Privacy Policy

Last updated: March 2, 2026

Construction Check In ("we", "us", or "our") operates the Construction Check In mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password. Your password is securely hashed and never stored in plain text.

Location Data: When you clock in or out, we collect your precise GPS location to verify you are at the designated job site. Location is collected only at the moment of clock-in and clock-out — we do not track your location continuously or in the background.

Photos: When you submit a daily report, you may upload photos documenting your work. These photos are stored securely and are only accessible to you and your company's administrators.

Usage Data: We collect clock-in/out timestamps, daily report submissions, and notification preferences to provide the core functionality of the App.

Push Notification Tokens: If you enable push notifications, we store your device's push notification token to send you reminders and updates.

2. How We Use Your Information

To provide and maintain the App's core functionality (time tracking, daily reports, team management)
To verify your presence at job sites via GPS location at clock-in/out
To send you push notifications about report updates, approval statuses, and daily reminders (if enabled)
To send transactional emails such as email verification and account-related communications
To allow your company administrators to manage team attendance and review daily reports

3. How We Store Your Information

Database: Your account data, clock events, and reports are stored in a PostgreSQL database hosted on Railway (railway.app), which provides encrypted storage and is hosted within secure data centers.

Photo Storage: Uploaded photos are stored on Cloudflare R2, an S3-compatible object storage service with encryption at rest.

Data in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS.

4. Third-Party Services

We use the following third-party services to operate the App:

Railway (railway.app) — Application hosting and PostgreSQL database
Cloudflare R2 — Photo and file storage
Expo (expo.dev) — Push notification delivery service
Resend (resend.com) — Transactional email delivery (email verification)

These services have their own privacy policies governing how they process data. We do not sell your personal information to any third party.

5. Data Sharing

Your data is shared only within your company's organization on the App:

Company administrators and managers can view your clock-in/out times, daily reports, and photos
Other employees in your company cannot see your data
We do not share your data with any external parties, except as described in the Third-Party Services section above

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all your personal data — including clock events, daily reports, photos, and notification preferences — will be permanently deleted from our systems.

7. Your Rights

You have the right to:

Access: View all data associated with your account within the App
Delete: Delete your account and all associated data at any time through the App's Settings screen
Correct: Update your name and profile information within the App
Opt-out: Disable push notifications and daily reminders in Settings

8. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to data portability
Right to restrict processing
Right to object to processing
Right to lodge a complaint with a supervisory authority

The legal basis for processing your data is: (a) performance of a contract (providing the App's services), and (b) your consent (for push notifications and location data).

9. CCPA Compliance (California Users)

If you are a California resident, under the California Consumer Privacy Act (CCPA) you have the right to:

Know what personal information we collect
Request deletion of your personal information
Opt-out of the sale of personal information — we do not sell your data
Non-discrimination for exercising your privacy rights

10. Children's Privacy

The App is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the App or via email. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: kfirsam201@gmail.com