Privacy Policy

1. Introduction

Productive Apps Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Site Report mobile application ("App").

This policy applies to all users worldwide and complies with the UK GDPR, EU GDPR, and other applicable data protection laws.

2. Data Controller

Productive Apps Ltd
Registered in the United Kingdom
Email: developer@productiveapps.co.uk

3. What Information We Collect

3.1 Information Stored Locally Only

The following information is stored exclusively on your device and is NOT transmitted to us:

• Reports, snags, and project data you create
• Photos and images you capture or import
• All app settings and preferences

The profile details you enter (name, email address, phone number, company, job title and postcode area) are stored on your device and are also sent to our subscription provider, RevenueCat, as described in 3.2.

3.2 Information We Collect

4. How We Use Your Information

We use the minimal information we collect solely to:

• Enable cloud sharing functionality when you choose to use it
• Authenticate your identity for secure file sharing
• Contact you about your account or the service when needed, for example a security notice or a change to these terms
• Manage your subscription through RevenueCat
• Improve app stability through anonymous crash reports

We DO NOT:

• Sell, rent, or share your personal data with third parties
• Use your data for marketing purposes
• Access or view your reports or personal information
• Profile users or make automated decisions about you

5. Data Storage and Security

5.1 Local Storage

Most of your data remains on your device. We recommend:

• Using device security features (PIN, biometrics)
• Regular device backups
• Being cautious about who has physical access to your device

5.2 Cloud Storage (Optional Feature)

If you choose to use cloud sharing:

• Your account details (email address and sign-in method) are stored in Firebase Authentication (United States)
• PDF files are encrypted and stored temporarily in Firebase Storage
• Files are automatically deleted after 3 days
• Links stop working after 4 days

5.3 International Data Transfers

When you use cloud features, your data may be transferred to servers in the United States. We ensure appropriate safeguards are in place for these transfers in compliance with GDPR requirements.

6. Data Retention

8. Third-Party Services

We use the following third-party services:

• Firebase (Google): For account sign-in and temporary file storage
• Google Sign-In and Sign in with Apple: Optional ways to sign in; they provide us with your email address (Apple may provide a relay address instead)
• Firebase Crashlytics: For anonymous crash reporting
• RevenueCat: For managing subscriptions; receives the profile details listed in section 3.2 so that your subscription can be linked to you and supported

These services have their own privacy policies and data practices.

9. Children's Privacy

Our App is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you are under 16, please do not use this App.

10. Your Choices

You can:

• Use the App entirely offline without providing any personal information
• Choose not to use cloud sharing features
• Sign in with Google or Apple instead of creating a password
• Delete all local data by uninstalling the app
• Delete your account and its cloud files in the app: More Options → Account → Delete account

11. Deleting Your Account

You can delete your Site Report account at any time from within the App:

1. Open More Options, then Account
2. Tap Delete account and confirm
3. Re-enter your password, or confirm through Google or Apple, depending on how you signed in

Deletion removes your account and email address from Firebase Authentication and every report file and sharing link the account uploaded. Reports stored on your device are not affected. Where you signed in with Apple, your Sign in with Apple token is revoked as part of the deletion.

If you can no longer sign in, email us at developer@productiveapps.co.uk from the address on the account with the subject line Delete my account - Site Report, and we will delete it within 30 days. The same request removes your profile details from RevenueCat.

12. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours as required by GDPR.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through app updates or notifications where appropriate.

14. Concerns

If you have a concern about how we handle your data, please contact us first at developer@productiveapps.co.uk with the subject line Privacy Request - Site Report. We will respond within 30 days and in most cases resolve the matter directly. You also have the right to raise a concern with the UK Information Commissioner's Office.