Privacy Policy for WorkMap
Effective date: October 24, 2025
This Privacy Policy explains how WorkMap (“WorkMap,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use our mobile applications and related services (collectively, the “Services”). By using the Services, you agree to this Privacy Policy.
- Account and profile: name, email, optional phone number, job title, role, organization, profile photo.
- Authentication: password (hashed), Apple/Google identifiers (if used for sign-in).
- Content you provide: property addresses, notes, phone numbers, photos and other uploads.
- Location data: approximate or precise location when permissions are granted, to center maps, geocode, and support map interactions.
- Device and usage: device model, OS, app version, language, push token, IP address, app interactions, diagnostics and performance.
- Payments and subscriptions: purchase status and metadata via RevenueCat; underlying store (Apple/Google) processes payment details. We do not receive full card numbers.
- Provide, maintain, and improve the Services and features (maps, geocoding, property management).
- Authenticate and secure accounts; prevent fraud and abuse.
- Process and validate purchases/subscriptions via RevenueCat and app stores.
- Enable uploads to our storage (DigitalOcean Spaces) and manage user photos.
- Send transactional communications and service notifications.
- Analyze aggregate usage to improve reliability and performance.
- Comply with legal obligations and enforce our terms.
- Service providers: We share information with vendors who process data on our behalf, including:
- RevenueCat (subscriptions and entitlements)
- Mapbox (geocoding and reverse geocoding)
- DigitalOcean Spaces (file storage and CDN)
- Hosting, analytics, logging, error reporting, and customer support tools as applicable
- Legal and safety: To comply with law, protect rights, safety, or property.
- Business transfers: In connection with merger, acquisition, financing, or sale of assets.
- With your direction: When you invite teammates or intentionally share content.
We do not sell personal information. We do not share data with third parties for their independent marketing without your consent.
Your Choices and Controls
- Permissions: You can enable/disable location, camera/photos, and notifications in your device settings. Some features may not work without these permissions.
- Marketing: We do not send marketing without consent; you may opt-out at any time if you consented.
- Access, correction, deletion: You may request access to, correction of, or deletion of your personal information by contacting us at harold_bracy@alumni.brown.edu.
- Data portability and objection: Where applicable by law, you may request portability or object to certain processing.
Data Retention
We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. We may retain de-identified or aggregated data for longer.
Security
We use administrative, technical, and organizational measures to protect personal information, including encryption in transit and access controls. No method of transmission or storage is 100% secure.
International Transfers
Your information may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for such transfers.
Children’s Privacy
WorkMap is not directed to children under 13 (or 16 where applicable), and we do not knowingly collect personal information from children.
Region-Specific Disclosures
- EEA/UK/Switzerland (GDPR):
- Controller: WorkMap
- Legal bases: performance of contract; legitimate interests; consent (e.g., for precise location, notifications, or marketing); legal obligation.
- Rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with your local supervisory authority.
- California (CCPA/CPRA):
- We do not sell or share personal information as defined by CPRA.
- Rights: know/access, delete, correct, limit use of sensitive info, and non-discrimination. Submit requests via harold_bracy@alumni.brown.edu.
Third-Party Services
- RevenueCat: manages purchase receipts and entitlements; subject to RevenueCat’s privacy policy.
- Mapbox: provides geocoding/reverse geocoding; subject to Mapbox’s privacy policy.
- DigitalOcean Spaces: stores uploads and serves media; subject to DigitalOcean’s policies.
Use of third-party services is governed by their privacy policies.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Effective date” above indicates when it was last revised. Material changes will be notified in-app or via email.
Email: harold_bracy@alumni.brown.edu
—
Apple App Store Privacy Nutrition Label (Summary)
- Data linked to you: contact info, identifiers, location (if enabled), user content (uploads), purchase history, app activity, diagnostics.
- Purposes: app functionality, account management, payments, analytics, fraud prevention, communications.
- Tracking: We do not use data for cross-app or cross-site tracking.
Google Play Data Safety (Summary)
- Collected: contact info, identifiers, location (if enabled), app activity, diagnostics, purchase history, user content (uploads).
- Shared: purchase metadata with RevenueCat/app stores; uploads via storage provider; diagnostics/analytics with service providers.
- Security: data encrypted in transit; you can request deletion via email.
- Optional: precise location, camera/photos, notifications.