A dead phone, a bad update, or a stolen truck should cost you a phone, an update, or a truck. Not four years of job records. The backup runs itself, and the key that opens it is yours to write down.
The backup exports your data as rows into a single encrypted archive, written to a folder you choose. That distinction matters more than it sounds. A copy of the database file only restores into the exact version it came from, so an old backup becomes useless the moment the app moves on. Rows restore into a newer version fine, which is what makes a backup taken last spring still worth something today.
- Your data exported as rows, into one encrypted archive
- Written to a folder you pick, on storage you control
- A backup from an older version restores into a newer one
- Attachments come along, so the restore is whole rather than partial
- Each archive records what it holds and whose account it belongs to
- Runs once a day on its own, unless the battery is low, and on demand any time
Backups are encrypted with a generated key rather than your account password. You write it down once and keep it somewhere. It never changes, so it cannot be mistyped into an archive nobody can open, and it survives a password change or a new phone. Change your password next year and every backup you have ever taken still opens. You can view it or replace it from settings, on a screen that blocks screenshots because a key in your photo roll is not a key anymore.
- A generated key, not your account password
- It never changes, so an old archive always opens
- Survives a password change and a new phone
- View it or replace it from settings whenever you want
- Screenshot blocking on the screen that shows it
Restore from settings when you need to roll something back, from the login screen on a brand new device before you have even signed in, or from the update flow if something went sideways. Every restore is verified before it is allowed to replace anything, and the last one can be undone. So restoring is a decision you can reverse rather than a door that shuts behind you.
- Restore from settings, from the login screen, or from the update flow
- A fresh phone can restore before you have signed in
- Verified before it replaces anything
- The last restore can be undone
- Attachments come back with the records that point at them
The app checks for a new version, shows you what changed, checks you have the room, downloads it in a way that survives losing signal partway, verifies it, and installs. Most updates are yours to take when you want them. Some get marked critical and can be required, and when one is, the app will not install it until you have a backup, and walks you through setting one up if you do not. If a database upgrade ever goes wrong badly enough that the app cannot open its own data, you get a recovery screen that fetches a fixed build and puts your records back, rather than a crash loop.
- See what changed before you decide
- Resumable download that survives losing signal, with a free-space check first
- The download is verified before it installs
- Critical updates are marked, and can be required
- A mandatory update will not install until you have a backup
- A failed database upgrade gets a recovery screen, not a crash loop
Daily encrypted backups, a recovery key that outlives your password, restores you can undo, and updates that back up before they touch anything. Bought once, with no monthly charge behind any of it.