Privacy Policy

The My Scaffolding Ltd app, for iPhone and Android

Last updated: 25 August 2026
Data controller: My Scaffolding Ltd
Contact: myscaffoldingltd@outlook.com

This policy is written to be read, not to be waved at a regulator. It says plainly what the app holds, where it goes, and who can see it.

What the app is for

The app records scaffolding jobs: who a scaffold is for, where it is, what it is worth, when it went up and when it came down. It is used by the staff of My Scaffolding Ltd, not by the public.

What the app stores

Everything below is entered by the person using the app, or captured at the moment they tap a button asking for it.

What	Why it is held	How it is captured
Client name, site address, contact name and phone number	To identify whose scaffold it is and who to ring	Typed in
The email address you sign in with	It is your account, and how the tracker’s owner gives you access	Typed in when you create an account
Crew member names	So a job shows who did what	Typed in
Job value and weekly hire rate	To track hire earned	Typed in
Photographs of scaffolds and sites	Evidence of what was erected	Camera or photo library, only when you choose a photo
GPS coordinates of a site or of the yard	To pin a site and show its distance from the yard	Device location, only when you tap “Use my location”
A signature drawn on screen	On the handover certificate	Drawn with a finger
A four-digit PIN, if set	So sign-offs are attributed to a person	Typed in

The app does not collect analytics, advertising identifiers, crash telemetry, contacts, calendars, microphone audio, health data, or background location. There are no third-party trackers or advertising SDKs of any kind.

Where it is stored

On your device. By default everything stays in the app’s own storage on that phone. Nothing leaves it.

On our server, only if you start or join a shared tracker. If you choose “Start a shared tracker”, the record is stored on our behalf by Supabase Inc., which hosts the database in the eu-west-1 (Ireland) region.

The owner decides who can see a tracker, by inviting them at their email address. Anyone given access can read it; those given edit access can change it. Treat the code like a key to the office: anyone you give it to can see the jobs, the photographs and the client details inside it.

Supabase acts as our data processor. Their privacy terms are at supabase.com/privacy.

Location

Location is read only at the moment you tap “Use my location”, and only while the app is open. The app never tracks location in the background and never follows a phone’s movement. What is stored is a single pair of coordinates attached to a job or to the yard.

Photographs

Photographs are reduced in size on the way in and stored with the job. They are not uploaded anywhere except to a shared tracker, if you are using one. The app reads only the images you explicitly pick or take; it does not scan your photo library.

Who we share it with

Nobody, other than Supabase as our hosting provider. We do not sell data, we do not share it for advertising, and we do not pass it to analytics companies. Documents produced by the app — job sheets and handover certificates — leave the app only when you send them, using your phone’s own share sheet.

How long we keep it

Until it is deleted. Anyone using a tracker can delete a job, and “Erase everything” in Settings clears the whole record from the device. To have a shared tracker deleted from our server, write to the address at the top of this page.

Your rights

Under UK GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to our holding it. Write to the contact address above and we will respond within one month. You may also complain to the Information Commissioner’s Office at ico.org.uk.

Our lawful basis for holding client and site details is legitimate interest — running a scaffolding business and meeting the inspection-record duties that come with it.

Children

The app is a work tool for scaffolders. It is not directed at children and we do not knowingly collect data from anyone under 16.

Security

Data travels to our server over HTTPS. The database is not readable without a valid join code, and the underlying table is closed to direct access. Because a join code alone grants access, the security of a shared tracker rests on keeping that code within your firm.

Changes

If this policy changes we will update the date at the top and publish the new version at the same address.

My Scaffolding Ltd · Privacy Policy · 25 August 2026