Privacy Policy

Summary

What we collect

Without an account (default)

Everything you enter — projects, daily reports, photos, sign-in sheets, checklists, defects, plans, tasks, timesheets and settings — is stored only in the app's private storage on your phone. We cannot see it. Backups you export are files you control.

If you create an account (optional cloud sync)

• Email address and password, handled by Firebase Authentication (Google). Passwords are never visible to us.
• Your synced records — the same data listed above — stored in Google Firebase (Cloud Firestore and Cloud Storage) in a space restricted to your account by security rules.
• Sync metadata such as timestamps and device-generated record IDs, used to merge changes between your devices.

If you use AI assistance (optional, SiteScribe Pro)

• The text you submit (for example a dictated note or a report field) and, for photo analysis, the photo you select and its caption.
• These are sent over HTTPS to our server, which forwards them to Google's Gemini API to produce a draft, and returns the result to you. Our server does not store your content. Google processes it under its API terms and does not use it to train models.
• Project name, client, company and address are not included in AI requests.
• Requests are protected by Play Integrity app attestation so only genuine installs of SiteScribe can use the service.

Location (optional)

With your permission, SiteScribe reads your device location to stamp photos and to fill in weather and location for new reports automatically, unless you turn that off in Settings › Report Preferences. Only approximate coordinates, rounded to about 1 km, are sent to Open-Meteo for the weather; the precise location is stored only within your own report data.

Microphone (optional)

Voice capture uses your device's speech recogniser. Audio is handled by your phone's speech service under its own terms; SiteScribe receives only the resulting text.

Purchases

SiteScribe Pro subscriptions are processed by Google Play. We receive a purchase token and product identifier to verify the subscription with Google and unlock Pro. We never see your card or billing details.

Diagnostics

The app does not include advertising or behavioural analytics SDKs. Our server logs record the type of AI task, HTTP status and latency — not your content.

How we use information

• To provide the app's features: syncing your records, generating AI drafts you requested, verifying Pro subscriptions.
• To keep the service secure and prevent abuse (rate limits, app attestation).
• To respond when you contact us.

We do not use your data for advertising, do not sell it, and do not build profiles.

Who we share it with

We may disclose information if required by law or to protect the rights and safety of users. We do not share data with advertisers or data brokers.

Retention and deletion

• On your device: data stays until you delete it in the app or uninstall the app. Settings › Privacy & Data lets you export everything or wipe this device.
• Synced data: deleting a record in the app deletes it from the cloud on the next sync. Deleting your account (Settings › Account › Delete account) permanently removes your account and all synced records and photos.
• AI requests: not stored by our server after the response is returned.
• Email requests: you can also ask us to delete your account by emailing anupampradhan161@gmail.com from your account email. We action requests within 30 days. See Delete your account.

Security

Data in transit is encrypted with HTTPS. Synced data is protected by Firebase security rules that restrict every record to the signed-in owner. AI and purchase-verification endpoints validate requests and apply rate limits. No method of storage is perfectly secure; keep your device locked and your account password private.

Your rights

Depending on where you live — including under US state privacy laws (such as the CCPA/CPRA), the UK and EU GDPR, Canada's PIPEDA and Australia's Privacy Act — you may have rights to access, correct, export, restrict or delete your personal data, and to complain to a supervisory authority. Because most of your data never leaves your device, many of these controls are directly in your hands inside the app. For anything else, email us and we will help.

We do not "sell" or "share" personal information as defined by US state laws, and we do not use it for targeted advertising.

Children

SiteScribe is a professional tool intended for users aged 18 or over. We do not knowingly collect data from children.

Changes to this policy

We will update this page when our practices change and note material changes in the app's release notes. The effective date at the top tells you when it was last revised.

Contact