Privacy Policy

• In the phone apps, your reports stay on your device. Reports, photos, voice recordings, signatures, GPS locations, and PDFs you make in the phone apps are stored on your phone. We keep no copy and cannot access or recover them.
• The web app and the console store your work. They need an account. Reports, photos, and project details you add there are stored on our servers for your company, and your company decides who in it can see them.
• Signed reports are records. A report signed in the web app is kept for your company. Deleting your account does not delete it.
• No ads, no tracking. The phone apps have no account, no sign-in, no advertising, no analytics, and no third-party tracking. The web app and the console have no advertising, no analytics, and no third-party tracking.
• Cloud AI in the phone apps sends your report text for one purpose. When Cloud AI is on (the default) and you are online, the text of your report is sent over an encrypted connection so it can be organized into a report and returned to your phone.
• Audio depends on your phone. On iPhone, audio never leaves the device. On Android, with Cloud AI on and a connection, your recording is sent to our transcription provider to turn it into text.
• Our AI server does not store your content. It passes requests to the AI provider and returns the result, and keeps no copy. Its error logs can hold a short excerpt of a request or of the AI’s reply for up to 7 days.
• No training. Our AI providers do not use your content to train their models.
• You can delete your account yourself, in the console under Your profile.
• We do not sell your data and do not use it for advertising.

The web app and the console need an account. The phone apps and the Plugin do not.

• What we keep. Your email address, your name, and your sign-in details. You create an account with your email address and a password, or with Google.
• Google sign-in. If you sign in with Google, Google gives us your name, email address, profile picture, and Google account ID. We use them only to sign you in and to show your name and picture to the people in your company. We do not use them for advertising, and we share them only with the service providers named in this policy.
• Google One Tap. The console’s sign-in page loads Google’s sign-in script, which can offer to sign you in with a Google account your browser already uses. Google receives your IP address when the script loads, under Google’s privacy policy. Nothing signs you in until you choose an account.
• Account emails. We email you to confirm your address, to reset your password, and when someone invites you. Resend delivers them.
• Remembered device. After you sign in with a password, your browser keeps your email address, first name, and company name, so the next sign-in starts with them filled in. It never keeps your password. Choosing “Not you?” or signing out removes them.
• Staying signed in. A cookie or your browser’s storage keeps you signed in. We use no advertising or analytics cookies.
• Sign-in records. Our sign-in service logs sign-in events, including the IP address used, to protect your account.

• Your company controls its data. Reports, photos, projects, and other content made in a company’s projects belong to that company. Its administrators decide who in the company can see what, and we process that data for the company. Questions about how your company uses it should go to your company first.
• What your company sees about you. Your name, email address, role, the projects you are on, and the reports you prepare and sign. If you sign in with Google, the people in your company can see your Google profile picture.
• Invitations. When an administrator invites someone, we store the email address they enter and send the invitation.
• Report lists. An administrator can save the names and email addresses of people who receive a project’s reports, such as an owner’s representative. We store them for the company and use them only to send that project’s reports.
• Leaving a company. If you leave or are removed, your access ends, and the reports you made stay with the company.
• Company records. We keep a log of actions in the company, such as who invited whom and who signed a report, so the company has a record of its work.

• Drafts. Your draft is saved to our servers as you work. The web app also keeps a copy of your drafts, photos, and signing steps in your browser, so no work is lost if your connection drops. That copy stays in the browser after you sign out. On a shared computer, clear this site’s data in your browser’s settings when you are done.
• Photos. Photos you add are stored exactly as you add them, including details the file carries, such as when and where it was taken. If a photo records where it was taken, the web app shows that location with the photo and keeps it in the report.
• Signing. When you sign, the report records the name you type, the time, and, if you allow it, your browser’s location. If you do not allow it, you can still sign, and the report records why it has no location. The signed PDF prints the location. The report names the device only as a web browser, not which browser or computer you used.
• Signed reports do not change. A correction is a new version, and the earlier version is kept.
• Weather. If an administrator sets a project’s site, the web app and the console can fill in the day’s weather. Our server sends the site’s coordinates to the National Weather Service and gets back readings from the nearest airport weather station. It sends no name or account information.
• Sending from your own email. The web app can download the signed PDF and open your email app with the message filled in. What you send, and to whom, is up to you.
• Sending from Daily Report. If your company turns this on, our server emails the signed PDF through Resend to the people on the project’s report list, one email each, with replies going to the person who signed. We record whether each email was sent, delivered, delayed, or bounced. Our report emails carry no tracking pixel, and we do not track whether anyone opens them. The person who signed also gets a copy unless they turn that off in Your profile.

Company plans are paid by card through Stripe. You enter your card on Stripe’s payment page, and we never receive or store your card number. We give Stripe your company’s ID and the email address of the administrator who buys the plan. Stripe tells us whether the plan is paid, how many seats it has, and when it renews or ends. Stripe handles payment information under its own privacy policy.

Everything you create in the app is stored on your phone and is not collected by us: your projects, reports and their fields, voice recordings, photos, signatures, the GPS location stamped into a report, generated PDFs, and your settings. The report’s integrity record (time, GPS location, signature, preserved recording, transcript, app version, device model) is written into the report on your device and is not sent to us.

Device backups are controlled by you and your phone’s maker. On Android, the app opts out of Android’s automatic cloud backup. On iPhone, app data can be included in an iCloud or computer backup you make, under Apple’s terms. Either way, we never receive it.

The app uses AI to turn your spoken or typed words into a structured report. What leaves your device depends on your phone and your settings. Nothing below is sent to our server when Cloud AI is off, though Android’s own speech recognition may use Google’s or your phone maker’s servers, as described under On-device mode below. If you record without signal, nothing is sent then. With Cloud AI on, it can be sent later, once you have a connection: on Android, a recording made offline waits on the phone and is sent to be turned into text when you reopen the report or tap Retry.

• iPhone (Cloud AI on, online). Speech-to-text runs on the phone and your audio never leaves it. The app sends only your report text (the transcript), the date, and the app’s standard report template over HTTPS to our processing server (a Cloudflare Worker), which forwards it to Google Gemini. iPhone requests are limited to Google Gemini; if Gemini is unavailable, the request is not passed to any other provider. Never sent from iPhone: audio, GPS location, signature, photos, device identifier, or account information (there is no account).
• Android (Cloud AI on, online). To turn your voice into text, the app sends your voice recording over an encrypted connection to our processing server, which forwards it to Groq for transcription. The resulting text, the date, and the standard report template are then sent to Google Gemini to be organized into a report. If Gemini is unavailable, the same text may be sent to Groq to be organized instead. Never sent from Android: GPS location, signature, photos, device identifier, or account information.

Your report text can contain names, companies, or other details you spoke or typed. It is sent only to build your report and is returned to your device. Our App Store privacy label reflects this: the report text sent for cloud processing is declared as Other Data, used for App Functionality, not linked to your identity, and not used for tracking. On Android, when Cloud AI is on and you are online, your voice recordings and report text are sent to our processing server and the AI providers named below, only to transcribe and organize your report; they are not linked to your identity. With Cloud AI off, the app sends neither to our server. Recordings made offline with Cloud AI on are sent later, as described above.

These are the only third parties that receive your information from Daily Report. Each one gets only what it needs to do its job for us.

• Cloudflare runs our processing server. It relays each request to the AI provider and returns the result. It does not store request content. It keeps operational logs (time, route, response status, which provider answered, and error messages) for troubleshooting, for up to 7 days. An error message can include a short excerpt of a request or of the AI provider’s reply. It uses your IP address to limit request rates and prevent abuse. The AI providers’ keys live only on this server, never in the app.
• Google (Gemini API, paid tier) organizes your report text into a report, on both platforms.
• Groq transcribes voice recordings on Android, and is the backup for organizing report text on Android when Gemini is unavailable.
• OpenAI operates ChatGPT and Codex, which host the Plugin.
• Vercel hosts this website, the web app, and the console, including the Plugin’s support page, and passes check-page requests to our Cloudflare server.
• Supabase hosts the database, file storage, and sign-in behind the web app and the console, in the United States. It stores your account and your company’s projects, reports, photos, and PDFs, and runs the server functions that send email, look up weather, and handle billing.
• Stripe processes payments for company plans.
• Resend sends our email: account emails, invitations, and signed reports when a company turns on report email. It keeps each email and its delivery records for 30 days.
• Google provides Google sign-in, if you use it, and serves the typeface the console uses.
• The National Weather Service, part of NOAA, provides weather for a project’s site. Our server sends it the site’s coordinates and nothing about you.

Retention and training: we use Google’s paid Gemini API, whose terms state that Google does not use API prompts or responses to train or improve its models. Google may log prompts and responses for a limited period, which its terms do not define, to detect abuse and for any legally required disclosures. Groq does not store our requests or its replies: zero data retention is on for our account, except where the law requires otherwise. Neither uses your content for training or advertising. The web app and the console send nothing to any AI provider. There is no other AI provider, data broker, or advertising network involved in Daily Report.

The Plugin lets you draft a daily report from inside ChatGPT or Codex. ChatGPT and Codex are operated by OpenAI. What you type into ChatGPT or Codex, and how OpenAI stores and uses it, is governed by OpenAI’s privacy policy, not this one. This section covers only what the Plugin sends to us and what we do with it. No account is needed for anything the Plugin does today.

The Plugin runs no AI of ours. ChatGPT or Codex turns your notes into report fields; our server checks them against your notes and builds the report and PDF. The Plugin sends nothing to any AI provider.

• Preparing a report. The notes you give it are not stored. An in-progress preview, including any photos you add to today’s report with their captions, is kept encrypted for up to 24 hours from its first notes so you can keep adding to it and export it as a PDF, then deleted. Adding more notes does not extend the 24 hours. Deletion runs within about 10 minutes after the window closes, and always within 2 days.
• Getting a PDF. The download link works for 15 minutes. The file cannot be downloaded after 20 minutes, is deleted within about 30 minutes, and is always deleted within 2 days.
• Photos from the report card. Photos go directly from your device to our servers, not through ChatGPT. Before upload, your device resizes each photo, which also removes location and other hidden data the file may carry. With each photo we keep the file’s name, a fingerprint of the file used to skip duplicates, any caption you type, and the time we received the upload. The PDF prints each photo with its caption and upload time. We never read, store, or print when or where a photo was taken, and our server strips any location or other hidden data from the image file again before storing it, in case a device sends it anyway. Photos, captions, and upload times are kept encrypted with the preview for up to 24 hours. Our logs never record photos, captions, or their times.
• Social Security numbers. If you type a Social Security number into the Plugin, in the form 123-45-6789 or 123 45 6789 or after a label such as SSN, our server replaces it with “[removed]” before we store it, show it on the report card, or print it. ChatGPT or Codex still has what you typed in the conversation.
• Signing. You can sign a report from the card by typing your name and, if you choose, your role, and agreeing to sign electronically. We print them on the PDF with the signing time and a fingerprint of the report, and the PDF states “Identity not verified,” because the Plugin has no sign-in and no device location, so it cannot confirm who you are. We keep the signed report and its PDF encrypted with the preview for the same 24 hours, and ChatGPT sees your name, role, the time, and the fingerprint. After that, we keep only two fingerprints (one of the report and one of the PDF file) and the signing time, with no names and no report content. Anyone who holds a Plugin-signed PDF can check at constructioncopilot.com/check that it is the unaltered signed original. Entering only the printed fingerprint confirms that a report with that fingerprint was signed and when, not that a given copy is unaltered.

What the Plugin cannot do: it cannot delete a report. It has no sign-in, so it cannot save a draft anywhere but its own preview, or show you a report made elsewhere.

Rate limiting. A keyed hash of your ChatGPT user identifier, when ChatGPT provides one, or of your network address, is kept for up to 2 days for rate limiting.

Logs. Our hosting provider’s automatic request logs are turned off for this service. Our own operational logs record only the tool used, the outcome, timing, and whether the request came from ChatGPT’s network. They never record your notes, the report, your network address, your identifiers, or download links.

Location. The Plugin does not collect your device location. It reads only a time zone name, from ChatGPT’s hint or your browser, to print local times, and never logs it. It does not keep or log anything else from that hint, such as a city or region. A preview, and a preview PDF, contain only locations stated in your notes, such as a site address you dictate.

Unsigned drafts. Until you sign it, a Plugin draft or its PDF is not a signed daily report. It is prepared from text supplied through a third-party assistant.

Support link. The card’s “Problem with this card?” link opens constructioncopilot.com/support with a short, non-secret report reference and the card’s version, so we can find your report if you write in. ChatGPT may add its own redirect address to a link before opening it, which can carry the address of your ChatGPT conversation. If it does, that address can appear in our hosting provider’s standard web request logs for this website; we do not use it to identify you or look up your conversation.

What the Plugin returns to ChatGPT or Codex: report content you ask for, such as work performed, crews, and notes. It does not return payment information or account credentials, because the Plugin has neither. It does not return the precise device location recorded at signing, because the Plugin never collects one. Once report content is shown in ChatGPT or Codex, OpenAI’s policy governs that copy.

Purchases. The Plugin does not sell anything or take payment.

• iPhone. You can switch off Cloud AI in Settings and run the AI entirely on your phone (On-device mode, on iPhone 15 Pro or newer with Apple Intelligence). In On-device mode none of your report content leaves your device. It also runs automatically when you are offline on a supported iPhone. On-device AI is less accurate, so review your report before signing.
• Android. With Cloud AI off or no connection, your voice is transcribed by Android’s built-in speech recognition. On Android 12 and later the app uses on-device recognition when your phone offers it. On other phones, Android’s speech service may process audio under Google’s or your phone maker’s policies, which we do not control.

You can always build, edit, sign, and export reports by hand, online or offline.

In the phone apps:

• Microphone and speech recognition: to record your spoken report and transcribe it as described above. Once you start a recording it keeps going if your screen locks or you switch apps, with your phone’s recording indicator showing, until you stop it or 60 minutes pass. The app does not record at any other time.
• Notifications (Android): to show the notification Android requires while a recording is running.
• Camera and photos: to attach jobsite photos to a report, stored on your device.
• Location: to stamp a signed report with where it was signed. The location is stored in the report on your device and is not sent to us.

Every permission is optional. You can decline any of them and still use the app; the related feature will not be available.

In the web app and the console, your browser asks before it shares your location. The web app asks when you sign a report. The console asks only if an administrator chooses to use their own location as a project’s site.

The app checks for announcements, such as news about an update, by downloading a small file from our website (daily.constructioncopilot.com) when you open the app, at most every six hours, or when you tap the bell. The request carries only the app version. It includes no account, no device identifier, and none of your report data. Our hosting provider (Vercel) receives your IP address in order to deliver the file and may keep standard request logs briefly under its own policy; we do not use them to identify or track you. Announcements are signed by us, and the app shows only messages it can verify came from us.

When something goes wrong, the app shows a short error code (for example, DR-210) and keeps a list of recent error codes and times in Settings so you can tell us what happened. The list stays on your device and is never sent to us. On Android it can include a few words the transcription service returned for a silent stretch of a recording, which the app left out of your report.

On iPhone, the app may occasionally ask you to rate it, using Apple’s standard rating prompt. Apple handles your rating under its own policy; the app does not send us anything.

When you sign a report in a phone app, the app creates a PDF and opens your device’s share sheet so you can send it however you like. What you send, and to whom, is up to you. We are not involved in that transfer and are not responsible for what happens to a report after you send it.

Phone apps. Your report data lives on your device, and we keep no copy of your reports on any server. Deleting the app deletes everything in it, and we cannot recover it. You are responsible for backups, so export any report you need to keep before deleting the app or replacing your phone. With Cloud AI on, your content passes through our processing server to be processed. It is not stored there, but our error logs and the AI providers may keep parts of it for the periods described above. Those copies are not tied to you, so we cannot find or delete one person’s request; they expire on those schedules. Step-by-step instructions are on our Delete your data page.

• Your account. Kept while your account is open. You can delete it yourself: in the console, open Your profile and choose Delete account. That deletes your sign-in, removes your email address, and replaces your name with “Deleted user” in each company you were in. Any seat you hold ends. Reports you signed stay with each company under the name you signed with, and drafts, photos, and recordings you made for a company stay with that company. If you are a company’s only administrator and others are still in it, make someone else an administrator first. If no one else is in your company, deleting your account closes it, and the company’s data then follows the rule below.
• Company data. While a company pays, we keep all of its data. After a company cancels, it has 90 days of read-only access, with a one-click export of every report PDF, photo, and recording. Then we delete the company’s data and keep a record that we did. We keep the company’s activity log as evidence, with names and email addresses removed. A legal hold pauses deletion.
• Company exports. An export file is deleted 30 days after it is made, or when the 90 days end, if that is sooner.
• Signed reports. Kept as project records for as long as the company keeps its account. We do not delete a signed report because a draft changed, a person left, or an account was deleted.
• Deleted photos. A photo deleted from a project leaves it at once. A photo that was shared with the project team can be restored for 30 days. A photo used in a report stays with that report. Deleted photo files can stay in our storage until our cleanup removes them.
• Report email. Delivery results are kept with the company’s reports. Resend keeps each email and its delivery records for 30 days.
• Backups. Deleted data can stay in our encrypted backups until they expire, for up to 12 months.
• Plugin signed report and its PDF. Encrypted with the preview for up to 24 hours from its first notes, then deleted, always within 2 days.
• Plugin signature fingerprints. Two fingerprints and the signing time for each signed report, with no names or report content, kept with no end date so the check page keeps working.

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we do not use personal information for targeted advertising or profiling. You will not be treated differently for exercising any privacy right.

You can change your name in Your profile and delete your account there. For anything else we hold about you (for example, an email you sent us), we extend access, correction, and deletion rights to everyone, wherever you live. If your request is about a company’s reports, we will pass it to that company, because it controls them, and we will not delete a signed report that a company keeps as a record. Email contact@constructioncopilot.com with the subject line “Privacy Request” and we will respond within the time required by law. We may need to verify your identity first.

Daily Report is a professional construction documentation tool for business use. It is not designed to collect health information, and we do not collect, sell, or share consumer health data. If you dictate or type health-related information into a report (for example, describing a jobsite injury), it is part of your report. In the phone apps it stays on your device, except that, with Cloud AI on, its text, and on Android your recording, passes through our server to the AI providers as described above; we do not store it, but our error logs and the providers may keep parts of it for the periods stated above. In the web app and the console it is stored with your company’s reports. Record that an injury happened, not medical details. We do not create or store any biometric identifier or voiceprint from your voice. Washington residents with questions about the My Health My Data Act can contact us at contact@constructioncopilot.com.

Daily Report is a professional tool for users 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at contact@constructioncopilot.com.

Usage analytics and an AI assistant for the web app are built but turned off. Before either one is turned on, we will update this policy to say what it collects and who receives it.

We operate in the United States. We store your account and your company’s data in the United States, and requests are processed in the United States and where our service providers operate. Daily Report is intended for users in the United States. Data protection laws here may differ from those in your country.

We encrypt data in transit, and our database provider encrypts the data it stores. Every request for company data is checked against the person’s current membership and role. Provider keys stay on our servers and are never in the apps. No system is perfectly secure, and we cannot guarantee security.

We will post any update here with a new version number and effective date. For material changes we will give notice in the app or on this site before they take effect. Earlier versions are listed below so you can see what changed.

• Version 8 (this version), effective November 2, 2026. Adds the Daily Report web app and console: accounts, Google sign-in, company accounts, stored reports and photos, signing in a browser, weather from the National Weather Service, report email through Resend, and payments through Stripe. Names Supabase, Stripe, and Resend. Adds how long we keep company data and how to delete your account. Nothing changes for the phone apps or the Plugin.
• Version 7, effective September 29, 2026. Added a section on the “Daily Report by Construction Copilot” plugin for ChatGPT and Codex.
• Version 6, effective September 27, 2026. Zero data retention is now on for our Groq account, so Groq does not store our requests or its replies, except where the law requires otherwise. Version 5 said Groq may log requests for up to 30 days.
• Version 5, effective September 27, 2026. Our server’s error logs can hold a short excerpt of a request or reply for up to 7 days; earlier versions said they hold no content. Content passes through our server to be processed; earlier versions said it does not reach our servers. With Cloud AI off, nothing goes to our server, but Android’s own speech recognition may use outside servers. Google’s and Groq’s retention now includes their legal exceptions. The Android error history can include a few transcribed words. The health data section now covers Android recordings. The web app note names which features require a sign-in. No new data is collected.
• Version 4, effective September 27, 2026. Our server’s operational logs are kept for up to 7 days, not 30. Recordings made offline on Android with Cloud AI on are sent later, when you reopen the report or tap Retry; earlier versions said nothing is sent when you are offline. The web app note now says what keeps it private. Added a link to how to delete your data. No new data is collected.
• Version 3, effective September 26, 2026. Removed the weather auto-fill section (no current version of the app fills in weather automatically). Location is now described only for stamping signed reports. Added that Groq is the backup for organizing report text on Android. Described our server’s operational logs and per-IP rate limiting more fully. Added the Android notification permission, Apple’s rating prompt, and device backups. Replaced the “Future features” section with the web app note above, which no longer says paid plans would be billed only through Apple or Google. No new data is collected.
• Removed in version 3. The statements that the app uses Apple WeatherKit and uses your location to look up weather. No current version of the app does either.
• Version 2, effective September 25, 2026. Added update announcements, recording that continues when the screen locks, and on-device error history (app version 1.2). Moved this policy from weighanchor.com to constructioncopilot.com; the old address forwards here.
• Version 1, effective July 2, 2026. First policy for Cloud AI (app version 1.1).

Weigh Anchor LLC, Snohomish, Washington. Questions about privacy or the app? Email contact@constructioncopilot.com. For privacy requests, include “Privacy Request” in the subject line.