Privacy Policy

Last updated: June 14, 2026

The short version: ConstructProof is built privacy-first. Your inspection data — projects, audits, photos, signatures — never leaves your device. We only store your email, your subscription tier, and contact form submissions on our servers. We don't sell data. We don't run trackers. We don't share with anyone except the small list of service providers we name below.

Who We Are

ConstructProof is operated by Massive Technologies Inc. References in this policy to "we," "us," or "our" mean Massive Technologies Inc. References to "the app," "ConstructProof," or "the service" mean the ConstructProof web application at constructproof.app and any related deliverables.

If you have any questions about this policy or your data, reach out through the contact form on our homepage.

What Data We Collect, and Where It Lives

Data that lives only on your device

The following data is stored exclusively in your browser's local database (IndexedDB) on the device you use ConstructProof on. It never leaves your device unless you explicitly export it as a JSON backup:

Inspection content: projects, audits, snag/punch list items, handover records, custom checklists
Photos: all images you capture or upload, including annotations, captions, and stored originals
Signatures: your drawn inspector signature, client signatures captured at handover
Settings: your company name, address, uploaded company logo, contact details
Inspector profile: name, title, certification or licence number
GPS coordinates and weather notes attached to individual audits

We have no way to access, view, recover, or restore this data from our servers — because none of it is on our servers. If you clear your browser data or switch devices without exporting a backup, this data is lost.

Data we do store on our servers

To deliver authentication and subscriptions, we store these limited items on infrastructure operated by Supabase:

Your email address — used to sign you in
An encrypted password hash — we never see your actual password
Your subscription tier (free / pro / business) and the date your current paid period ends
Stripe customer and subscription IDs if you become a paying customer, so we can match payments to accounts
Account creation date and last activity timestamp

If you submit our contact form, we additionally store your name, email, optional company name, inquiry type, and message — solely so we can reply to you.

How We Use Your Data

To deliver the service: authentication, subscription management, applying tier limits
To respond to your support and sales inquiries
To send you essential service emails (email confirmation, password reset, billing receipts)
To improve the product, only by analyzing trends and aggregate behavior — never by reading individual users' inspection data, because we don't have it

We will never sell your data, use it for advertising, share it with brokers, or use it to train third-party AI models.

Service Providers We Use

To run ConstructProof we use a small number of trusted infrastructure providers, each governed by their own privacy policy:

Supabase — authentication and the subscription tier database. Hosted on AWS in the United States.
Stripe — payment processing. Stripe handles your card data directly; we never see or store card numbers, only references and customer IDs.
Hostinger — web hosting for constructproof.app.
Cloudflare and CDN partners — content delivery and SSL.

Cookies and Tracking

ConstructProof does not use third-party advertising cookies, marketing pixels, cross-site trackers, or analytics services that profile individual users. We use only:

Essential authentication cookies set by Supabase to keep you signed in
Local browser storage (IndexedDB and localStorage) to hold your inspection data and tier cache on your device

Your Rights

Because most of your data lives on your own device, you already have full control of it — you can view it, edit it, export it, or delete it at any time using the app's Backup and Restore tools, or by clearing your browser data.

For the data we do hold on our servers (your email and subscription record), you have the right to:

Access — request a copy of what we have
Correct — fix any errors
Delete — close your account and remove your data from our servers
Export — receive a copy in a portable format
Withdraw consent at any time

To exercise any of these rights, contact us via the contact form and we'll respond within 30 days.

Children

ConstructProof is intended for use by professionals in the construction industry. We do not knowingly collect data from anyone under 16.

Security

All data in transit between your browser and our servers is encrypted via HTTPS. Supabase encrypts data at rest. However, no internet-based service is completely immune to risk, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential and for protecting any backup files you export from the app.

International Users

Our infrastructure is based in the United States. If you use ConstructProof from outside the US, your data will be transferred to and processed in the US. By using the service you consent to that transfer.

Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date at the top and, where appropriate, notify users via email or an in-app message. Continued use of the service after a change indicates acceptance of the updated policy.

Contact

For any privacy questions, requests, or concerns, please use the contact form on our homepage and mark your inquiry type as "Something else" with "Privacy:" at the start of your message, or email us directly at contact.