Privacy Policy
Effective October 28, 2026
Who we are
Construct Hub Pro is operated by Univers Media Group, LLC dba HQ Labz. We provide field-documentation software to commercial construction businesses (the “Customer”). Field workers, foremen, and admins (“you”) use the app on behalf of their Customer's organization to record daily reports, incidents, and related operational records.
What we collect
- Account info: name, email, role, organization, profile photo (optional).
- Operational content: daily reports, incident reports, attached photos / videos / audio / documents you create or upload, signatures, equipment inspections, and ongoing log entries.
- Device info for notifications: push subscription tokens (Web Push, APNs on iOS, FCM on Android) so reminders and alerts can be delivered.
- Authentication metadata: session timestamps, last sign-in, the user agent of the device used.
- Recipient contact book (admins only): names, emails, and phone numbers your organization adds for distribution of report PDFs.
- Where the phone was, at two moments only: when you clock in or out, and when a report is started, the app asks iOS or Android for a location fix and stores the result on that record: a coordinate, its accuracy, and how far it was from the pin your office put on the job. It is used to say whether a shift began on site, and to fetch that site's weather. It is not continuous, there is no background tracking, and the app never follows you between those moments. You can refuse. If you decline the permission the clock still starts and the report still opens; the record simply says the location was not measured, which is different from saying you were somewhere else.
We do not track you continuously or in the background, and we do not collect browsing history outside the app, advertising identifiers, biometric data, or financial account information.
How we use it
- Provide the service: store and present your reports, deliver scheduled reminders, and route submitted reports to the recipients your organization has configured.
- Account integrity: authenticate you, recover lost passwords, prevent abuse.
- Customer support: respond to questions you send to support@constructhubpro.app.
We do not use your content for advertising. We do not use your content to train third-party AI models.
Bob, the AI assistant. Construct Hub Pro uses an AI assistant, Bob, to turn the answers your crew gives into the sentences on a daily report and to do what a person asks of him in the app. To do that, what a person says or types to Bob and the answers on their reports (including names, times, quantities and the notes people gave) are sent to OpenAI's API. When a company turns on live voice calls, the caller's voice is sent too. OpenAI does not use this content to train its models. The assistant keeps short notes about each job inside the app, with your organization's records, so it does not ask the same thing twice. It arranges and phrases what your crew recorded; it is not permitted to add a fact your crew did not give, and five automated checks run against every report before it is treated as ready.
Admin tools that rewrite form wording use the same API in the same way.
Who we share it with
- Your organization (the Customer): all content you submit is visible to authorized members of your organization.
- Recipients chosen by your organization: when an admin creates a distribution rule (e.g., “email the daily report PDF to the customer's project manager”), the report is delivered to those recipients via the channels they've configured.
- Service providers we use to operate the app:
- Supabase (database + auth + storage)
- Vercel (web hosting)
- Resend (transactional email delivery)
- Twilio (SMS / WhatsApp delivery)
- Apple APNs / Google FCM (mobile push delivery)
- OpenAI (Bob, the AI assistant: understanding what people say or type to him, writing the daily report from your crew's answers, his spoken voice, and the admin wording tools). Report content, including the names of people on site, is sent with each request; OpenAI does not use it to train its models.
- Anthropic (the older wording tools in the web dashboard, when an administrator uses them). The text being reworded is sent with each request; it is not used to train models.
- Legal: only when required by law or to protect rights and safety.
We do not sell or rent your data. We do not share data with advertisers.
Tracking & analytics
We do not track you across other apps and websites. We do not use Apple's App Tracking Transparency identifier (IDFA). The app does not contain advertising SDKs.
How we protect it
- All traffic between the app and our servers uses HTTPS / TLS.
- Database access is restricted by row-level security tied to your organization.
- API keys for paid services (OpenAI, Anthropic, Resend, Twilio) live only on the server and never ship in the app bundle.
- Storage objects (photos, signatures, PDFs) are accessed via short-lived signed URLs.
How long we keep it
We retain your account and content for as long as your organization's subscription is active. When you delete your account (Account → Privacy and security → Delete your account, or at /delete-account in any browser), your profile row and every draft report, device token, notification preference and job assignment are deleted immediately — not anonymized, not deferred.
Reports you have already signed and submitted remain part of your organization's record, because a signed daily report is a record of what happened on a site and the business is required to keep it. Your name stays on those reports — a signature nobody can attribute is worth nothing — and photos already attached to a submitted report stay attached to it. Nothing else about you is retained anywhere.
If your organization terminates its subscription, all organizational data is deleted within 30 days unless legal hold applies.
Your rights
- Access & correction: view and edit your profile information at any time inside the app (Account → Edit Profile).
- Deletion: delete your account from inside the app (Account → Privacy and security → Delete your account) or from any browser at /delete-account. Apple guideline 5.1.1(v) and Google Play both require this; both paths run the same deletion.
- Export: reports and PDFs you've submitted can be downloaded from the report review screen at any time.
- EU / UK / California users: you have additional rights under GDPR / UK GDPR / CCPA — write to support@constructhubpro.app and we'll honor them within 30 days.
Children
Construct Hub Pro is a B2B tool and is not directed at children under 16. We do not knowingly collect data from anyone under 16.
Changes to this policy
If we make material changes, we'll update the effective date above and notify the email on your account. Continued use of Construct Hub Pro after a change means you accept the updated policy.
Contact us
Privacy questions, deletion requests, or anything else: support@constructhubpro.app.
Univers Media Group, LLC dba HQ Labz