Freelancer Toolkit for Android · com.lostagency.freelancer · Last updated 5 October 2026
The short version. There is no account, no advertising, no tracking and no analytics of what you do in the app. Your invoices, expenses, clients and tax figures are stored on your own phone in an encrypted database. We cannot see your records: if you choose to open them in a browser, they travel encrypted so that only your phone and that browser can read them. The one thing the app does send is an anonymous crash report when it stops working, so the fault can be fixed; those reports carry no business data.
| App name (as on Google Play) | Freelancer Toolkit |
|---|---|
| Package / application ID | com.lostagency.freelancer |
| Google Play listing | play.google.com/store/apps/details?id=com.lostagency.freelancer |
| Developer (as shown on Google Play) | The Lost Agency BV |
| Legal entity / data controller | The Lost Agency BV, a besloten vennootschap incorporated in the Netherlands |
| KvK number | 42076433 |
| Privacy contact | privacy@thelostagency.com |
| Website | davidiwanow.com/apps/freelancer |
Everything you enter stays on your device:
This is held in a database encrypted with SQLCipher. The encryption key is generated on your device, sealed with a key in the Android hardware-backed keystore, and cannot be extracted from the phone. A copy of the app's data taken off the device — or restored onto another one — is unreadable.
For that reason the app also opts out of Android's automatic cloud backup: a backup we could not decrypt would be of no use to you, and one we could would defeat the point.
None of your business records. The app has no account system, and it contains no analytics or advertising libraries. It sends crash diagnostics, described below. If you choose to open your books on the web, it also passes your records to your browser through a relay that cannot read them, described under Opening your books on the web.
| Data type | Collected | Shared |
|---|---|---|
| Financial information | No — stored on your device only | No |
| Personal identifiers | No | No |
| Photos (receipts) | No — stored on your device only, unless you choose to show receipts in a linked browser; then encrypted so that we cannot read them | Processed for us by Google, only in that case |
| App activity and analytics | No | No |
| Location | No | No |
| Addresses of a trip (only if you use "Calculate distance") | No — sent to the routing service for that one answer | Yes, with OpenRouteService, when you ask |
| Crash logs and diagnostics | Yes — when the app crashes | Processed for us by Google |
| Device identifiers | A random per-installation identifier, in crash reports only | Processed for us by Google |
| Web link (only if you link a browser) | A random sign-in identifier for the phone and the browser; your phone's model and the browser's name while a link is being made; your records, encrypted so that we cannot read them | Processed for us by Google |
The app uses Firebase Crashlytics, a Google service, to report crashes and serious errors. When the app stops unexpectedly it sends:
That identifier is generated by the app. It is not your advertising ID, not your Google account and not anything that identifies you. It changes if you uninstall and reinstall.
Crash reports do not contain your invoices, clients, expenses, amounts, tax numbers or receipt photos. The app does not attach your records to a report, and the database stays encrypted.
Google processes these reports on our behalf as our data processor and deletes them on its own retention schedule. Their handling is described in the Firebase privacy documentation.
You can open your books in a browser at freelance.thelostagency.com by linking it to your phone: the browser shows a code, your phone scans it, both screens show the same two-digit number, and you approve on the phone with your fingerprint or screen lock. Nothing happens unless you do this. A browser you have linked can later ask to be let in again without the code: your phone gets a notification, you pick the number the browser shows, and you approve the same way. You can remove one browser, or unlink them all, at any time in Settings → Web.
The link works through a relay we run on Google Firebase. What passes through it:
The key that protects your backups never leaves your phone, and is not used for the web link. A linked browser can read your current records and nothing else: not your backups, and not your recovery key. When you unlink, or remove a browser, the phone switches to new keys and deletes its copy from the relay, so a browser you removed has nothing left to read; the browsers you kept are let in again with a notification.
The web page sets no cookies and contains no analytics or advertising. Your records are opened in the browser itself. They are not sent to our server to be displayed, because we do not have a server that could read them. Closing the tab, or pressing Lock, removes them from the browser. So that reloading the page does not unlink it, a linked tab keeps the link's keys in the browser's own storage, in a form the page itself cannot read out, and only for that tab: Lock deletes them at once, and any left behind by a closed tab are deleted once they have gone unused for 12 hours.
On a trip, "Calculate distance" fills in the distance from the route by road between the trip's two addresses. To do that, the app sends those two addresses — and nothing else — to OpenRouteService, a routing service run by HeiGIT gGmbH in Heidelberg, Germany, which finds them on the map and measures the route. It happens only when you tap the button, and only after you have allowed it the first time; you can turn it off again in Settings → Privacy. The web version offers the same button on its trip form: there your browser sends the two addresses to OpenRouteService itself, after you have agreed in that tab, with the web version's own access key. The addresses are sent with the app's own access key, not with anything that identifies you. OpenRouteService's handling of requests is described in its privacy policy.
If you turn on "Fetch the ECB's daily rates" in Settings, the app downloads the European Central Bank's published reference rates from ecb.europa.eu once a day. It is the same public file for everyone: nothing about you or your books is sent, only the request itself, which like any request shows the ECB your internet address. The rates are kept on your phone. It is off until you turn it on.
You can photograph a receipt and have the total, date and supplier read off it. That reading happens on your phone. The image is not sent to a recognition service and not shared with us. It leaves the phone only if you link a browser and turn on "Show receipts in the browser", and then only encrypted so that we cannot read it — see Opening your books on the web.
Receipt images and any PDFs you attach are stored inside the app's own private storage, not in your camera roll — so they do not appear in your gallery and are not swept up by whatever cloud backup your photos use. They are covered by the same encryption as the rest of your records, and deleted with the app.
The text-recognition model itself is provided by Google Play Services on your device. Google publishes what that service collects in its own terms; it receives no image and no text from this app.
Amounts in the app are hidden until you unlock them. Unlocking uses your device's own fingerprint, face or PIN through Android's standard authentication prompt.
The app never sees your fingerprint, your face or your PIN. Android performs the check and tells the app only whether it succeeded. No biometric data is read, stored or transmitted.
You can export your records as CSV or PDF, and share an invoice through Android's share sheet. That transfer is initiated by you and goes wherever you send it — your accountant, your email, your own cloud storage. Once a file leaves the app it is governed by whatever service you send it to, not by this policy.
Freelancer Toolkit is a business tool intended for adults running their own business. It is not directed at children, and it collects no personal information from anyone.
The Lost Agency BV is the data controller. Because your records never reach us there is, in practice, nothing of yours for us to show you, correct or delete — it is on your phone and under your control, and uninstalling removes it.
The exception is crash reports, which contain no business data. Under the GDPR you may ask us what we hold, ask for it to be corrected or erased, object to its processing, or complain to the Autoriteit Persoonsgegevens. Write to privacy@thelostagency.com.
Uninstalling the app permanently deletes everything it holds, including the encryption key. There is no account for us to close. The only thing held elsewhere is any crash report already sent, which contains none of your records; write to the contact address on the app page if you want those deleted sooner than Google's retention schedule would. Export anything you want to keep before uninstalling.
Freelancer Toolkit helps you set money aside; it is not tax advice and does not file anything on your behalf. Rates and thresholds are shown with the date they were last checked against the relevant tax authority. Confirm anything that matters with your accountant or your tax office.
Cloud backup and accounts are planned as optional features. If and when they ship, they will be strictly opt-in, they will be described here in full before release, and this policy will be updated with a new date. Until then the only way your business records leave your phone is the encrypted web link described above, and only if you link a browser. Continued use after a change means you accept the updated policy; the date at the top always tells you which version you are reading.