Privacy Policy

Effective September 14, 2026

CrewSheets is a field timesheet service ("we", "us"). It is a business tool: your employer or the company that invited you ("the customer") controls the account and the work records created with it; we process that data on the customer's behalf. For privacy requests about employer-managed accounts, start with your employer — we support them in fulfilling requests.

Information we collect

• Account information — your email address, name, role, and branch assignment, used for sign-in and access control.
• Session data — a generic device label (e.g. "iPhone"), platform, and app version, plus a hashed sign-in token, used to manage sessions and support device sign-out.
• Timesheet content — the work records you create: crew members, hours, materials, equipment, allowances, production quantities, and work descriptions. This is the core service.
• Photos — jobsite photos you choose to attach. Photos are re-encoded before upload; embedded photo metadata (including any camera GPS tags) is not uploaded.
• Signatures — crew and customer signature images captured to sign timesheets and change orders, stored with the record.
• Location — a one-time GPS fix, only when you allow location access in iOS: when you submit a timesheet (if Location Sharing is on in your profile), and when you place a tag or inspection pin or add a photo to a tag without a pin. Location is never collected in the background. You can turn it off at any time in your profile or in iOS Settings.
• Diagnostics — crash and error reports (stack trace, screen name, app and OS version, generic device model) used to fix problems. Our server request logs include IP address and browser or app user agent.

What we don't do

• No advertising and no sale of personal data.
• No tracking of you across other companies' apps or websites.
• No third-party analytics in the mobile app. (The website uses standard usage analytics for basic measurement.)

Service providers

CrewSheets runs on established, industry-standard infrastructure providers (hosting, database, content delivery and security, file storage, and transactional email). Each processes data only as needed to provide its service to us, under agreements that protect your data to the same standard described in this policy.

Retention

Timesheets, signatures, and photos are business records retained for the duration of the customer relationship and thereafter as required by the customer's record-keeping obligations. Sign-in tokens expire automatically and are revoked on password change. Diagnostic logs are retained for up to 12 months.

Your choices

• Location Sharing can be disabled anytime in your profile or in system settings.
• Signing out ends your session on that device; changing your password signs out all other devices.
• To access, correct, or delete your data, contact us at [email protected] (employer-managed accounts are routed through the employer).

Security

Data is encrypted in transit (TLS). Sign-in tokens are stored hashed. Access to records is controlled by role and branch permissions.

Children

CrewSheets is a workplace tool and is not directed at children under 13.

Changes

We will post updates to this policy on this page and update the effective date above. Material changes are announced to customers before they take effect.