ServicePocket privacy policy

1. Who we are

ServicePocket is an app for service businesses, made and run by [OPERATOR NAME], [ADDRESS]. In this policy "we" means ServicePocket, and "you" means the person using the app. For questions about your data, write to [email protected]. Our person in charge of data protection is [DPO NAME], at the same address.

2. If you work on your own, your records stay on your phone

You can use ServicePocket with no account. Your shop's records stay only on your phone: your customers with their names, phone numbers and addresses, their units, your jobs, quotes, work orders, photos, payments and service reports. They are kept in a locked (encrypted) database, and we cannot see them. A backup you make is a file locked with a passphrase that only you know, saved where you choose. Android's own backup to your Google account is turned off for ServicePocket, so an unlocked copy never leaves your phone that way.

3. What the app always sends: a daily check-in

Once a day, when your phone is online, the app sends us a short check-in. It holds a random number made for your copy of the app, the date, the app version, your country, the city or municipality and province you typed for your shop, your business types, and four counts for the last 7 days: the days the app was used, jobs added, quotes issued and jobs finished. It never holds a customer's details, a price, a photo or anything you typed about a job. We use it to see where ServicePocket is used and how, to decide where to open the customer listing first, and to count real use for Founding 100 and referrals. The check-in is part of how the app works and cannot be turned off. A phone used only to find a service sends the same kind of check-in: that it is used for finding a service, the days the app was opened, the requests sent and the last city searched.

4. When you sign in: online backup and a team

You sign in with your mobile number only to use online backup, a second phone, a team or a listing. We send the sign-in code by text message through a text provider, which receives only your number and the code. With online backup or a team, your shop's records and photos are stored on our servers, run for us by Supabase in Singapore, so that your phones stay up to date. That covers the shop's details, its customers with their names, phone numbers and service addresses, their units and places, jobs and schedules, quotes, work orders, checklists, payments, service reports, the catalog and stock, and the photos taken on jobs or added to the catalog. For each member of a team we keep their name, number, role and the phones they are signed in on. Only the shop's own members see these records, each only what their role allows: technicians see only their own jobs and those customers, and never costs. ServicePocket staff look at a shop's records only to fix a problem its owner reports. For a shop's customer records, the shop decides why they are kept and we keep them for the shop.

5. Texts sent for you

If you turn on texts sent for you, the customer's number and the words of the text go through our servers to a text provider, which sends them. The app sends a text only to customers you marked as saying yes to texts. We keep a record that each text was sent.

6. Your listing, when customers can find shops

When the customer listing opens in your area and you choose to list your shop, we keep online what you chose to show, the services you picked, your places served, your mobile number, your consent and its date, our review notes, and the requests you receive with your replies. Papers and an ID you send us to check your shop are seen only by ServicePocket, never by customers. We keep the files privately until we check them, then delete them; files we never check are deleted after 30 days. We keep only the kind of each paper, its number, its end date and when it was checked; for an ID, only that we saw one. When you remove your listing, its data is deleted, except your consent and our review history, which we keep 12 months.

7. Plans and payments

You buy Pro, Pro Team and texts in the app through Google Play. Google Play handles your payment, and RevenueCat tells us which plan your shop has. We never see your card, wallet or bank details.

8. Notices to your phone

If you sign in or list your shop, the app asks your phone for a notice address so we can tell you about a new request, a message from ServicePocket or a change to your team. Notices go through Expo and Google's Firebase Cloud Messaging. Announcements from ServicePocket are downloaded by the app, which picks the ones meant for it; nothing about your phone is sent to get them.

9. Crash reports, only if you turn them on

Crash reports are off unless you turn them on in Settings. When they are on, a report of what went wrong is sent to Sentry, with your customers' details and anything you typed removed first.

10. Who else handles data for us

These companies handle data only to run ServicePocket for us:

• Supabase: our database, server functions and file storage, in Singapore.
• Cloudflare: this website and our email forwarding.
• Twilio and Semaphore: sign-in codes and texts sent for you.
• Resend: emails to customers who use the customer listing.
• Expo and Google Firebase: notices to phones.
• Google Play and RevenueCat: buying a plan.
• Sentry: crash reports, only if you turn them on.

Some of them keep data outside your country. [A lawyer's wording on sending data abroad, for each country, goes here.]

11. How long we keep it

Records on your phone stay until you delete them; backup files stay wherever you saved them. Daily check-ins are kept for [CHECK-IN DAYS]. A shop's online copy stays until its owner deletes it or the account. When online backup is turned off, or a paid plan ends, the online copy is kept 90 days in case you come back, then deleted; the owner can also delete it at once. Records you delete leave our servers at once, and our backups within 30 days. Photos you delete leave our servers and our backups within 30 days.

12. Keeping it safe

Your records on the phone and your backups are encrypted. Everything sent between the app and our servers is encrypted. On our servers, each shop's records can be read only by that shop's members, as their roles allow. If data is ever exposed, we tell you and the privacy regulator in your country as the law requires.

13. Your choices and rights

You can see, correct and export your shop's records in the app at any time, including spreadsheet files of them. You can delete everything on your phone in Settings. You can delete your account and your shop's online copy in the app, or at servicepocket.app/delete-account. To ask what we hold about you, to correct it, to get a copy, or to have it deleted, write to [email protected]. We answer within [REPLY DAYS]. If you are a customer of a shop, the shop keeps its own records, so ask the shop first. You can also complain to the privacy regulator in your country: the National Privacy Commission in the Philippines, the Personal Data Protection Department in Malaysia, or the Personal Data Protection Commission in Singapore.

14. What we never do

We never sell your data or your customers' data. We never show ads, and the app has no advertising or tracking tools. We never use your records to contact your customers for ourselves.

15. Changes to this policy

When we change this policy, we change the date below and say what changed in the app.

This policy was last changed on [DATE].