Your records. Your review.

Local field-office records

Sensitive text fields use AES-256-GCM with an Android Keystore-protected key. This is field-level protection, not whole-database encryption. Photos and imported documents use Android app-private storage and are not additionally encrypted by TradeBrace. Opening a file gives the selected Android app temporary access.

Local workspace permissions, job access, and report-author checks govern local workflows. They do not authenticate a cloud account, synchronize devices, or give another person access to your jobs.

Android backup and device transfer are disabled. Keep original documents and copies of important reports outside TradeBrace. Update without uninstalling or clearing storage.

Optional cloud accounts

Choose Create account with Google Play in version 1.2 to start owner account setup. Private invitations remain available for crew and review access. The server assigns company membership and access; a local role selection cannot grant cloud privileges. Passwords are salted and hashed. Sign-in sessions expire after one hour. Device sessions and mail-recovery records are encrypted with Android Keystore-backed protection.

Mailbox access is restricted to the signed-in account. Cloud message content and display names are encrypted at rest with a service key. Authorized administrators can access service data; this is not end-to-end encryption. Self-service recovery, cloud job synchronization, and customer backups are not included in these cloud services.

Review before sending

Private TradeBrace mail requires a message preview and an explicit Send tap. If a connection interrupts a send, use Check Sent or Retry same send; an uncertain result must not be treated as a failed delivery. In-app @tradebrace.app addresses do not send or receive external internet email.

Existing calls, texts, invoice emails, supplier emails, and calendar actions use reviewed Android-app handoffs. Live Madeline can propose a private-mail draft, but cannot send it or access local jobs and memories.

User-started voice

Device speech uses Android services. Optional live voice sends microphone audio and the conversation through TradeBrace to OpenAI after consent. It requires enabled account access. There is no always-listening wake word. Stop, mute, leaving the app, sign-out, account deletion, and session limits end capture.

Permissions and weather

TradeBrace uses network access and optional microphone access. It does not read device contacts, call history, text history, or GPS location. U.S. weather comes from the National Weather Service; city and ZIP lookup happen on-device and the resulting area coordinates are sent to NWS.

Report a security concern

Email tradebraceinfo@gmail.com with a brief description. Do not include passwords, invitation codes, payment information, or complete customer records. Read the privacy policy and deletion guide.