Privacy Policy
Effective 2026-06-25
This Privacy Policy describes how Deva Construction ("we", "us") collects, uses, and protects information when you use the Deva Construction mobile and web applications ("the App"). This is a template — review with a lawyer before publishing if you handle anything sensitive.
1. Who controls your data
The App is a business tool used by individual construction companies. When you use the App, your data is collected and controlled by:
- The construction company that invited you (the data controller for business records like projects, materials, payments, attendance, and project updates).
- Deva Construction (the data processor for authentication and hosting).
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Email, password (hashed), full name, role | Sign-in, role-based access |
| Business records | Project, client, supplier, labourer details; materials; payments; attendance | Core app function |
| User content | Project update notes and photos you upload | Progress tracking |
| Technical | Device type, OS version, IP address, crash logs | Reliability and security |
We do not collect: precise location, contacts, SMS, microphone, or browsing history.
3. How it is stored
Data is stored with Supabase Inc., which provides authentication, Postgres, and object storage. Servers are located in the region selected by the construction company at account setup. Network traffic is encrypted in transit (HTTPS); passwords are hashed at rest.
4. How it is shared
- Within your construction company, business records are visible to admins, managers, and to the specific client/supplier/labourer the record concerns. This is enforced by row-level security in the database.
- We do not sell data or share it with advertisers.
- We disclose data only when required by law, or to protect our rights or others' safety.
5. Retention
We keep your authentication record (email + password hash + profile) until you delete your account. Business records (projects, materials, payments, attendance) are kept by the construction company for accounting and audit purposes even after you delete your account; they are unlinked from your identity at that point.
6. Your rights
- Delete your account — at any time from inside the App or via the public page at /delete-account. This deletes your login and profile and signs you out.
- Access & correct — most of your data is visible on your dashboard. Contact the admin of your construction company for changes to business records.
- Object / portability — email thedeva.co@gmail.com and we will respond within 30 days.
7. Children
The App is intended for users 18 and over. We do not knowingly collect data from children.
8. Changes
We may update this policy. Material changes will be announced inside the App at least 14 days before they take effect.
9. Contact
Privacy questions: thedeva.co@gmail.com