that file stays wherever you put it.

4.6 Receipt scanning happens on your phone

When SproutSave reads text from a receipt photo, it uses Google's ML Kit text recognition running entirely on your device, with the model bundled inside the app. The photo is not uploaded for processing, and the text read from it is not sent anywhere.

4.7 Currency exchange rates

If you record an amount in a different currency, the app fetches published exchange-rate tables from Frankfurter and, as a fallback, open.er-api.com. These requests ask only for rate tables — no amounts, entries or personal data are sent — but, as with any web request, the provider receives your IP address.

4.8 Optional device permissions

SproutSave may request camera or photo-library access to attach a receipt image to an expense, and device storage access to export your data (for example to CSV). These are used only when you choose to use those features.

5. The TindaMate Android app

TindaMate is an offline utang (credit) ledger for sari-sari store owners, currently in development for Android (com.tyrosuite.tindamate.utang). Version 1.0 is built to work with no network connection at all, and it carries no ads.

5.1 No account, no server, no sync

TindaMate does not require you to sign up or log in. Your customer list, utang entries, payment history and any inventory data you enter are stored only on your device and are never transmitted to us. Every network-dependent feature (cloud backup, distributor price sync) is switched off for version 1.0 behind a single build-level flag, so the app makes no network calls in normal use. It does still declare Android's internet permission, because that deferred code remains in the app ready for a future release — we will update this page before any of it is switched on.

5.2 How your ledger is protected on the device

The ledger is held in a database encrypted with SQLCipher, using a passphrase generated on your device and kept in Android's hardware-backed secure storage. You can also set a PIN, which is stored only as a hash, never as the digits you typed.

5.3 SMS reminders

If you choose to send a customer a payment reminder, TindaMate uses your device's own SMS function to send it directly from your phone number. We do not see, store or relay the message — it goes straight from your device to the recipient's, the same as if you typed it in your messaging app. Standard carrier charges apply, and your customer sees your number, not ours.

5.4 Customer details you enter

The names, nicknames and any contact numbers you record belong to other people, so treat the ledger as you would the paper listahan it replaces. We never receive this information — but it does sit on your phone, which is why we recommend turning on the PIN lock.

5.5 Camera for barcode scanning

If you use barcode scanning to add or look up a product, the app requests camera access. Scanning uses Google's ML Kit barcode model bundled inside the app, so it runs fully offline; the camera image is not stored or uploaded — it is only used momentarily to read the barcode.

5.6 Exported files

If you export or print a customer's utang history (for example as a PDF), that file is generated and shared directly from your device using Android's own share/print system — it does not pass through any server we operate.

5.7 Local backups

TindaMate can write a local backup file, encrypted under your PIN, so your ledger survives a lost or reset phone. The file is saved to the app's folder in your device's storage, where a file manager can see it, so that you can copy it to an SD card or send it to yourself. Once you copy or send that file, wherever it lands is outside our control — keep it somewhere you trust, and remember that restoring it needs the PIN it was made with.

5.8 Android's automatic backup is off

The app's data is explicitly excluded from Android's automatic cloud backup (allowBackup="false"), so your ledger is not copied to your Google account by the operating system.

6. How to control your data

• Reset or delete your advertising ID. On Android: Settings → Privacy → Ads (wording varies by device), where you can reset the advertising ID or delete it so apps can no longer use it for personalised ads. This applies to Boxing Timer and SproutSave.
• Opt out of personalised ads in the same Android Ads settings, or through the in-app consent controls described in 3.4. In SproutSave, where your region requires the control, that is Settings → Ads → Ad privacy options.
• Clear local data. Uninstalling an app or clearing its storage removes the settings and data kept on your device, including your SproutSave ledger and your TindaMate ledger. Clearing your browser data removes the website timer settings. Note that a backup file you have already copied elsewhere is not removed by uninstalling — delete it yourself if you no longer want it.
• Erase your SproutSave ledger from inside the app. Settings → Reset all data erases every expense, income entry, budget, goal and receipt on the device. It deliberately keeps your preferences — PIN, currency, theme and layout — so that clearing out data does not quietly switch your app lock off.
• There is no account to delete for the website, Boxing Timer, SproutSave or TindaMate, because none of them has accounts and we hold no data about you. Uninstalling removes everything. ResiboNow, which runs on its own domain, does have accounts and self-service deletion under Account → Delete account; see our account deletion page.
• Ask us. Email support@tyrosuite.com with any request about your data. Because we collect no information that identifies you through these apps, we will usually have nothing to look up — but we will say so plainly, help where we can, and pass on what we can to Google.

7. Data retention

We maintain no database of user data for any app on this page, so we retain nothing of yours. On-device settings and data persist until you clear them or uninstall. Data collected by Google through AdMob and Google Play services is retained according to Google's own policies, which we do not control.

8. Children

Boxing Timer, SproutSave and TindaMate are general-audience tools, not directed to children under 13 (or the equivalent minimum age in your country), and none is part of the Google Play "Teacher Approved" or families programme. None of them asks for your age or date of birth. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will address it.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to processing, to data portability, and to lodge a complaint with your local data protection authority. Where you have given consent — including ad consent — you may withdraw it at any time, as described in 3.4. For data processed by Google as a controller, you can exercise rights directly with Google. For anything within our control, contact support@tyrosuite.com.

10. International transfers

We hold no data about you to transfer. The third parties listed in Section 11 may process the data they collect — chiefly ad-request data — in countries other than yours, including the United States and the European Union, under the safeguards described in their own privacy documentation. Nothing you record in SproutSave or TindaMate is transferred anywhere, because it never leaves your device.

11. Third-party services we use

12. Changes to this policy

If our data practices change — for example if we add analytics, crash reporting, or a new ad or service partner — we will update this page and change the "last updated" date above. Material changes affecting an app will also be reflected in that app's Google Play Data safety section.

13. Deleting your account

Instructions for deleting your account and data for each app — what is removed, what may briefly remain, and how long it takes — are on our account deletion page.

14. Contact

Wuffalo Eight (Tyrosuite)
Email: support@tyrosuite.com