Privacy Policy

01Who we are

PlumbLine makes two field tools for residential construction, operated by ZMBuilds, LLC, doing business as PlumbLine Tools ("PlumbLine," "we," "us"): Project Tracker, for jobs, tasks and schedules, and Daily Logs, for daily logs, job photos, checklists and a crew time clock. This policy explains what each collects, why, and the choices you have. It covers both, in their iOS apps and on the web at app.plumblinetools.com. Where the two differ, it says which. Each app has its own account. Our website, www.plumblinetools.com, is covered too, in its own section below.

02What we collect

Account information

When you create an account in either app, we collect your email address (and in Daily Logs, your name, which your company sees on what you record). Sign-in is handled by WorkOS, our identity provider: you enter your password on a WorkOS-hosted page, and WorkOS stores it in hashed form. We never see, receive, or store your password.

Project Tracker: the work you put in

The app stores the job data you create and organize: job names, tasks, dates, target completion dates, notes, forecasts, meeting records and action items, and any daily-log data you choose to import from the PlumbLine Daily Logs app. This is stored on your device, and — only if you sign in — synced to your cloud record so it is available on your other devices.

Daily Logs: the work you put in

Daily Logs stores what you and your crew record: daily logs (date, area, summary, weather, trades on site, work done, notes, private notes and tasks), materials delivered, job photos you take or attach, checklists and their photos, comments and saved texts, reminders, and time-clock records (clock-in and clock-out times and breaks). Job details can include a client's name, address, phone number and email address, which you enter. On the phone this is kept on the device and synced to your company's cloud record; the web version reads and writes that record directly.

Daily Logs: location

Daily Logs reads your location only when you tap an action that needs it, never in the background:

• Time clock: when you clock in or out, the device's location is saved with the punch, to show whether it was made at the job site. Admins in your company can see it. If you don't allow location, the punch can still be made and is marked as such.
• Weather: when you get the weather for a log, a location (your phone's, or the job site's on the web) is sent to Apple's WeatherKit to look up conditions. Only the coordinates are sent, not who you are.

Daily Logs: notifications

If you allow notifications, Daily Logs stores your device's push token so it can tell you about comments on your logs and reminders assigned to you. Notifications are delivered by Apple's Push Notification service and show the job and the person involved. Signing out or being removed from your company stops them.

If you work with a team

PlumbLine lets you invite teammates to share a set of jobs. This is worth understanding before you invite anyone:

• In Project Tracker, everyone in a shared organization can read and edit the jobs, tasks, and meeting records in it. Some actions, such as creating or deleting a job, are limited to the organization's owner.
• Your email address is visible to other members of your organization, so they can tell who is who.
• When you have Project Tracker open, other members may see that you are currently viewing the same job, so two people don't unknowingly edit the same thing at once. This is not location tracking and is not recorded — it exists only while the app is open.
• To invite someone, you enter their email address. We store that address so the invitation can be matched when they sign in.
• If you are removed from an organization, you lose access to new changes, but any data already downloaded to your device stays there. (In Daily Logs, a removed person's phone erases its copy.)
• In Daily Logs, everyone in a company can read and add to its logs, photos, checklists and comments; your name appears on what you record; and admins can see everyone's time records.

Project Tracker: device identifier

Project Tracker generates a random identifier for each device you sign in on. It is used only to keep syncing consistent between your own devices. It is not linked to your hardware, is not an advertising identifier, and cannot be used to identify you outside the app.

What we do not collect

• Neither app collects analytics, usage tracking, or advertising identifiers.
• Neither app collects contacts or browsing activity.
• No third-party trackers, and no ads anywhere in either app.
• Project Tracker collects no location, and no photos or other media apart from a company logo you may choose to upload, which is stored with your own data. Daily Logs collects location and photos only as described above.

03How we use it

We use your information only to run the service you asked for:

• To sign you in and keep your account secure.
• To sync your job data across your devices when you are signed in.
• To share jobs with the teammates you have chosen to work with, and to show them who is in your organization.
• In Daily Logs: to show your company's logs, photos, checklists and time records to its members, to make the PDFs and emails you choose to send to clients, to fetch the weather you ask for, and to notify your phone about comments and reminders.
• To respond to you when you contact support.

We do not sell your data, and we do not share it with third parties for advertising or marketing.

04Where it is stored, and who processes it

We use a small number of providers to run the Service. Each processes data on our behalf, and none of them use it for their own purposes:

• WorkOS — identity and sign-in. Holds your email address and your password (hashed), and issues the sign-in tokens the app uses.
• Supabase — database, photo storage and sync hosting for your job data, on servers located in the United States, in Amazon Web Services' US West (Oregon) region. Each app has its own database.
• Netlify — hosting for the web apps and for the small server functions that handle sign-in, weather lookups and account deletion.
• Apple — for Daily Logs, WeatherKit (weather for a location) and the Apple Push Notification service (delivering notifications to your phone).

Your synced data is protected by row-level security, so no account can read another account's data — with the deliberate exception of teammates in an organization you have joined, described above.

If you download the app from the Apple App Store, Apple provides app distribution and, if paid plans are offered in the future, payment processing. We do not receive your payment card details.

05Your choices

• Access and export: Project Tracker can export a full backup of your data as a JSON file at any time from Settings. In Daily Logs, any member can make PDFs of logs and checklists, and admins can export a job's or every job's logs as CSV or Excel.
• Correct: you can edit or remove any job, task, or note directly in the app.
• Stop syncing: sign out to keep your data on your device only. You can also undo the most recent sync from Settings.
• Delete your account and data (Project Tracker): you can do this yourself at any time from Settings → Account → Delete account, in the app or on the web. This removes your job data and your sign-in from our systems and from our identity provider. It cannot be undone, so export a backup first if you want to keep a copy. If an organization you owned still has other members in it, that organization and its shared jobs remain for them, and ownership passes to the longest-standing remaining member.
• Delete your account (Daily Logs): from Settings → Delete my account, in the app or on the web. Your sign-in is deleted from our identity provider, and you leave your company; the logs, photos and time you recorded belong to the company and stay with it, under your name. If you own the company and you are its only member, the company is deleted with everything in it, photos included. If others are still in it, you first make one of them the owner. It cannot be undone.
• Leave a shared organization: ask the organization's owner to remove you. Removing your account entirely, as above, also ends your access.

06How long we keep it

We keep your synced data for as long as your account is active. When you delete your Project Tracker account, your job data and your sign-in are removed from our systems immediately — there is no waiting period and no archived copy. Two things deliberately survive: data that other people still need (a shared organization that has other members in it, and jobs within it), and any copy already downloaded to a teammate's own device, which is outside our control. Data that lives only on your device is removed when you delete the app or clear its data.

In Daily Logs, a company's data is kept for as long as the company exists. When an owner who is the company's only member deletes their account, the company's records and photo files are removed immediately. When a member deletes their account, their sign-in is removed immediately and their name stays on the company's records. When anything is deleted, a short record of what was deleted (identifiers only, no content) is kept for 90 days so that every phone in the company removes it too.

07Children

PlumbLine is a tool for construction professionals and is not directed to children. We do not knowingly collect information from anyone under 13 (or under 16 in the EEA/UK). If you believe a child has provided us information, contact us and we will delete it.

08Security

Data is encrypted in transit (HTTPS). Your password is held only by WorkOS, our identity provider, in hashed form — it never reaches our own systems. Access to your synced data is enforced by row-level security in the database, so the rules about who can read what are applied by the database itself rather than by the app. On iPhone and iPad, your sign-in is stored in the device Keychain and is excluded from device backups. No system is perfectly secure, but we work to protect your information and to keep only what the app needs.

09Our website

Our website, www.plumblinetools.com, is separate from the apps. You can browse it without an account, and it sets no cookies and uses no analytics, tracking or ads.

The contact form

If you use the form to join the beta, ask for a demo or get in touch, we collect what you enter: your name and email address, and, if you choose to give them, your company, your trade and a message, along with when you sent it. We use it only to reply to you and to send the early-access, demo or launch details you asked for. It is kept in the website's own database, hosted on Supabase through Lovable (the service the website is built with), apart from the apps' data, and only PlumbLine can read it. It is not added to either app, and we do not sell it or share it for advertising.

We keep it until you ask us to delete it. To have it deleted, or to stop hearing from us, email support@plumblinetools.com.

Hosting and fonts

Netlify hosts the website. Its fonts load from Google Fonts, so when a page opens your browser connects to Google, which receives your IP address and browser details as part of that request.

10Changes to this policy

If we change this policy we will update the date at the top of the page. If either app adds new data collection (for example, photo attachments in Project Tracker), we will update this policy before that feature ships.

11Contact

Questions or requests: support@plumblinetools.com.

ZMBuilds, LLC, doing business as PlumbLine Tools
755 S Main St Ste 4 PMB 174, Cedar City, UT 84720