Everything you enter about your duty rotation, swaps, leave balance, planned leave, and settings is stored locally in your browser (localStorage) on your device only. It is never transmitted to, or stored on, any server operated by us. We cannot see it, and neither can anyone else with access to our systems. Clearing your browser data or using the in-app "Erase all data" button permanently deletes it.
The $1.99/month subscription (with its 3-day free trial) is processed entirely by Stripe. Your card number never touches MaxLiberty's own code or servers — you enter it on Stripe's hosted checkout page, and Stripe handles it and all recurring charges under PCI-DSS. We never see or store card details. Canceling, changing your card, and viewing invoices all happen in Stripe's billing portal (Settings → Manage subscription).
To run the subscription and prevent the same card from starting unlimited "new" free trials, our billing backend keeps a minimal billing record: your account email, your Stripe customer and subscription IDs, the subscription status (trialing, active, past due, or canceled), whether a trial has been used, dates, and a card fingerprint provided by Stripe (an opaque identifier that lets Stripe recognize a repeated card — it is not your card number and cannot be reversed into one). That's all. No duty, leave, or schedule data is ever included. The app periodically asks this backend for your subscription status; that request contains only your Stripe customer ID.
MaxLiberty contains no analytics, no ads, and no third-party trackers. Fonts may be loaded from Google Fonts, which involves your browser requesting font files from Google; no app data is included in those requests.
If this policy changes materially, the app will say so before you continue using it.