This Privacy Policy explains how Tool ("Tool," "we," "us," or "our") collects, uses, and shares information when you use our website, mobile apps, and related services (together, the "Service"). By using the Service you agree to this Policy.
Who this Policy covers
Tool is a business tool used by construction companies. There are two kinds of users: account owners and administrators (the company that subscribes to Tool) and workers (crew members who clock in and out). This Policy applies to both. The subscribing company is responsible for the data it collects from its own workers and customers through the Service.
Information we collect
- Account information. Company name, owner and administrator names, email addresses, and passwords (stored hashed).
- Worker information. Worker names, roles, and 4-digit PINs used to clock in.
- Location data.The Service records the device's GPS coordinates when a worker clocks in or out, and — only if the worker turns on jobsite arrival reminders — when the worker's device arrives at one of their company's jobsites. See Location data below for the full detail.
- Work logs and photos. Time entries, work-log notes (which may be auto-translated between Spanish and English), and receipt or jobsite photos uploaded by users.
- Business records. Customers, projects, estimates, invoices, change orders, and related financial data entered into the Service.
- Payment information. Subscription billing is handled by Stripe. We do not store full card numbers; Stripe processes and stores payment details.
- Connected accounts. If you connect QuickBooks Online, we store authorization tokens needed to sync customers and invoices.
- Device and usage data. Log data such as IP address, device type, app version, and basic usage events used to operate and secure the Service.
Location data
Tool uses location in two separate ways. The first applies to everyone; the second happens only if a worker turns it on.
- At clock-in and clock-out.When a worker clocks in or out, the Service records the device's GPS coordinates at that moment so the company can verify jobsite presence. This is a single reading taken at the punch — there is no continuous tracking between punches.
- Jobsite arrival reminders (optional, background). A worker using the iOS or Android app can turn on arrival reminders. If they do, the app asks the operating system to watch for arrival at the jobsites their company has set up, and the operating system can wake the app in the background to report an arrival. This is the one case in which Tool receives location while the app is not open.
Arrival reminders are off unless two things are both true: the account owner has enabled the feature for the company, and the worker has turned it on for that specific device and granted the background-location permission the operating system asks for. Both are off by default. A worker can turn reminders off at any time in the app, revoke the location permission in their device settings, or mute reminders for a single jobsite; the account owner can also switch reminders off for a worker or for the whole company.
When arrival reminders are on:
- The app monitors only the jobsites belonging to the worker's own company (up to the 20 nearest), each as a circle of a radius the account owner sets, between 50 and 500 meters. Tool does not monitor any other place, and does not build a location history of where a worker goes.
- When the device reports arrival at one of those jobsites, we record the jobsite, the time, and the coordinates the operating system reported for that arrival, and we log whether we sent a reminder and why we withheld one if we did not. Arrivals are logged even when no reminder is sent.
- A reminder is a push notification saying the worker is at the jobsite with a prompt to clock in. We do not send one if the worker is already clocked in, has muted that jobsite, was already reminded there in the last four hours, or arrives outside the company's configured business hours.
- The account owner and administrators of the worker's company can see and export this arrival activity — including the coordinates — for their own workers, alongside whether the reminder led to a clock-in. No other company can see it.
We use arrival data only to send these reminders and to show the account owner whether the feature is working. We do not use it for advertising, we do not sell it, and we do not share it with third parties other than the service providers listed below.
How we use information
- To provide, operate, and improve the Service.
- To record time entries and verify jobsite presence through clock-in and clock-out location data.
- To send jobsite arrival reminders, and to report to the account owner how often those reminders were sent and acted on — only for workers who have turned reminders on.
- To generate estimates, invoices, and reports for your company.
- To translate work-log entries between Spanish and English so office staff can read them.
- To process subscription payments and prevent fraud.
- To provide customer support and send service-related notices.
- To protect the security and integrity of the Service.
How we share information
We do not sell your personal information. We share information only with service providers that help us run the Service, and only as needed to provide it:
- Supabase — database, authentication, and file storage hosting.
- Vercel — application hosting and delivery.
- Stripe — subscription billing and payment processing.
- Intuit QuickBooks Online — only if you choose to connect it, to sync customers and invoices.
- MyMemory translation API — to translate work-log text between Spanish and English.
- Apple Push Notification service and Google Firebase Cloud Messaging — to deliver push notifications, including jobsite arrival reminders, to the app. They receive the notification text and the device token, not the recorded coordinates.
We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and property of Tool, our users, or the public.
Data retention
We keep information for as long as your account is active and as needed to provide the Service. After an account is closed, we delete or anonymize personal information within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations.
Your rights and deleting your account
Depending on where you live, you may have the right to access, correct, export, or delete your personal information. To exercise these rights — or to delete your account and associated data — email us at Martin@llma.life from the address associated with your account, or use the account-deletion option in Settings within the app. We will confirm and process verified deletion requests promptly. Workers who want their data removed should contact their employer (the account owner), who controls that data.
Security
We use industry-standard safeguards including encryption in transit, hashed passwords, and access controls to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
Tool is a workplace tool intended for businesses and their employees. It is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes to this Policy
We may update this Policy from time to time. If we make material changes we will update the "Last updated" date above and, where appropriate, notify you within the Service.
Contact us
Questions about this Policy or your data? Email Martin@llma.life.