Bldit Privacy Policy

Bldit is an app for clients of construction and renovation companies that use Buildlr. In Bldit you follow your projects, read and approve quotes and change orders, see your invoices and message the company doing the work. This policy covers the Bldit app for iOS and Android and the web version at app.bldit.io.

Bldit is published by Buildlr Ltd, a private limited company registered in Cyprus (registration number HE 465133, VAT number CY60106289I), registered office Charilaou Xylophorou 13, Agios Athanasios, 4103 Limassol, Cyprus. Email: support@buildlr.com.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and, for users in the United Kingdom, the UK GDPR. Buildlr Ltd is supervised by the Cyprus Commissioner for Personal Data Protection.

Two parties are responsible for different parts of the data in Bldit.

Buildlr Ltd is the controller for your Bldit account: your login details, profile, sign-in sessions, consent records, notification settings and push registrations. One Bldit account can be connected to several contractors, and we run that account for you.

Your contractor, the company that invited you, is the controller for its project records. These are the projects, quotes, change orders, invoices, drawings and files it shares with you, and what you send it through Bldit: messages, attachments and your decisions. We store and process those records on the contractor's behalf under our Data Processing Agreement. A contractor sees only its own projects with you, never your activity with other contractors.

Questions about a contractor's records are best sent to that contractor. You can also write to us, and we will help the contractor answer.

Account details. Your email address and name, which your contractor enters when it invites you. You can change your first and last name in the app, add a profile photo and choose the app language. If you set a password, we store it only as a salted cryptographic hash. You can also sign in without a password, with a link we email to you.

Consent record. When you accept an invitation, we record that you accepted this policy, which version you accepted and when, together with the IP address and the browser or device information (user agent) of that request.

Sign-in and security data. For each sign-in we store the time, the sign-in method, your IP address and the user agent. You can see your sessions and end them under Settings > Profile. Our servers also log each request with its IP address and user agent, to protect the service and find errors.

What you send to your contractor. Your messages and the photos, videos and documents you attach to them. Your responses to quotes and change orders: approve or decline, the name you type to sign, your comment and any optional items you choose. Your choices on selections, and your approvals or notes on drawings. Bldit uploads photos unchanged, so if your camera saved the place a photo was taken, that location stays in the file.

Activity records. When you open or respond to a quote, change order or invoice, or respond to a selection or drawing, your contractor's records note the time and your IP address, and for most of these also the user agent. The records show what was sent, seen and agreed. Read receipts for messages and notifications are stored as well.

Notifications. If you turn on push notifications on a device, we store that device's push token and a label naming the platform, for example 'Bldit ios'. Your notification choices for each category (approvals, messages, quotes, invoices) are stored with your account. To deliver push notifications to the iOS and Android apps, Google Firebase Cloud Messaging creates an installation ID for the app and receives the app version and basic device information.

App updates. The iOS and Android apps check for content updates through our update provider Capawesome. Each check sends a random ID created when the app was installed, the app version, the operating system version and the platform, and like any internet request it reveals your IP address. The ID is not linked to your account.

Bldit does not access your location, contacts or microphone, and does not ask for your phone number or payment details. Invoices are shown in the app, but you pay them outside it. The app contains no advertising, no analytics or crash-reporting tools and no tracking across other apps or websites, and it does not use your device's advertising ID.

On iOS, Bldit asks for access to the camera and photo library only when you attach a photo to a message. On Android, you pick files with the system file picker and Bldit does not ask for camera access.

• Running your account and the app (sign-in, profile, syncing your projects, passing your messages and decisions to your contractor, and emails such as invitations, sign-in links and password resets) - contract (Art. 6(1)(b) GDPR).
• Security and preventing misuse (sign-in sessions, request logs, a temporary lock after repeated failed sign-ins, error diagnosis) - legitimate interest (Art. 6(1)(f)) in keeping accounts and project records safe.
• Keeping evidence of decisions (activity records and consent records) - legitimate interest: you, your contractor and we need to be able to show what was agreed, and to establish or defend legal claims.
• Push notifications - consent. You turn them on for each device and can turn them off under Settings > Preferences or in your phone's settings.
• Email notifications - legitimate interest in telling you about updates to your projects. You can turn off each category under Settings > Preferences.
• App updates - legitimate interest in keeping the app working and secure.

We do not use your data for advertising or profiling, and we make no automated decisions about you that have legal or similarly significant effects.

So that Bldit works offline, the app keeps a copy of your projects, messages, quotes and invoices on your device. That copy is encrypted with a key our server issues for your account. When you delete your account we delete the key, and any copy left on a device can no longer be read. Your sign-in session stays in the app's storage until you sign out.

Floor plans you sketch in the app's floor plan tool stay on your device and are never uploaded. Files you save or share from the app go to a temporary folder and are removed after 24 hours or when you sign out.

The app sets no advertising or analytics cookies.

Your contractors. Each contractor you are connected to receives what you send it and the activity records for its own projects, together with the name and email address it holds for you.

Our service providers. We use these providers to run Bldit, and they process data only on our instructions:

• Hetzner Online GmbH, Germany - servers, databases, file storage and backups. Your account and the project records in Bldit are stored in Germany.
• Google Firebase Cloud Messaging and the Apple Push Notification service - deliver push notifications to the iOS and Android apps. They receive the device's push token and the notification itself: its title and up to the first 150 characters of a message. For the web version, your browser's push service delivers the notification in encrypted form.
• Google Firebase Hosting - serves the web version at app.bldit.io.
• CloudMailin - sends our emails to you: invitations, sign-in links, password resets and notifications.
• Capawesome - delivers app updates (see section 3).
• Sentry, EU data center - error monitoring on our servers, configured to minimize personal data.

Bldit has no AI features, and nothing you send in Bldit is used to train AI models. Your contractor may use the AI features in Buildlr on its own business records; the Buildlr Privacy Policy describes that processing.

Some of these providers, or companies in their groups, are outside the EU/EEA, for example in the United States or the United Kingdom. Those transfers are protected by an adequacy decision (including the EU-US Data Privacy Framework where the provider is certified) or by EU Standard Contractual Clauses.

Disclosure required by law. We disclose personal data where required by law, court order or a binding request from a competent authority. Where legally permitted, we inform you before disclosing and disclose no more than required.

Business transfers. If Buildlr is involved in a merger, acquisition or transfer of assets, personal data may be transferred as part of that transaction under confidentiality safeguards. We will inform you before your data becomes subject to a different privacy policy.

We never sell personal data.

• Your account - until you delete it (see section 9).
• Invitations - the link expires after 7 days. Expired or withdrawn invitations are deleted on request.
• Sign-in sessions, with their IP address and user agent - deleted on request. When you delete your account, we remove the IP addresses and device details straight away.
• Server request logs - 35 days.
• Consent records - kept as evidence of your consent and deleted on request once they are no longer needed for that.
• Push registrations - removed when you turn notifications off, sign out on that device or delete your account.
• Backups - overwritten on a rolling 30-day cycle.

Your contractor decides how long it keeps its project records, including your messages and decisions, and the law may require it to keep some of them, for example for accounting.

You can delete your Bldit account in the app. Open Settings > Profile, select Delete account and confirm with your password. If you have only signed in with emailed links, set a password on the same page first. The steps are the same in the web version at app.bldit.io.

If you can no longer sign in, email support@buildlr.com from the address registered on your account. We verify every request and complete the deletion within 30 days.

Deletion takes effect immediately and cannot be undone. We delete your login and password, name, email address, profile photo, language and notification settings, your push registrations and the IP addresses and device details stored with your sign-in sessions, and we end all your contractor connections. Copies in backups expire within 30 days.

Your contractors keep their project records, including the messages, files and decisions you sent them, under their own legal obligations (Article 17(3)(b) GDPR). Contact them directly about those records. We keep your consent records and a minimal record of the deletion itself.

To stop seeing one contractor's projects without deleting your account, select Leave next to that contractor under Settings > Profile.

Subject to the conditions in the GDPR you have the right to: access your data (Art. 15), rectify it (Art. 16), have it erased (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interest (Art. 21), and withdraw any consent at any time with future effect.

To exercise these rights, contact support@buildlr.com. We respond within one week. You can delete your account yourself at any time (see section 9).

For your contractor's project records, contact the contractor (see section 2). We will help them answer your request.

You may lodge a complaint with a supervisory authority. The authority supervising Buildlr is the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy), and you can always complain to the authority of your own country instead, e.g. IMY in Sweden, the ICO in the UK, or your local authority in Germany, Austria, Denmark, Finland or Norway.

We protect personal data with technical and organizational measures appropriate to the risk, including: TLS encryption in transit; passwords stored with a modern adaptive hash; hashed, short-lived access tokens; a temporary lock after repeated failed sign-ins; a password check before you approve a quote; strict separation between contractors enforced on our servers; and encryption of the offline copy on your device.

No system is perfectly secure. If we become aware of a personal data breach affecting you, we will notify the competent authority and affected parties as required by Articles 33-34 GDPR.

Bldit is meant for adult clients of construction companies and is not directed at children. We do not knowingly process children's data. If you believe a child has a Bldit account, contact us and we will delete it.

We may update this policy. Material changes will be announced in the app or by email, with reasonable notice. The current version and its date are always on this page.

Buildlr Ltd (HE 465133)
Charilaou Xylophorou 13, Agios Athanasios, 4103 Limassol, Cyprus
Email: support@buildlr.com