Privacy Policy

Account and contact information, such as names, work email addresses, telephone numbers, company details, roles, and authentication records.

Operational information entered into the service, including customers, job sites, work orders, notes, photos, signatures, services, parts, invoices, and equipment records.

Technical and usage information needed to secure and improve the service, such as IP address, device and browser details, application events, diagnostics, and audit logs.

Mobile location information can include latitude, longitude, accuracy, altitude, time, speed, heading, movement status and battery level when location features are enabled.

Optional background tracking collects location for work dispatch and route visibility even when the app is closed or not in use, subject to your device permissions and operating-system restrictions. Authorised people in your employer’s or organisation’s workspace can view the locations and routes associated with your work account.

You can stop background tracking using the tracking switch in your mobile profile or change location permissions in your device settings. A previously enabled tracking preference can resume when the app starts again. Stopping collection does not delete location records already sent to your organisation.

Job photos and check-ins may also include location when you use those features. Uploaded photos can include capture time, notes and optional GPS; signatures include the signature image, signer name and recorded consent. These records are associated with the relevant work account and job.

The app keeps account-scoped work data and pending uploads on your device to support offline work. Removing the app or clearing its storage can remove unsent work; contact us before doing so if you need help with a privacy request or pending records.

Account-linked work records and location updates are sent to the authenticated WorkOrderPro service at portal.workorderpro.co.za. Access is controlled by workspace membership and permissions.

If you enable push notifications, the app registers a device push token through Expo. Delivery uses Expo and the relevant platform push service, Google Firebase Cloud Messaging on Android or Apple Push Notification service on iOS. Notification content and delivery identifiers are processed to send work alerts.

Mobile maps load map tiles from OpenStreetMap. Tile requests expose your IP address and ordinary HTTP device information to that map service, together with the map area being viewed; that area may relate to a job site or route.

Expo also delivers mobile app updates. Update requests include network information such as an IP address, the app and runtime version, and update identifiers so that the device receives compatible software. These requests do not include your job notes, customer records or GPS route.

The current mobile configuration does not enable Sentry crash reporting and does not use an advertising analytics SDK. This differs from first-party analytics on the public website, described below.

We process information to provide the contracted service, authenticate users, support work-order operations, deliver transactional messages, secure accounts, diagnose faults, and improve product usability.

Where required, we process information to meet legal obligations, protect legitimate business and security interests, or respond to an instruction or consent that can lawfully be relied on.

Marketing messages are optional. Recipients can unsubscribe using the link in the message or contact us directly.

We may use vetted providers for hosting, email delivery, monitoring, payment processing, customer support, and analytics. They receive only the information reasonably needed for their role and are subject to contractual and security controls.

Some providers may process information outside South Africa. Where that happens, we use appropriate contractual or legal safeguards and assess the protection available in the destination.

We do not sell personal information. We may disclose information when required by law, to protect rights or security, or as part of a legitimate business transfer subject to appropriate safeguards.

We retain information for as long as it is needed to provide the service, meet contractual and legal obligations, resolve disputes, and maintain necessary security or financial records. Retention varies by record type and account status.

We apply access controls, authenticated sessions, tenant separation, audit records, backups, and encryption in transit. No online service can promise absolute security, so customers should also use strong passwords, multi-factor authentication where available, and appropriate user permissions.