1. Who processes your data
The controller is Slovenská technologická spoločnosť, s.r.o., Polianky 5, 841 01 Bratislava, Slovak Republic, company ID (IČO) 55721192 ("we"). Contact for all data protection questions: contact@sitewolf.app.
If you use the app on behalf of your company and enter data about other people (for example the name and signature of a client's representative when approving extra work), your company is responsible for that data as the controller and we process it for your company as a processor. If you need a data processing agreement, please write to us.
2. What data we process and why
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Account | e-mail, first and last name, password (stored only as a one-way hash), internal user ID | registration, sign-in, showing the author of entries | performance of a contract (Art. 6(1)(b) GDPR) |
| Projects and members | name, address, client, internal number, dates, VAT rate, currency, note, contractor (name, company ID, logo), members and their role (owner or member), invite code | managing the project and sharing it with team members | performance of a contract |
| Construction diary | date, text, weather, temperature, number of people, photos, author | keeping the diary, export to PDF or spreadsheet | performance of a contract |
| Extra work | description, reason, hours, number of people, price and VAT, photos, name of the approving person, signature drawn on the device, time of approval | recording and approving work, PDF export | performance of a contract; for data of third parties, the legitimate interest of your company |
| Defects | text, place (free text), photos, author, status (open, fixed, accepted) and history of status changes (who and when) | recording defects and their removal | performance of a contract |
| Feedback | category, text, optionally one photo, app version, platform (iOS or Android), language | improving the app and fixing errors | legitimate interest (Art. 6(1)(f) GDPR) |
| Technical data | IP address and technical server logs when you communicate with the service, data of the app update request (platform, version) | security and operation of the service, delivery of app updates | legitimate interest |
| E-mails from the service | e-mail address and a one-time code | e-mail verification, password reset | performance of a contract |
Data stored only on your device: the sign-in token, drafts of entries and feedback (including photos), entries waiting to be sent while you are offline, and the most recently loaded project data so that you can reach your projects without a connection. This data stays on your phone until it is sent, until you sign out (cache), until you delete your account or uninstall the app.
Export: PDF files and spreadsheets (CSV) are created by the app on your phone from data you already have access to. They are not stored on our server. They leave your phone only where you send them yourself through the system Share menu.
3. What we do not do
The app uses no advertising, no analytics and no tracking across apps and websites, does not collect an advertising identifier, does not access the location of your device, your contacts or the microphone, and does not use automated decision-making or profiling. We do not sell your data.
4. Device permissions
- Camera: the app asks for access only when you tap to take a photo.
- Photos from the gallery: the app does not ask for access to your whole gallery. It uses the system picker and receives only the photos you choose.
5. Who has access to the data
- Project members see project data, entries, photos, defects and extra work, including the author's name. The price of extra work is visible only to its author and the project owner.
- Supabase – hosting of the database, files and sign-in (processor). Servers are located in Europe (EU West region).
- Expo (650 Industries, Inc., USA) – delivery of app updates (processor; processes the IP address and technical device data). For the operating data of its own service Expo acts as an independent controller under its own policy.
- Brevo (France) – sending e-mails from the service (verification code, password reset; processor).
- Apple and Google – distribution of the app under their own terms and policies.
- Other persons only on your initiative: an invitation, PDF or spreadsheet goes where you send it yourself.
- Public authorities only where the law requires it.
6. Transfers outside the EU/EEA
Some providers are based in the USA (in particular Expo; Supabase Inc.). We ensure transfers on the basis of the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
7. How long we keep data
- Account data: until you delete your account.
- Project content (entries, photos, defects, extra work): as long as the project exists.
- After you delete your account, your entries, defects and extra work in shared projects remain for the other members without your name (the author is shown as "Deleted user"). Your account, name, e-mail and feedback are deleted. The text and photos in these entries may contain personal data; if you want specific content removed, write to us and we will comply to the extent required by law.
- Projects in which you are the only member are deleted together with your account, including photos.
- Database backups at the provider are kept for a limited time and data is removed from them in their normal cycle.
- Technical server logs are kept only as long as needed for security and operation.
8. Deleting your account
You can delete your account directly in the app: Settings → Delete account. Before deleting, the app shows what will be deleted and what remains in shared projects without your name, and you confirm with your password. If you are the only owner of a project that has other members, first make another member the owner (Project → Members) or delete the project.
You can also request deletion without the app, by e-mail: see the page Delete account.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. Send your request to contact@sitewolf.app; we will reply within one month. You have the right to lodge a complaint with a supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk (or the authority in your country).
10. Security
Communication with the server is encrypted (HTTPS). Access to data in the database is limited to project members. Photos are stored in private storage and shown through temporary links. Passwords are stored only as one-way hashes.
11. Children
The app is intended for professional use and is not intended for persons under 18.
12. Website sitewolf.app
The website uses no cookies, no analytics and no third-party scripts.
The early access form does not send anything to our server – it opens your email app with a prepared message to contact@sitewolf.app; we use your email address only to reply and to let you know when the app launches, and we delete the message no later than 12 months after the app launches, or earlier if you ask us to.
13. Changes
We will inform you about material changes to this policy in the app or by e-mail. The current version is always available at this address.
14. Contact
Slovenská technologická spoločnosť, s.r.o., Polianky 5, 841 01 Bratislava · contact@sitewolf.app