Your site, your data.

The minimum the app needs to work.

• Email address — used only to send your magic sign-in link.
• Project content you create — daily entries, photos, captions, approval responses, punch-list items.
• Device timezone and the weather snapshot the phone fetches when you tap Add weather. We store the resulting temperature and condition, not your raw GPS coordinates.
• App version and OS version, attached only to crash reports if and when the app crashes.

Only the people you invited.

Each project's data is scoped at the database level. The supervisor who created the project and the clients explicitly invited to it are the only accounts that can read its entries, photos, and PDFs. ArchEurope staff cannot read project content without your written consent, except where required by law.

Tied to the life of your project.

• Project data — kept while the project is active and for 10 years after its closure, matching the retention period required by Czech construction-record law.
• Auth tokens — invalidated after 30 days of inactivity.
• Crash reports — kept 90 days, then deleted.
• You may request deletion of your account and all non-legally-required data at any time.

You decide what happens to your data.

As an EU data subject you have the right to access, correct, delete, port, or object to the processing of your personal data. Write to the support address below and we'll act within 30 days. If you're not satisfied with our response, you may file a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Hosted in the EU.

Project data is stored on Supabase infrastructure in an EU region. Authentication and storage are protected by row-level security: every database read is checked against your account's permissions before any byte leaves the server.