Privacy Policy

LAST UPDATED: AUGUST 6, 2026

BuildTraq ("we", "our", "the app") is operated by CNR Nexus Consulting Inc., a corporation registered in Saskatchewan, Canada. This policy explains what data we collect, why, and how we protect it.

DATA WE COLLECT

When you use BuildTraq, we collect and store:

• Account information: your email address, full name, and a hashed password. We never store your password in plain text.
• Project data: project names, locations, expense entries, cash receipts, contract details, and any notes or descriptions you enter. This is the core data you create to track your construction projects.
• Receipt photos: images you upload as evidence of expenses or cash transactions. These are stored in a private cloud storage bucket accessible only to authorized project members.
• Device tokens: if you enable push notifications, we store a device identifier to deliver notifications. This token is removed when you sign out.
• Usage metadata: timestamps of account creation, last sign-in, and data entry dates. We do not track your location, browsing activity, or contacts.

HOW WE USE YOUR DATA

• To provide the BuildTraq service: storing your project data, syncing it across devices, and sharing it with team members you invite.
• To authenticate your identity and protect your account.
• To send transactional emails: account verification, password resets, and (in the future) project activity notifications.
• To enforce subscription limits and manage your plan.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not serve advertisements.

DATA SHARING

Your project data is shared only with people you explicitly invite to a project (supervisors, approvers, viewers). No one outside your project team can see your data.

We use the following service providers to operate BuildTraq:

• Supabase (database and authentication, hosted in Canada)
• Resend (transactional email delivery)
• Expo / EAS (app builds and push notification delivery)
• RevenueCat (subscription management, when applicable)

These providers process data solely to deliver their services to us and are bound by their own privacy policies.

DATA STORAGE AND SECURITY

Your data is stored on servers in Canada (ca-central-1 region). All data is encrypted in transit (TLS) and at rest. Access to your project data is enforced at the database level through row-level security policies: even if our application code had a bug, the database itself prevents unauthorized access.

YOUR RIGHTS

You can:

• Access all your data through the app at any time.
• Correct your profile name and project data directly in the app.
• Delete your account by contacting us at privacy@buildtraq.app. We will delete your account and all associated data within 30 days. Project data you created in shared projects will be anonymized.
• Export your data in a standard format upon request.

CHILDREN'S PRIVACY

BuildTraq is not intended for use by anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

DATA RETENTION

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Aggregated, anonymized usage statistics may be retained indefinitely.

CHANGES TO THIS POLICY

We may update this policy as the app evolves. Material changes will be communicated through the app or by email. The "Last updated" date at the top reflects the most recent revision.

CONTACT

For privacy questions, data requests, or concerns:

CNR Nexus Consulting Inc.
Saskatoon, Saskatchewan, Canada
privacy@buildtraq.app