Privacy, in
plain language.
What Plumb handles, where it lives, and the choices you have.
Draft for owner review — not ready for Intuit.
This is proposed wording, not an effective agreement or a final privacy notice. It has not been approved for publication, submitted to Intuit, or certified as legally sufficient. Do not enter this preview address in a production checklist.
The owner has supplied the operator’s legal name, mailing address, phone number and support/privacy email shown below. Contact details are no longer awaiting confirmation. Applicable legal requirements, hosting disclosures and the final app still need review, followed by separate publication approval. No effective date has been set.
Operator & contact
Anthony Rashad Hatchett
11010 Suncrest Dr., Anderson Island, WA 98303
Phone: 323-363-7557
Support & privacy: [email protected]
These details were supplied by the owner for this draft. Email and phone links open your device’s chosen app; this website does not send a message or place a call automatically. No response time is promised.
Accounts and shared project work
When you sign in with email and password or Sign in with Apple, Plumb uses account identifiers and information you provide, such as name and email, to authenticate you and associate work with your account. Supabase provides Cloud authentication, database and private file storage. Cloud is the source of truth for confirmed shared company estimates, plans, daily reports, crew timecards and company inventory, connecting authorized Office and Foreman workspaces. Company roles and current job assignments control access; financial estimates remain restricted to Office and administrators. Worker rosters, attendance, signature evidence, production entries, bids, task plans, field alerts and messages also use their scoped Cloud paths where enabled. A local pending change is not a confirmed Cloud record or proof of delivery to another workspace. Personal drafts and legacy originals are not automatically shared; company import requires explicit ownership review. Genuine two-account device acceptance remains a separate release check.
Private Practice Project
The interactive Practice Project stores your sandbox edits and tour progress privately under your account in Cloud. This includes sample attendance, training takeoff quantities, a practice report and PDF-sheet pins. These records are separate from real company work and are removed with account deletion. Practice does not run paid AI scans, capture location, create employee signatures, send crew messages or accounting exports, or enroll you in an internal test company.
What is still on your device
Personal-mode rosters, roll call, timecards and signature images, inventory, preferences, cached plans and pending field changes may remain on-device. Company mode also keeps scoped caches and queued changes locally; an unsent change is not Cloud-confirmed. Signing in on another device does not recover every local or legacy item. Phone Recovery, where available, exports selected app-owned local records and cached files only when you choose to save the file. It is not a full Cloud backup or an automatic restore of every feature. Keep recovery files private and protect local originals before removing the app or replacing a device.
PDF plans and jobsite photos
Plans you upload are sent to private Cloud file storage and linked to bid or project records where supported. Field alerts may contain notes, drawing positions and a photo. Depending on the app version and whether the send succeeds, a photo or pending alert may still be local. Camera and photo access is used when you choose to capture or attach an image, not for background surveillance. Share only documents and images you are authorized to use.
Optional QuickBooks accounting
QuickBooks production access is not activated; general release is gated and current authorized internal testing is sample-company/sandbox-only. When enabled and connected by a company administrator, the scoped service reads customers, sales items, tax codes, company currency/preferences and existing Estimates for mapping and review. Each permitted USD Estimate or related approved change-order revision needs explicit Office review and approval before being sent to Intuit. It does not send invoices, payments or payroll. OAuth access/refresh tokens are encrypted in Cloud, not stored on the phone. Cloud can retain reviewed mappings, source snapshots, payloads/previews, approval evidence, connection/export identifiers and delivery history. Disconnect confirms success only after provider revocation succeeds; it does not delete Estimates already in QuickBooks or retained Cloud export history. Account deletion does not automatically revoke a company Intuit grant. No Intuit-side deletion or retention period is promised. QuickBooks information is not used to train or fine-tune AI models; the accounting flow does not forward its reference data or tokens to the AI services described below. Do not manually include accounting data in AI requests unless you have authority to share it. Uncertain deliveries and external edits require review, not blind resends or silent overwrites.
Optional mailbox connections
When a Google or Microsoft mailbox connection is available and you authorize it, the Cloud scanner can inspect recent Inbox message subjects, senders, bodies and attachments to identify bid invitations. The inspected scan window is up to 45 days. Captured invitation metadata, source links and relevant PDFs may be retained; this is not a general mailbox archive. This OAuth flow does not ask for your mailbox password; connection tokens remain server-side. Mailbox scanning itself is not an AI takeoff. Disconnect in Service Settings and independently review/revoke access in your Google or Microsoft account: an app-side disconnect does not guarantee provider-side revocation. Previously captured bids and plans are not automatically erased by disconnecting. Availability depends on provider configuration.
AI features and voice playback
A requested AI blueprint takeoff sends the selected PDF, filename, project label, source-email subject and sender when present through Cloud to OpenAI. Source context or document contents can include names or email addresses; this is not a guarantee of anonymous processing. The optional navigation assistant can send your query, app role, candidate screen descriptions and recent search selections to OpenAI. Safety voice playback may send the safety-topic script to ElevenLabs or use system speech instead. These providers process supplied content under their own terms and policies. No universal promise about provider retention or training is made for documents you choose to submit. AI output needs qualified human review. Only request processing when you have authority to share the selected content; manual quantities remain an alternative.
One-time Foreman-device location checks
For shared company jobs, Office can review and save jobsite coordinates and an allowed radius in Cloud. With When In Use permission, marking attendance can request one bounded foreground position from the Foreman’s device. The app records coordinates, accuracy, capture time, permission/precision and simulation indicators, the reviewed jobsite revision and an inside-radius, outside-radius or unverified result with the time entry. Evidence is shared only with authorized company/job members and retained with the original timecard; later jobsite changes do not rewrite earlier evidence. Pending device readings are not Cloud-confirmed. This checks one device, not each employee’s whereabouts, and is not independent proof of presence or signer identity. Denied, approximate, stale, inaccurate, skipped or unavailable readings remain unverified and do not block recorded hours or employee signatures. You can skip positioning, leave the screen, or change permissions in Settings. The app does not request continuous or background location tracking. Office-device positioning is optional configuration assistance, not Foreman clock-in evidence.
Weather and notifications
Separately, with your permission, the app reads a jobsite location to request weather information from Open-Meteo and choose relevant safety context. Coordinates for weather are sent to that provider. Notification preferences are stored locally. If you enable remote notifications, the service registers an Apple push token and device information to deliver relevant alerts. You can change permissions in iPhone Settings.
Purchases
Apple processes in-app purchases and subscriptions. Plumb uses verified transaction and account-entitlement information to determine access to paid features. The developer does not receive your full payment-card details. Manage or cancel subscriptions in your Apple account settings; deleting an app account does not automatically cancel an Apple subscription.
Retention, deletion and your choices
Records are kept to operate the selected features and preserve authorized company history; no fixed universal retention, backup or provider-deletion period is promised. Protect required work before using Preferences → Delete Account. Deletion is refused while you are a company’s last administrator; transfer administration first. Confirmed deletion removes that account’s company membership and personal access. Retained company documents, daily logs and saved safety-related reports remain with the company, with personal attribution removed where applicable; deleting a user is not deleting the company. Only after Cloud confirmation does the app remove identified data for that account on that device, preserving other accounts and unassigned legacy originals. Private files can remain queued for service cleanup. Exported recovery files and copies held by others are outside this app-side cleanup. Account deletion does not cancel Apple billing or confirm revocation of a company Intuit grant. An error or refusal does not confirm deletion. The live Safety Meeting briefing checklist is not itself a saved company report; do not rely on it as a retained safety record.
Security and processing locations
Account and company permissions restrict Cloud access; connection tokens are kept server-side and QuickBooks OAuth tokens are encrypted at rest. This is not a promise of end-to-end encryption, zero security risk, a security certification or a complete independent backup. Service providers may process information outside your location. The owner must confirm the relevant hosting region and jurisdiction-specific disclosures before approval; this draft does not guess a country, legal basis or statutory response deadline.
No advertising tracking
The app is not designed to sell personal information or track you across other companies’ apps and websites. This marketing website has no added analytics, advertising pixels, third-party embeds, account forms or email-capture system. The hosting provider may process standard request information such as IP address and access logs to serve and secure the site. Following external links takes you to another provider’s privacy policy.
Provider policies
Review the policies of Supabase, Intuit, OpenAI, ElevenLabs, Apple, Google, Microsoft and Open-Meteo as applicable to the features you choose. These links do not load third-party services into this page.
Privacy requests and your choices
Contact the operator below for access, correction, deletion, export or complaint requests. Do not send passwords, access codes, confidential plans or sensitive records in an initial email. Available controls let you manage app permissions, review editable records and request account deletion. Additional rights depend on applicable law; relevant jurisdictional disclosures still need review. A mail link opens your email app and does not submit a request through this site. See the support draft and license-agreement draft.