Who can see your data, and where it lives
The short answer: we cannot see it. There is no Owndom server, no account, and nothing to sign in to. What you put into the app sits on your phone.
That is not the same as saying the app never uses the network. It does. This page says exactly when, and what goes out.
Where your records sit
Warranties, policies, claims and obligations, together with the receipts and photos you attach to them, are stored on the phone itself. Nothing is copied anywhere unless you ask for it, and there is no place on our side for it to be copied to.
What leaves your phone
Three things.
Checking Premium. If you take Premium, the app asks whether it is still valid. That check goes to RevenueCat, which handles it for us. The payment itself is made to Google or Apple, and we never see or hold card details.
Crash reports, only if you allow them. If the app breaks, it can send a report about what went wrong. This is switched off until you switch it on. The report carries technical detail and a trail of which controls you had tapped before the crash: which buttons, not what you had typed into them. These reports are kept in Europe.
Backups. These carry your actual records, receipts and photos, and they are the reason this page exists.
Two kinds of backup, easy to confuse
The one your phone makes. Android and iPhone back themselves up to your Google or Apple account, following the system's own rules and schedule. Owndom's data goes along with everything else on the phone. The app does not do this and cannot switch it off; you can, in your phone's settings.
The one the app makes. Optional, encrypted, and part of Premium. It goes to a cloud account you choose: Google Drive, Dropbox or OneDrive, and on iPhone also iCloud. The account is yours. We have no access to it.
Switching on the second does not switch off the first. Unless you have turned off the system backup yourself, you have both.
The one thing worth understanding
The key that unlocks the encrypted backup is kept on the same cloud account as the backup itself. That is what lets you restore on a new phone without typing a password or writing anything down. It also means that whoever gets into that cloud account gets both the backup and the key. Protect that account with a strong password and two-step verification.
What it costs you that we hold nothing
We hold no copy of anything. If you lose your phone and your backups are gone, we cannot get your records back, because we never had them. That is the other side of the same arrangement.