Privacy Policy

What this app is

Elevators is a service logbook for elevator mechanics, operated by the Elevators app team. Teams record the buildings and units they service and what happened on each visit, so the next mechanic arrives knowing the equipment.

This policy describes what the app collects, where it goes, and what you can do about it.

What we collect

Your email address. It is the only account identifier; there are no passwords. We use it to send sign-in codes, team invitations, and role-change notices.

What you and your teammates log: buildings (name, address, notes, machine room locations, access instructions, and building contacts you enter, which may include other people's names and phone numbers), units and their specifications and serial numbers, and service visits (type, problem, cause, resolution, fault codes, parts, tools, notes).

Photos you take or choose to attach to a unit or a visit.

Location, only when you use it: the coordinates you pin to a building with "Use my location", and, if you turn on "Attach my location" when logging a visit, one fix taken when you save. Location is requested while the app is in use and is never collected in the background.

Technical data needed to run the service: the time of sign-in requests, request logs with method, path, status and timing, and rate-limit counters by network address. We do not use analytics or advertising trackers.

Where it is stored

On your phone: a copy of your teams' records in a local database, plus the photos you captured, so the app works with no signal. Signing out deletes the local copy.

On our servers: records in a PostgreSQL database hosted by Supabase; photos in Amazon S3; the API runs on Railway. Emails are sent through Resend. These providers process data on our behalf and do not use it for their own purposes.

Who can see it

Everyone on the same team sees everything logged under that team, including who logged each visit (by email address). Different teams never see each other's data, even for the same building.

Photos are private objects; the app fetches them with short-lived signed links.

We do not sell personal data and do not share it with third parties other than the processors above, or when required by law.

Teams and leaving

Records belong to the team, not to the person who logged them. If you leave a team or a team removes you, what you logged stays with that team. Team owners and admins can export a team's data.

Your choices

Permissions: location, camera, and photo library are each requested when a feature first needs them and can be changed in your phone's Settings. The app works without any of them.

Deleting your account removes your personal team's records, revokes your sessions, and anonymizes your identity. Records you logged on company teams remain with those teams, no longer linked to your email.

Questions or requests: contact the support contact listed on the app's store page.

Retention

Records stay until deleted by a team member with permission or until the team is deleted. Sign-in codes expire after ten minutes; sessions after thirty days. Local copies of uploaded photos older than thirty days are removed from your phone automatically.

Changes

When a feature changes what the app collects, this policy is updated in the same release, and the date above changes.