Privacy

Last updated October 28, 2026

Skillfinch helps teams train new people with step-by-step guides. This page explains, in plain language, what we store, what we can and can't see, and who helps us run the service.

Your guides are encrypted end to end

Guides, photos, videos and training records are locked (encrypted) on your team's own phones and computers before they're uploaded, and unlocked only after they're downloaded. The key that opens them belongs to your shop and is held on your devices, protected by your passphrase, passkey or recovery key. Our servers only ever store scrambled data. This is the same on every plan, including Free.

The tradeoff: because we never hold your key, we can't recover your guides if every admin loses their passphrase, their devices and the recovery key. Keep your recovery key somewhere safe.

What we can see

Email addresses of people who sign in, and any backup email they verify.
Your shop's name, the names you give devices, and the email domains or addresses you allow to sign in.
Counts, sizes and times: how many guides and photos you have, how big they are, and when things were changed or signed in.
Short-lived sign-in codes and links, stored only as one-way hashes, and a sign-in cookie that lasts 30 days from your last visit.
Messages you send us through "Send feedback" or the support form, with the screen and device type they came from.
Your published guides, but only if your shop turns off "Require admin approval" (see below).

How we use it: only to run, secure and support Skillfinch. We never sell it, never share it for advertising, never use it to train AI, and never look at your guide content.

What we can't see

The text, photos and videos in your guides.
Your training records, quiz scores and notes.
Your passphrase, passkey or recovery key. They never reach us.

When "Require admin approval" is off

Normally a new phone has to be approved once by an admin (in person, or with the staff QR code) before it can open guides. An admin can turn that requirement off so that an email sign-in link alone opens published guides. To make that work, the shop gives our server a copy of a view-only key for published guides. While approval is off, our server could in principle read your published guides. It still can't read drafts or training records, and it can't change anything. Turning approval back on deletes our copy of that key. The app shows this tradeoff next to the setting.

Who helps us run Skillfinch

Cloudflare hosts the app and stores the encrypted data (Cloudflare Workers, D1 database and R2 storage).
Stripe handles payment for paid plans. It sees the billing name, email, address and card you enter at checkout. We never see or store your card number. We keep only your plan, billing status and Stripe customer id.
Resend delivers sign-in codes, sign-in links and invitations. It sees the recipient's email address and the email's text, which contains only the code or link, never guide content.

We don't sell or share your data, show ads, or use tracking or analytics scripts. Cookies are used only to keep you signed in.

Getting your data out, and deleting it

Admins can export training records as a spreadsheet (CSV) at any time from the app.
To delete your shop and everything in it, or your own account, contact us from the email on the account. We delete it within 30 days, including backups.
To see or correct what we hold about you, contact us the same way.

Sample photos

Some sample guide photos come from other photographers and are used under their licenses (for example Creative Commons). Each one is credited next to the photo.

Changes

If we change this page in a way that matters, we'll update the date above and tell admins in the app.

See also the terms of use. Questions: contact support.