Everything you enter about your duty rotation, swaps, leave balance, planned leave, and settings is stored locally in your browser (localStorage) on your device only. It is never transmitted to, or stored on, any server operated by us. We cannot see it, and neither can anyone else with access to our systems. Clearing your browser data or using the in-app "Erase all data" button permanently deletes it.
The one-time $1.99 unlock is processed entirely by Stripe. Your card number never touches MaxLiberty's own code or servers — you enter it on Stripe's hosted checkout page, and Stripe handles it under PCI-DSS. We never see or store card details.
To prevent the same card from being used to unlock unlimited "new" free accounts, our payment backend keeps a minimal account/payment-verification record: your account email, a paid/unlocked flag, the date of purchase, and a card fingerprint provided by Stripe (an opaque identifier that lets Stripe recognize a repeated card — it is not your card number and cannot be reversed into one). That's all. No duty, leave, or schedule data is ever included.
MaxLiberty contains no analytics, no ads, and no third-party trackers. Fonts may be loaded from Google Fonts, which involves your browser requesting font files from Google; no app data is included in those requests.
If this policy changes materially, the app will say so before you continue using it.