Privacy Policy

Easement · Effective September 16, 2026

This app is a private workforce tool. Each company that uses it provides it to its own employees and crews to run field construction work: assigned tasks, required job-site photos, timesheets, and field reports. It is not a consumer product — your account exists because your company created it for you, and the records the app holds are your company’s business records. The app is operated by Manifold, LLC(“Manifold”, “the operator”), which runs the service on each company’s behalf. This policy describes exactly what the app collects and why.

What the app collects

• Account information — your name, work email, and role, created for you by your company so you can sign in.
• Work records— the tasks you complete, measurements you enter, clock-in/clock-out times, and field reports you submit. These are your company’s job and payroll records.
• Photos and videos— job-site photos and videos you capture or upload for required work documentation. Photos captured in the app may be removed from your device after they upload, depending on a setting your company controls. Photos and videos you pick from your device’s gallery are never deleted from it.
• Sound — a video recorded in the app records the sound around you at the job site, including anything said near the camera, and that sound is uploaded with the video. The app never records sound on its own, and never while you are only taking a photo. With the microphone permission turned off in your device settings, the app cannot record video at all.
• Location — only at the moment of a job action. The app records a single location fix when you clock in or out, capture a job photo, pin a job structure, or submit a field report. The app never tracks location in the background, never requests background location permission, and stops using location the moment the action completes. One screen also uses your position while it is open: the Site Map can draw where you are on the map, switched on and off with the map’s own button. That is drawn on your own screen only — it is not recorded and not sent anywhere.
• Device push token— so your company can send you work notifications (dispatches, schedule changes, deliveries). You can turn notification categories off in the app’s settings.
• Crash reports — if the app crashes, a technical report (what failed, device model, app version) is recorded so the problem can be fixed. The report is not tagged with your name: it identifies you by an internal account ID. Text you had already typed can be caught inside the failure message itself, so that text is searched and read by a person if you ask for your identity to be removed.

How it’s used

Solely to operate your company’s business: dispatching and documenting work, keeping payroll timesheets, maintaining project records, and producing reports for project engineers and inspectors. The record sheets sent to engineers and inspectors do not name the crew. Two documents do carry a name: a proposal prints the name of the person who prepared it, and a signed delivery ticket prints the name of the person who received the delivery.

What we don’t do

• We do not sell your data, ever.
• We do not share it with advertisers or data brokers.
• We do not track your location in the background.

Who holds the data

Each company’s records are kept separated from every other company’s — one company’s records are never mixed with another’s. Your company controls its own records; the operator maintains the service on your company’s behalf and does not use your company’s records for any other purpose.

Service providers

The app runs on standard infrastructure that processes data on your company’s behalf: Supabase (database and file storage), Expo (push-notification delivery and app updates), Google Maps on Android devices and Apple Maps on iPhones (map display — and when you open directions, the job’s address is handed to the map app you chose), Resend (report email delivery), Backblaze B2 (an off-site backup copy of the records and files), and Sentry (crash reporting). Each receives only what it needs to provide its service.

Retention & your choices

Work records are retained as your company’s business records. If you leave the company or want your account removed, contact your company’s administrator and your sign-in will be deactivated. Camera, microphone, photo, location, and notification permissions can each be revoked in your phone’s settings at any time — the related app features simply stop working.

Request data deletion

These are two different requests, and they do different things:

1. Ask your company’s administratorand your sign-in is deactivated — you lose access immediately and can no longer sign in. Your work history stays, and so do your name and work email, because your company’s records refer to them.
2. To have your identity removed as well, email support@manifold-apps.comfrom your work email (or include your name, your company, and the email you sign in with) with the subject “Data deletion request”.

Who can ask.Employees and crew members of a company using the app can ask now. Customers, inspectors, and engineering contacts whose names appear in a company’s records can ask in writing, and those requests are handled the same way.

What happens, and when. We answer within a few days to tell you we have your request. There is no completion date, and we are not going to give you one — part of this is outside our hands, and saying so is better than promising a date that cannot be kept. Three days pass between the day the request is recorded and the day the change is made, so a request made by mistake can still be called back. After that it cannot be undone.

What the removal does. Your name is replaced with a neutral label wherever the live records name you — except the records listed below — and your work email, phone number, device push-notification token, and the other identifiers stored about you are cleared. Your work records stay, and stop naming you.

What is kept on purpose

• Signed safety records stay exactly as they were signed. A confined-space permit or a job safety analysis is the record of who checked a hazard before a person worked in it — rewriting it afterward would destroy the thing it exists for. Your name stays on the safety forms you signed.
• Signatures written by hand are kept, for the same reason: a signature that can be taken back later is not a signature.
• Job conversations are not rewritten. Messages on a job thread stay as they were written, including where somebody typed your name. This policy does not reach conversation history.
• Work records are kept— task history, job-site photos, timesheets, and field reports are your company’s business records, required for payroll, project documentation, and legal obligations. Your name is taken off the fields that carry it. Each place your name turns up inside something somebody typed is read by a person first, and a few are kept for a reason: a name typed beside a signature we are keeping stays, because removing it would leave a document that contradicts itself.

What removal cannot reach

• Backup copies, for about 60 days. The nightly backup is kept 30 days, and the off-site copy holds the earlier version of a deleted file for roughly 30 days more.
• Photographs are kept indefinitely as project records, and the off-site copy of a photo or a signature image is permanent. That backup never deletes anything, because a backup that copies deletions spreads the disaster it exists to survive — so a photo or a signature file stays in off-site storage after the live one is gone.
• Documents and messages already sent out.A delivery ticket or a report that went by email is on somebody else’s computer, and nothing recalls it. We delete our stored copy and block it from being sent again.
• Notifications already delivered.A work notification that read “<your name> replied on a job thread” is already sitting on other people’s phones and in the notification service’s own records. Clearing this phone’s notification token stops new ones; it does not call back the ones already delivered.
• Payroll and bookkeeping services. They hold your legal name and your pay records under their own rules, and we do not control them. Your payroll ID here is cleared only after the last pay period containing your hours has been exported.
• Copies already off the system— files somebody downloaded to their own computer, and the sign-in service’s own record of when you signed in.

How far the search goes. It covers the fields that hold identifiers, plus name matches that a person reads one by one before anything changes. Nicknames, misspellings, initials, and any description of you that never uses your name are not found. We would rather tell you that than claim everything was searched.

Contact

Questions about this policy: support@manifold-apps.com