Privacy Policy

Last updated: 7 April 2026

SiteShrimp ("we", "our", "the app") is a defects, site, and facilities management tracking tool. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

• Account information — email address, name, job title, and password (hashed) when you create an account.
• Project data — defect entries, inspection records, photos, annotations, drawings, and reports you create within the app.
• Team information — names, emails, roles, and company affiliations of team members you invite.
• Device data — browser type and app usage timestamps for functionality and troubleshooting.

2. Photos and Media

You may upload photos to document site defects. Photos are stored on our server (PocketBase backend) and optionally on your connected Google Drive if you enable that integration. Photos may be processed by AI services (see Section 5) only when you explicitly use the AI analysis feature.

3. Voice Input

The app offers voice-to-text input using your browser's built-in Web Speech API. Voice data is processed by your browser and is not stored or transmitted by SiteShrimp.

4. Location

SiteShrimp does not collect GPS or geolocation data. Site locations are entered manually by users (Level, Zone, Room, Grid).

5. Third-Party Services

The app may interact with the following services when you configure them:

• Google Gemini / OpenAI API — for optional AI-powered photo analysis. Photos you submit for analysis are sent to these services under their respective privacy policies.
• Google Drive — for optional photo storage via OAuth2 authentication.
• Telegram Bot API — for optional notifications, configured by you.
• EmailJS / SMTP — for optional email report delivery.

6. Data Storage

• Server — your data is stored on our PocketBase backend with real-time sync.
• Local device — the app uses localStorage and IndexedDB for offline access, authentication tokens, and user preferences.
• No cookies — SiteShrimp does not use tracking cookies.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with third-party services you explicitly configure (as listed in Section 5) and with team members within your project.

8. Data Retention

Your data is retained for as long as your account is active. You may request deletion of your account and associated data at any time (see Section 8a).

8a. Delete Your Data (Without Deleting Your Account)

SiteShrimp allows you to delete your data at any time directly within the app, without needing to delete your account:

Steps to delete your data:

1. Open the SiteShrimp app.
2. Go to the Review tab to see all your entries.
3. Tap any entry you want to delete, then tap DELETE.
4. This permanently removes the entry, including its photos, annotations, description, and all associated data.

What data can be deleted:

• Individual defect entries (title, description, severity, status)
• Photos and image annotations attached to entries
• Drawings and markup annotations
• Comments and follow-up notes

What data is retained:

• Your account information (name, email) — remains until you delete your account
• Audit log entries showing that a record was deleted (for team accountability)

Retention period: Deleted data is removed immediately and permanently. There is no additional retention period. Data shared with third-party services you configured (e.g. Google Drive, Telegram) must be deleted separately through those services.

8b. Delete Your Account

To permanently delete your SiteShrimp account and all associated data:

Option 1 — In the app:

1. Open SiteShrimp and tap your avatar at the top.
2. Go to My Profile.
3. Scroll down and tap Delete Account.
4. Confirm by tapping YES, DELETE.

Option 2 — By email:

1. Email [email protected] from the email address associated with your account.
2. Use the subject line: Account Deletion Request.
3. We will process your request within 30 days.

Upon account deletion, the following data is permanently removed:

• Your account information (name, email, profile, password)
• All defect entries, photos, annotations, and reports you created
• Team membership and role assignments
• All locally stored data (localStorage, IndexedDB)

Project data shared with your team members within joint projects will be retained for other team members unless the entire project is deleted.

9. Security

We use HTTPS encryption for all data transmission. Passwords are hashed and never stored in plain text. Access to project data is restricted to authorised team members.

10. Children's Privacy

SiteShrimp is designed for construction and facilities management professionals and is not intended for use by children under 18.

11. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email below.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

13. Contact

For privacy-related questions, contact us at [email protected].