Privacy Policy
com.sitetally.mobile
At SiteTally (accessible via our Android mobile application on Google Play and associated web interfaces), protecting your personal data, business operational records, and site confidentiality is our utmost priority. This Privacy Policy details how SiteTally collects, processes, stores, and protects your information in strict accordance with global privacy regulations and Google Play Developer Policies.
1. Information We Collect
SiteTally collects operational data necessary for delivering comprehensive construction site management, adhering to Google Play Data Safety guidelines:
Full name, business email address, mobile phone number, company affiliation, user role, and authenticated login credentials.
Construction project profiles, material measurements, daily workforce attendance records, position wages, and subcontract agreements.
Network connection status (online/offline mode), device model, OS version, FCM push tokens, and non-identifying diagnostic logs.
Material vendor invoice photos, delivery receipt snapshots, user avatars, and generated site voucher image files.
2. Biometric Data Safeguards
SiteTally supports Biometric Authentication (Fingerprint Recognition and Facial Unlock) using Android BiometricPrompt hardware APIs for rapid and secure app unlocking.
Important Disclosure: Biometric raw sensory data and facial or fingerprint templates are processed strictly inside the device's physical hardware Secure Enclave (TrustZone). SiteTally does NOT capture, collect, store, transmit, or share biometric templates with any remote cloud servers or third parties. The device operating system simply returns a verified cryptographic success confirmation.
3. Android Device Permissions Disclosures
To enable operational features, SiteTally requests standard Android runtime permissions in accordance with the principle of minimal privilege:
Required for real-time synchronization of project records with Firebase cloud infrastructure, user authentication, and secure multi-device data updates.
Required on Android 13+ (API 33+) to dispatch essential Firebase Cloud Messaging (FCM) push notifications regarding project updates, new site logs, and system alerts. You can toggle this permission off at any time in device settings.
Used to verify device biometric hardware when authenticating the user locally on the smartphone.
Used exclusively when you choose to take a photo of a material delivery receipt, attach invoice slips, customize your user profile avatar, or save generated delivery voucher receipts to your local device storage.
4. Third-Party Infrastructure & Data Processors
We partner with enterprise cloud providers compliant with global security benchmarks (SOC 2, ISO 27001):
- Google Firebase Authentication: Manages tokenized user identity verification. Raw passwords are never visible or accessible to SiteTally.
- Google Cloud Firestore & Firebase Storage: Stores encrypted NoSQL database collections and receipt attachments in secure regional data centers.
- Firebase Cloud Messaging (FCM): Delivers encrypted real-time notifications to authenticated Android devices.
- ZeptoMail / Transactional Mail Engine: Dispatches account verification links, password reset instructions, and security alerts.
5. Data Security & Encryption Standards
We implement enterprise-grade security protocols. All data transmitted between the SiteTally mobile app, web console, and cloud servers is encrypted in transit using Transport Layer Security (TLS 1.3). Data stored in cloud databases and file buckets is encrypted at rest using AES-256 encryption. On Android devices, authentication tokens are stored in hardware-backed encrypted storage.
6. Account & Data Deletion (Google Play Compliance)
In full compliance with Google Play Developer Policies, SiteTally provides users with straightforward methods to request the permanent deletion of their account and all associated personal and operational data. You do not need to keep the app installed to exercise this right.
How to Request Account & Data Deletion:
Send an email from your registered account address to support@sitetally.app with the subject line "Data Deletion Request". Please include your organization name, full name, and registered phone number or email address.
Timeline & Deletion Scope: Account deletion requests are processed within 30 calendar days.
Upon execution, your login credentials, user profile, workforce attendance logs, and uploaded receipt images will be permanently purged from active databases. Aggregated financial summaries or audit records may be retained only where required by applicable construction tax, billing, or statutory laws.
7. Children's Privacy
SiteTally is exclusively engineered for commercial construction professionals, engineers, contractors, and business organizations. It is not intended for use by anyone under 13 years of age. We do not knowingly solicit or collect personal information from children.
8. Policy Updates
We may update this Privacy Policy to reflect app enhancements or statutory requirements. Changes will be posted on this URL with an updated "Effective Date". Continued use of SiteTally following updates constitutes acceptance of the revised policy.
9. Developer & Privacy Contact
For privacy inquiries, rights requests, or technical support, please contact our team:
Official Google Play Store Listing: SiteTally: Construction App (com.sitetally.mobile)