Privacy Policy

1. Who we are

SiteDaily ("we", "our", "us") provides the SiteDaily mobile app and website. For personal data processed through the App, SiteDaily is the data controller. This policy explains what we collect, why, and what your rights are under UK GDPR.

You can reach us about anything in this policy at support@sitedaily.co.uk.

2. The personal data we collect

We keep this to what we need to run the App:

• Account details — your name and email address.
• Company details — your company name, trade, and the team members and gangs you set up.
• Site records — the daily logs, attendance, work entries, day works, mileage, equipment issues, and signatures you enter.
• Approximate location — captured only at clock-in, and used only to fetch the local weather for that log. We do not track you, and we don't keep a history of your location.
• Crew member names — names of crew members that gang leaders add to record attendance and day works (see the next section).

3. Entering other people's details

4. Why we use it, and our lawful basis

• To provide the service (our contract with you) — creating your account, storing your records, generating reports, and managing your subscription.
• Legitimate interests — keeping the App secure, fixing problems, and improving how it works, in a way that respects your rights.
• Legal obligations — where we have to keep or disclose information to comply with the law.

5. Where your data is stored

Your data is hosted on Supabase in an EU/UK region. Access is restricted and protected by per-company security rules so that one company cannot see another's data.

6. Third parties we work with

We share data only as needed for these services to work, and only the minimum required:

• Supabase — hosting and database.
• RevenueCat — managing your subscription status.
• Apple — processing App Store payments.
• Resend — sending report emails on your behalf.
• Open-Meteo — providing weather information at clock-in.

We do not allow these providers to use your data for their own purposes. We may also disclose data if required by law.

7. How long we keep it

We keep your data for as long as your account is active. When you delete your account, your company's data is permanently removed (see your rights below). We may keep limited records for a short period where we need to for legal, security, or accounting reasons.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct data that is wrong or incomplete
• Ask us to delete your data
• Object to or restrict certain processing
• Receive a copy of your data in a portable format

9. We don't sell your data

We do not sell your personal data, and we do not use it for advertising. SiteDaily contains no third-party ad tracking.

10. Cookies and local storage

The SiteDaily website uses only minimal, functional storage — for example, to keep you signed in and remember basic preferences. We don't use advertising or cross-site tracking cookies.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date above and, where appropriate, let you know in the App or by email.

12. Contact us and making a request

To ask about your data, make a request, or raise a concern, contact us at the address below. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.