Is My REPS Hours Log Private and Backed Up? AI Settings, Privacy Controls and Sign-in Options in REPSLog

A REPS log is a long-lived record of your financial life: every property, every contractor, the tenant dispute in March, the cleaner’s invoice, the years you claimed the status. You will hand it to a CPA and possibly to an examiner, and you will need it intact three years from now. So the questions a careful investor asks are fair: where does it live, who can see it, what does the AI read, and what happens if I lose my phone. This post answers each for REPSLog, in the order people ask them.

Where the log lives, and who can see it

Your account, entries, properties, categories, participants and attached files are stored on Google Cloud (Firebase), encrypted in transit and at rest. Access is scoped to your account: the rules that guard the database and file storage check the signed-in user on every read and write. The only other people who can see your log are those you invited through Team Access and who accepted, at the level you chose: Read Only can view and export, Full Access can also create entries and manage properties and categories, and neither can manage your subscription, delete your account or share access further. Details on the data security page.

Backups, and your own copy

Backups run automatically every day with integrity checks. New backups are kept for 30 days, and none is kept longer than 60. REPSLog does not restore a backup to bring back information you asked to have deleted. Separately, you can keep your own copy at any time: Export My Log produces a tax year as CSV, Excel and PDF, with your attachments if you tick the box, on every plan. That ZIP is what you hand your CPA and what you keep with your return.

What the AI reads, and the switches

The AI and Privacy screen (Settings, AI and Privacy) opens with one sentence: each feature below sends part of your log to our AI providers, and you decide which ones run. There are two switches, three if personalized suggestions are available to you:

Basic AI features is the master switch. It covers Smart Search (finding entries by meaning), is on by default, and turning it off stops every background AI feature at once.
Smart Search Attachments controls whether the receipts, photos and documents you attach are described and indexed. It is off until you turn it on, because files can carry sensitive information.
AI Entries Suggestions controls whether your recent entries are analysed to offer back the work you log most. Turning it off deletes the derived profile.

The screen also says what turning off does: REPSLog stops sending anything new and stops using derived data straight away; deleting it takes up to 31 days; turning a switch back on within 30 days restores only what that switch covers. And it admits the limit: a request already sent to a provider cannot be taken back. Features you trigger yourself (voice dictation, Autofill with AI, Generate AI description) are not on this screen, because the tap is the consent. Providers work for REPSLog under contract and never train on your data.

Two more controls sit at the bottom of Settings: Do Not Sell or Share My Personal Information, which stops your hashed email being shared with advertising platforms, and Delete Account, which removes your log, files and connections for good. Billing and tax records, referral records and support history are kept on purpose, and the confirmation says so.

Sign-in without a weak point

Sign-in is email first. Type your email and REPSLog picks the next step: a passkey prompt if you have one, a password field if your account uses one, otherwise a magic link. Magic links expire after 15 minutes and work once, and sign-in emails are rate limited. A passkey uses Face ID, Touch ID or your device unlock, syncs through iCloud Keychain or Google Password Manager, and skips the inbox entirely, which is what a host logging turnovers on site wants. Continue with Google is on every platform; Continue with Apple on iPhone and the web app. Changing your account email is confirmed from both inboxes and signs you out on every device. Credentials for connected calendars are stored encrypted, and deleting your account removes them along with any API keys.

One account, three devices

The same log is on iPhone, Android and the web app, synced, so losing a phone loses nothing: sign in on the next one, or at app.reps-log.com. The dashboard, the export and every switch above are on all three.

How to check your settings

Open Settings, then AI and Privacy. Decide each switch; the screen explains what each one sends.
Open Settings, then Passkeys, and add a passkey on the device you carry.
Run Export My Log once a year and keep the ZIP with your return.

Screenshots: How to Manage Your AI and Privacy Settings in REPSLog, REPSLog Data Security and How to Set Up and Sign In with a Passkey.

Good to know

The switches work on every plan; the AI features themselves run on Premium, and your choice is recorded either way.
Basic AI features is on by default. Attachment reading and suggestions are off until you turn them on.
Google and Apple accounts do not see the passkey or password options; those sign-ins are already one tap.
Deleting your account takes effect immediately in the app and cannot be undone. A copy can remain in routine backups until they expire, isolated from any use.
The Privacy Policy lists every provider and retention period.

Frequently asked questions

Does REPSLog train AI on my log?

No. Providers process your data under contract for the feature you turned on, and do not train on it.

Can I use REPSLog with the AI off?

Yes. Turn off Basic AI features and nothing runs in the background. Logging, the timer, the dashboard and the export do not involve AI.

Where is my data stored?

On Google Cloud (Firebase), encrypted in transit and at rest, with daily backups kept up to 30 days and never beyond 60.

What if I lose my phone?

Sign in on another device or at app.reps-log.com. Your log is in your account, not on the phone. A passkey synced through iCloud Keychain or Google Password Manager follows you.

Can my CPA see my log without my password?

Yes. Invite them through Team Access with Read Only; they sign in with their own account and can view and export, nothing else.

Trending

How Depreciation Creates Paper Losses That Save Real Money