Privacy Policy — SZ Tools CNC
Last updated: July 26, 2026 · Effective: July 26, 2026
Published by SZ Tools LLC,
Tamarac, Florida, United States
SZ Tools CNC ("the app") generates CNC G-code programs for lathes and mills. This policy explains what data the app handles, why, and what control you have over it. It applies to the SZ Tools CNC Android app and to this website.
Data we collect
| Data | Why | Shared? |
|---|---|---|
| Email address and an encrypted password credential | To create your account, sign you in, and send you account emails such as address confirmation and password resets. Authentication is provided by Supabase; those emails are delivered by Resend. | No |
| Your name and profile picture link — only if you choose "Continue with Google" | Supplied by Google when you sign in with your Google account, so we can greet you by name. If you sign up with an email address and password instead, we never receive either of them. | No |
| Your machining libraries — tool libraries, jaw/fixture library, and your edited cutting-materials table | Stored in your account so they follow you across devices. Readable only by your account. | No |
| Purchase status — whether your subscription is active | To unlock paid features. Processed by Google Play Billing and RevenueCat. | No |
| Technical log data — IP address, timestamp and request type, recorded automatically when the app contacts our servers | Security, abuse prevention and diagnosing faults. Not used to build a profile of you and not linked to your libraries. | No |
The app never sees or stores your payment card details. All payment information is handled by Google Play.
Data that stays on your device
Your saved CNC programs are never uploaded. They are stored only in the
phone's local storage, to keep your part programs private. Exported
.nc files go only where you choose to save them. Uninstalling the app
removes them from the device.
What we don't do
- We do not sell or share your personal data with third parties for marketing.
- We do not collect location, contacts, photos, or advertising identifiers.
- We do not show third-party ads.
- We do not use your machining libraries or programs to train any model.
How your data is protected
All data sent between the app and our servers is encrypted in transit using TLS (HTTPS). Data stored in our database is encrypted at rest and protected by row-level access rules, so your libraries are readable only by your own account. Passwords are stored as salted hashes and are never visible to us.
No system is perfectly secure. If a breach affects your data, we will notify you at your registered email address without undue delay.
How long we keep it
- Account data and libraries: kept for as long as your account exists. Deleted immediately when you delete your account.
- Encrypted database backups: deleted data may persist in routine backups for up to 30 days, after which the backups are overwritten.
- Technical logs: retained for up to 30 days.
Where your data is stored
Our database and authentication are hosted by Supabase on servers located in Canada (region ca-central-1). If you use the app from outside Canada, your data is transferred to and processed there. Account emails are sent through Resend, and subscription status is processed by RevenueCat and Google Play, which operate in the United States.
Service providers
We use a small number of processors, each handling only the minimum data needed for its function:
- Supabase — authentication and library sync database
- Google — sign-in, only if you use "Continue with Google". Google tells us your email address, name and profile picture link; we tell Google nothing about you.
- Resend — sending account emails (address confirmation and password resets). Receives your email address only, and does not use it for anything else.
- RevenueCat — subscription entitlement management
- Google Play Billing — payment processing
Your rights
Wherever you live, you can:
- Access your data — everything we hold is visible inside the app
- Correct it — edit your libraries at any time in the app
- Delete it — see Account deletion
- Object or complain — email us, or contact your local data protection authority
If you are in the European Economic Area or the United Kingdom, we process your account data to perform our contract with you, and process technical logs on the basis of our legitimate interest in keeping the service secure. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA.
Children
SZ Tools CNC is a professional machining tool intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 13. If you believe a child has created an account, email us and we will delete it.
Account deletion
You can permanently delete your account and all synced data at any time from inside the app (trash icon in the header), or see Account deletion for details and an alternative request method.
Changes to this policy
If we change this policy we will update the date at the top of this page. For changes that materially affect how we handle your data, we will also notify you by email or inside the app before the change takes effect.
Contact
Questions about this policy, or to exercise any of the rights above: support@sztoolscom.com
SZ Tools LLC · Tamarac, Florida, United States