Privacy Policy

Last updated: October 11, 2026 · Effective: October 11, 2026

The short version. The app keeps your jobs on your device first. If you sign in and turn on sync, a copy goes to our database provider (Supabase) so your devices and your clients’ approval links work. We don’t sell your data, we don’t show ads, and we don’t use trackers. You can export everything, and you can delete your account in the app at any time.

1. Who we are

Bengt Drummond-Staring (“we”) runs Amberchalk (the “Service”). This policy explains what information the Service handles, where it lives, who else touches it, and the choices you have. Contact us at [email protected].

2. What we handle, and where it lives

Information	Where it is stored	Why
Your projects, logs, schedule, contacts, change orders, financial entries, plans and settings	On your device (browser storage). If you sign in and sync, also in our database (Supabase).	To run the app, work offline, and keep your devices in step.
Photos, plan files (PDF/images) and receipt photos	On your device. If you sync, also in private file storage (Supabase). Photos attached to an approval request are copied to a private area so your client can see them.	Progress records, takeoff, expense records, client approvals.
Location (only for the in-app camera)	Your device’s position is checked once, only when you open the in-app camera, to suggest the job you’re standing at; it is never tracked in the background. Project addresses are turned into map coordinates by OpenStreetMap Nominatim (the address is sent from your device), and the coordinates are saved on the project. A photo’s own location is saved only if you turn on “Save where each photo was taken” (off by default), and then only in the project record, never inside the image file.	Filing photos to the right job.
Account details: email address, company name, team members you invite	Our database (Supabase).	Sign-in, team access, support.
Subscription details: plan, status, billing interval, renewal dates, Stripe customer and subscription IDs	Our database; card and billing details are held by Stripe, not us.	To bill you and apply the right plan limits.
Service email (sign-in codes, team and homeowner invitations, important account notices)	Sent through our email delivery provider, Resend; the recipient’s email address and message content pass through them.	To let you sign in and to tell you about your account.
Client approval responses: the decision, typed name, any question or comment, timestamp, and an audit trail	Our database, linked back to your change order or decision.	To give you a record of what your client approved.
Technical request data (such as IP address and browser type)	Normal server logs at our hosting (Cloudflare) and database (Supabase) providers.	Running and securing the Service.

3. Data stored on your device

The app stores your work in your browser’s storage (IndexedDB, local storage and the offline cache), so it works without a signal. We can’t see this data unless you sync it.
This data is not encrypted by the app. It’s protected by your device’s lock and encryption. The optional in-app passcode only discourages casual access and is not strong security.
Receipt scanning runs on your device. The text-recognition files download once to your device and then read receipt images locally; the receipt image is not sent to us for scanning. The receipt photo is stored like any other photo (on your device, and in your synced storage if you sync).
Photos taken with the in-app camera never go to your phone’s camera roll and are saved as new images with no embedded information (no GPS location). Photos you add from your library are processed in your browser before they’re stored. A photo larger than 1600 pixels on its longest side, or larger than 1.5 MB, is resized and saved as a new image, which removes embedded information such as the camera’s GPS location (most phone photos fall into this group). A photo that is already small, or that your browser can’t read, is kept exactly as you added it, including any location information it contains.
Clearing site data, or the browser clearing it for you, removes the local copy. Export a backup regularly.

4. Cloud sync, Supabase and your clients

Cloud features are optional. If you don’t sign in, your project data stays on your device.
If you sign in, your records and files are stored with Supabase, our database and storage provider, on servers in the United States (Amazon Web Services, US East). Access is separated by company using row-level security so one company can’t read another’s data.
Approval links: when you send an item for approval, we create a one-time link. We store only a hash of the link’s secret token, not the token itself. Your client opens the link without an account and sees a snapshot of that item (and any photos you attached). The app does not store the client’s IP address or browser details, though our infrastructure providers’ standard logs may contain request metadata.
Photo share links: when you share photos with a link, copies of just those photos, their captions and dates, the project name and your company name are stored so anyone with the link can view them without an account. As with approval links we store only a hash of the link’s secret token. You can turn a link off at any time, and links expire after a year.
Owner’s View and guests: a client you invite can see only what you choose to share; internal items, subcontractor details, estimating, and (unless you turn it on) costs are not shown.
Your clients’ and team’s information. You decide what personal information about your clients, employees and subcontractors goes into the Service. For that information we act on your behalf, and you are responsible for any notices and consents you owe them.

5. Payments (Stripe)

Paid plans are billed through Stripe. You enter card details on Stripe’s pages; we don’t receive or store the full card number. We receive and keep your plan, subscription status, billing dates and Stripe IDs. Stripe’s own privacy policy covers what it does with your information.

6. Email (Resend)

We use Resend to deliver the emails the Service sends, such as sign-in codes. Resend processes the recipient address, the message and delivery information. When you invite a teammate or homeowner, we send them one invitation email that names you and your company and links to the app; we use their address only for that invitation and their sign-in. Payment receipts and billing emails come from Stripe. We only send service emails, such as sign-in codes, invitations and important account notices. We don’t send marketing emails, and we don’t use your or your clients’ email addresses for marketing.

7. Text messages

When you tap to text someone, the app opens a text-message draft in your phone’s own messaging app. You choose whether to send it, and it is sent by your device and carrier, not by us. We don’t use an automated text-messaging service, and these messages don’t pass through our servers.

8. How we use information

To provide, secure and support the Service, including syncing, approvals, billing and plan limits.
To send service messages (sign-in codes and important account or policy changes). We don’t send marketing emails.
To investigate abuse, fix bugs and comply with the law.
We don’t sell personal information, we don’t share it for advertising, and we don’t show ads. We don’t use your data or project content to train AI models, and we don’t let others do so.

9. Cookies, local storage and tracking

The app uses browser storage to work and to remember your sign-in and settings. We don’t use advertising cookies or third-party analytics or tracking tools, in the app or on this website. If that ever changes, we will update this policy first.

When you arrive on this website we record which link or ad brought you here (the UTM tags in the link, whether you came from a Facebook ad click, and the name of the website that referred you), keep it in your browser for up to 30 days, and save it with your company account together with your optional answer to “How did you hear about us?” when you sign up; we use this only to understand which of our marketing works, and we don’t use ad trackers or pixels.

10. Who we share with

Only service providers that help us run the Service (currently Supabase, Stripe, Resend and Cloudflare, plus OpenStreetMap Nominatim, which receives project addresses to look up their map location), people you choose to share with (like your clients and team), professional advisers, and authorities when the law requires it. If we are involved in a merger or sale, information may transfer to the new owner under this policy. We are based in the United States, and our providers may store and process data in the United States. If you use the Service from outside the United States, your information will be transferred to and handled in the United States.

11. How long we keep it

Data on your device stays until you delete it or your browser clears it.
Synced data stays while your account is active. When you delete your account (or ask us to), we delete your synced data within 30 days, except what we must keep by law (for example, billing and tax records). Copies in our providers’ backups roll off within 90 days.
Deleted items inside the app may be kept briefly as markers so that your other devices can remove them too.

12. Your choices: export and deletion

Export: in the app, Backup & data lets you download everything as one file (photos included). Financials → Export gives QuickBooks Online CSV, QuickBooks Desktop IIF and Excel files. Reports and takeoffs can be printed or saved as PDF/CSV. Export is available on every plan.
Delete on your device: the app can erase all data stored on a device.
Delete your account: in the app, go to Account → Delete account. This deletes your login and, if you are the only member of your company, the company and everything synced for it (projects, photos, plans, files and approvals), cancels its subscription immediately, and erases the app’s data on that device. If other people are in your company, the app asks you to contact us so their data isn’t lost. You can also email [email protected] from your sign-in address and we will do it for you. Deletion is completed within 30 days, and backup copies roll off within 90 days.
Access, correction and other rights: depending on where you live (for example, California or the EU/UK), you may have rights to access, correct, delete or port your information, to object to or restrict some processing, and to complain to a regulator. Contact us and we will respond within the time the law requires.
If a client of yours wants their information removed, please ask the contractor who uses the Service, or contact us and we will point you in the right direction.

13. Security

We use reasonable measures to protect data in the cloud, including sign-in, encrypted connections, row-level access controls and private file storage. No system is perfectly secure. You are responsible for your device security, your sign-in email, and who you invite. If we learn of a breach that affects you, we will notify you as the law requires.

14. Children

The Service is for businesses and is not directed to children under 18. We don’t knowingly collect information from children.

15. Changes

We may update this policy. We will post the new version here and, for material changes, tell you through the app or by email before it applies to you.

16. Contact

Bengt Drummond-Staring
9196 Tequila Sunrise, Sarasota, FL 34240
[email protected]