ConstruLog ("we", "us", or "our") is committed to protecting your privacy. This policy explains what personal data we collect through the ConstruLog web and mobile apps, why we collect it, who we share it with, how long we keep it, and the rights you have over it.
Last updated: October 18, 2026
ConstruLog is the controller of the personal data described in this policy. We currently operate under the ConstruLog name; if that changes, we will update this policy before the change takes effect. For any privacy request or question, contact us at contact@construlog.com.
Account data: name, email, password (hashed), phone, and other profile details you provide. Project content: photos, videos, voice notes, documents, checklists, chat messages, and client signatures that you or your team upload to a project. Location data: GPS coordinates attached to photos and videos when your device provides them, and the project address/coordinates used to fetch site weather for daily logs. Team activity: if you invite collaborators to a project, the project owner and the project's other collaborators can all see a log of everyone's actions on that project (photos added, checklists completed, reports generated, and similar events) — this is a shared workplace activity log, not a personal profile of any one collaborator. Device and usage data: crash reports, app version, product-usage events, ad-measurement events, and — in the mobile app, if you allow it — your device's advertising identifier (see "Analytics, session replay, and ad measurement" below). Billing data: plan, billing interval, and payment status from our payment providers — we never receive or store your full card number.
We use PostHog to understand how the app is used and to fix bugs. On the web app, a random 10% sample of sessions may be recorded as a replay so we can see layout and interaction issues; every input field and all page text is masked before the recording is captured, so replays never show what you typed or read on screen. We also use the Meta Pixel (Meta Platforms) on construlog.com to measure how our Facebook and Instagram ads perform — for example, whether a visit that came from an ad leads to a sign-up or to the pricing page. The Pixel sets a first-party cookie (_fbp) and sends Meta the page visited, the event, and technical data such as your IP address and browser; Meta may link it to the information it already has if you use its services. The mobile app uses the Meta SDK for the same purpose: it tells Meta when the app is installed and opened, when you create an account, and when you buy a subscription in the app. On iOS, the app asks your permission (App Tracking Transparency) before sharing your device's advertising identifier (IDFA); if you decline, these events are still reported, but without the IDFA. On Android, the SDK uses your device's advertising ID, which you can reset or delete in your device settings. You can opt out of analytics, replay, and ad measurement at any time: on the web, from Settings → Privacy (it turns PostHog and the Meta Pixel off in that browser); on mobile, from Settings → Privacy (it turns PostHog and the Meta SDK off on that device). Opting out stops new events and recordings from that device going forward. In the European Economic Area, the United Kingdom, and Switzerland, the Meta Pixel and the Meta SDK run only with your prior consent: nothing is loaded and nothing is sent to Meta unless you accept. You can withdraw your consent at any time, as easily as you gave it — on the website from “Cookie settings” at the bottom of our public pages or from Settings → Privacy, and in the mobile app from Settings → Privacy Policy → Ad measurement (Meta). Withdrawing stops ad measurement from that browser or device going forward; it does not affect measurement that took place before.
When you use AI features — photo analysis, report writing, voice-note transcription, or the daily-log assistant — the relevant photos, voice notes, video frames (a single representative frame extracted from each video, not the full video), and project text you provide are sent to OpenAI's API to generate the output. Under OpenAI's API data-usage policy, data submitted through the API is not used to train OpenAI's models unless we explicitly opt in to that, and we do not. AI output is a draft: it is generated automatically and is meant to be reviewed by the person who sends or signs the report before anyone relies on it.
We do not sell your personal data. We share it only with the service providers we use to run ConstruLog, each acting on our instructions — except Meta, which also uses ad-measurement data under its own terms as an independent controller (see section 3): • DigitalOcean — hosting for our servers and file storage (United States) • OpenAI — AI photo analysis, report writing, and voice transcription (United States) • PostHog — product analytics and session replay (United States) • Meta Platforms — measurement of our Facebook and Instagram ads through the Meta Pixel on the website and the Meta SDK in the mobile app (United States) • Sentry — error monitoring; your email and IP address are removed before an error report leaves your device (United States) • Stripe, Lemon Squeezy, and dLocal — payment processing (United States and Latin America, depending on the provider) • RevenueCat, Apple, and Google — in-app purchases on mobile (United States) • Expo — push notifications to the mobile app (United States) • Resend — delivery of transactional emails, including reports you send by email (United States) • Open-Meteo — weather data for the daily-log feature, using your project's approximate coordinates (European Union) We may also disclose data when required by law.
Project content (photos, videos, notes, documents, reports) is kept while your account is active and is deleted immediately when you delete your account. Content you uploaded to a project you don't own is kept for the project owner but is disconnected from your account. Internal logs of staff access to the admin panel are kept for 730 days (2 years), for accountability. Read notifications are kept for 180 days. Your record of accepting these terms is kept while your account exists. Billing and subscription-usage records are deleted with your account when the subscription was yours; if you were only a team member on someone else's subscription, those records are kept for that account but disconnected from your identity. Billing records are otherwise kept as required by tax law. Our hosting provider may keep periodic infrastructure backups of our database for continuity and disaster recovery; those backups are not deleted on the same schedule as the items above.
You have the right to: • Access your data — Settings → Privacy → Export my data sends a copy to your email. • Delete your account and its data — Settings → Privacy → Delete my account permanently removes your account and its content; this cannot be undone. • Correct inaccurate information — Settings → Profile. • Opt out of analytics, session replay, and ad measurement at any time — Settings → Privacy. • Withdraw your consent to ad measurement (European Economic Area, United Kingdom, and Switzerland) at any time — “Cookie settings” at the bottom of our public pages, or Settings → Privacy. To exercise any of these rights, or if you have a privacy question, contact us at contact@construlog.com.
ConstruLog is a professional tool for construction and field-service teams and is not directed at children. You must be at least 16 years old to use ConstruLog. We do not knowingly collect personal data from anyone under 16.
ConstruLog and its service providers process data mainly in the United States, with Open-Meteo processing weather data in the European Union. If you are located in the European Economic Area, using ConstruLog means your data is transferred outside the EEA. Where required, these transfers rely on the service providers' Standard Contractual Clauses or their certification under the EU-U.S. Data Privacy Framework.
The free “Try it” page on our website lets you generate a sample report without creating an account. This section describes exactly what happens to that data. What you send: 1 to 3 photos (up to 2 MB each) and, optionally, a short text note about the site. We do not ask for your name or email, and we do not create an account for you. Metadata: before anything is stored or sent to anyone, each photo is re-encoded and resized, which removes its EXIF metadata, including GPS location and camera details. AI processing: the processed photos and your note are sent to OpenAI's API to write the report, under the same API data-usage terms described in section 4. OpenAI is listed among our service providers in section 5. Retention: the processed photos and the generated report are kept for 24 hours and then deleted automatically. The cleanup runs every hour, so deletion happens at most 25 hours after creation; if a deletion fails, it is retried every hour until it succeeds. Usage limits: to cap use at 3 reports per day per connection, your IP address (for IPv6, only its network prefix) is held in our rate-limiting service for the 24-hour limit window. The draft itself stores only a keyed hash of it, not the address, and that hash is deleted together with the draft. We also keep a daily total of reports generated, which contains no personal data. If you then create an account: your photos and report are copied into a new project in your account and from then on follow the normal retention for your account content (section 6). The identifier of your draft is kept only in your browser's session storage, never in a web address. Once copied, the draft is marked as expired and its files are deleted by the next hourly cleanup. If you do not create an account, nothing is copied and nothing is kept beyond the period above.
The “Try without an account” button in the mobile app lets you use ConstruLog as a guest. This section describes exactly what happens to that data. What we create: a guest account with no name and no real email address. It gets an internal address that cannot receive mail, and we never send emails to a guest. By tapping the button you accept the Terms of Service and this Privacy Policy; we record that acceptance, with your IP address and device information, as for any account. Device identifier: the app generates a random identifier that is stored only on your device and sends it when a guest session starts. It is used only to limit guest sign-ups to 2 per day per device, together with a limit of 5 per day per connection based on your IP address. Both values are held in our rate-limiting service for the 24-hour limit window. AI processing: your photos, voice notes and reports are processed exactly like those of a regular account, including the use of OpenAI's API described in sections 4 and 5. Limits: a guest has lifetime limits of 1 AI report, 10 AI photo analyses and 2 minutes of voice transcription. Retention: the guest account and all its content (photos, audio, reports) are deleted automatically after 30 days without activity. Activity means using the app while signed in, or adding or changing photos, audio or reports. Stored files are deleted first; if that fails, the account is kept and the deletion is retried on the next daily run. Deleting it yourself: you can delete the guest account at any time from the app, which removes it and all its content. If you create an account: the same content stays in your new account and follows the normal retention (section 6). You must verify your email, as with any sign-up, and the guest session is closed. If you sign in to an existing account instead: you can bring the guest content into that account (projects above your plan's limit are archived, not lost) or discard it; either way the guest account is deleted.
