Roughin — Privacy Policy

Workbench Technologies Inc. is responsible for the personal information collected through the Service. Our Privacy Officer answers questions and handles access requests, deletion requests, and complaints about privacy. You can reach the Privacy Officer at privacy@roughinapp.com.

Account information. Your name, email address, login credentials, trade, country, company name, and role (for example admin, manager, or crew).

Team member details. On a team account, administrators can add details about each member: a display name, phone number, position, employee ID, and an emergency contact (the name and phone number of another person). Administrators can also keep a private note about a member. Member details are visible to the team's administrators and managers; private notes are visible only to administrators.

Your Content. Blueprints, plan sets, documents, extracted text, photos, notes, markups, saved calculations, and chat messages that you upload or create in the Service.

AI interactions. The questions you ask the AI features, the responses generated, and your AI chat history, along with the portions of Your Content needed to answer your questions.

Team and time-tracking information. If you use Roughin through a team account, we process crew assignments, clock-in and clock-out times, and the regular and overtime hours calculated from them using the rules your company sets. These records contain the details listed in Section 8.4. We do not record wages, pay rates, or other payroll information, and we do not record the location where you clocked in or out. After an account is locked or deleted, its hours records are kept until three years from the date each shift was worked (see Section 8.4).

Project address. A project can have an optional location field that a user types in themselves. It is not verified, and it is visible to everyone with access to that project. Do not enter an address you do not want those people to see, such as a home address.

Photos. Photos you upload are resized and converted to JPEG on your device before upload. The app reads the date a photo was taken. We do not read or store other information embedded in a photo, including its location data.

Voice input and device permissions. The app asks for access to your microphone and speech recognition (for voice input), and to your camera and photos (to capture and attach images). You can turn these permissions off in your device settings. Voice input uses your phone's built-in speech recognition. Depending on your phone and its settings, your audio may be sent to Apple's or Google's speech service to be transcribed. The audio does not go to our servers, and we do not record or store it. Only the resulting text is sent to us and to our AI provider, and only when you send your question.

Purchase and subscription information. Subscriptions bought in the app are processed by Apple or Google, and managed through RevenueCat. Subscriptions billed on the web are processed by Stripe. We receive confirmation of your subscription status and do not receive or store full payment card numbers.

Usage and device information. Device type, operating system, app version, push notification token, your device's time zone, how you use features of the Service (including how often you use free-tier features and how you interact with upgrade screens), records of your acceptance of our Terms, and issues you report to us.

Network information. Your IP address, which is recorded with each sign-in session and appears in the request logs of our service providers.

Crash reports. The app sends crash and error reports to Sentry to help us fix problems. These reports contain error logs and device information, and Sentry may log your device's IP address with each report. We do not use performance tracing.

Communications. Messages you send to us, including support requests.

Location

We do not collect GPS or precise device location. The app does not request location permission. We process IP addresses for security, sign-in, and server logs, and users may enter a project address themselves.

We use personal information to:

• provide, operate, secure, and support the Service;
• process your uploads and respond to your AI requests;
• send push notifications, account messages, and service updates;
• manage subscriptions, enforce free-tier limits, and prevent fraud and abuse;
• diagnose problems and improve the Service;
• comply with legal obligations and enforce our Terms of Service.

Roughin's AI features are provided by Anthropic, PBC ("Anthropic"). To answer your questions, we send the relevant pages and extracted text of Your Content, together with your questions, to Anthropic, which returns a response.

We do not use Your Content to train AI models. Under the commercial terms that apply to our use of Anthropic's services, Anthropic does not train its models on the content we send to it. Anthropic generally deletes inputs and outputs from its systems within 30 days, although it may keep them longer where required to enforce its usage policies or comply with law.

Anthropic may process AI requests in the United States or in other countries (see Section 7).

AI output can be wrong. See Section 1 of our Terms of Service.

We do not sell personal information. We share it only as follows.

Service providers. Companies that help us run the Service and may process information only to provide their services to us:

• Supabase, which hosts our database, sign-in, and file storage.
• Anthropic, which processes AI requests as described in Section 4.
• Cloudflare, which delivers our website and provides bot protection.
• Expo and Google Firebase, together with Apple's and Google's push notification services, which deliver push notifications.
• RevenueCat, Apple, and Google, which manage and process in-app subscriptions, and whose speech services may transcribe your voice input, and Stripe, which processes web-billed payments.
• Resend, which sends our account and service emails.
• Sentry, which receives crash and error reports.
• Formspree, which receives account-deletion requests sent through the form on our website.
• Google Fonts, which supplies fonts that the app's plan viewer loads from Google, so Google receives your device's IP address.
• cdnjs, jsDelivr, and unpkg, public file servers from which the app's plan viewer loads its PDF reader, so they receive your device's IP address.

Your team. If you use a team account, administrators and managers in your organization can see information about crew in that organization, such as hours worked, project assignments, and content shared in team projects.

Other users you message. Messages you send in direct, group, or project chats are visible to the people in those conversations.

Legal and safety. We may disclose information where required by law or legal process, or to protect the rights, safety, and security of our users, the public, or Workbench.

Business transfers. If Workbench is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

If you allow notifications, we store a device token and send notifications through Expo, Firebase, and Apple's or Google's push services. You can turn notifications off at any time in your device settings or in the app.

Our database and stored files are hosted in the United States (Oregon). We use service providers located outside Canada to process personal information on our behalf. They are authorized to use it only to provide their services to us, for the purposes listed below. Your information may be accessible to courts, law enforcement, and other authorities in those countries under their laws.

You can get more information about our policies and practices for service providers outside Canada, and ask questions about how they collect, use, disclose, or store personal information on our behalf, by contacting our Privacy Officer at privacy@roughinapp.com.

How long we keep your information depends on what happens to your account.

8.1 Cancelling a paid subscription

If you cancel a paid subscription, your account moves to the free plan (or the lower plan you choose) when the current billing period ends. We do not delete anything. The features and limits of your new plan apply, so some of your content or features may be unavailable until you upgrade again. When you upgrade, you regain access under the limits of that plan.

8.2 Locked accounts

An account is locked if we suspend it, or if a team plan is cancelled or lapses. We keep all of a locked account's data for six months from the date it was locked. If the account is restored within those six months (by resubscribing, or for a suspended account, once the suspension is lifted), you regain access to everything saved on it.

After six months, we permanently delete the account's data, except hours records (see Section 8.4) and the items listed in Section 8.5.

A company can ask us to delete its organization's data sooner by emailing privacy@roughinapp.com from an administrator's account. We complete these requests within 30 days. Hours records are still kept as described in Section 8.4.

8.3 Deleting your account

You can delete your account in the app, or ask us to delete it through the form on our website or by emailing privacy@roughinapp.com. Deleting in the app is immediate. We handle requests sent through the website form or by email by hand and complete them within 30 days. Deletion is permanent. There is no six-month period and no undo.

When you delete your account, we delete:

• your login and profile;
• your personal projects and everything under them, including sheets, extracted text, markups, and AI results;
• all of your notes and markups, including ones you shared with your crew, and your saved calculations and AI chat history;
• your usage records, notifications, push devices, Terms acceptance records, and issue reports;
• your stored files, including PDFs, personal photos, and project preview pictures.

Some things work differently:

• Hours records are kept for three years from the date each shift was worked. See Section 8.4.
• Direct messages are deleted for both people in the conversation, so the other person also loses that conversation.
• Messages in group and project chats remain visible to the group. They still show the name you sent them under, but are no longer linked to your account.
• Team content stays with your company. Projects you created are handed to another administrator in your organization. PDFs and crew-wide photos in company projects stay with the company. Your personal photos on those projects are deleted, and so are all of your notes and markups on them, including ones you shared with your crew.
• A team's last administrator cannot delete their account while the team still has members. Another member must be made an administrator first.
• Subscriptions are not cancelled. Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel it in your store account.

8.4 Hours records

An hours record is kept for each shift worked on a team. It contains the clock-in and clock-out times; the project the shift was worked on; any note added to the shift; the person's name, email address, role, and employee ID (if the team entered one); and the history of changes and approvals to the shift (who made each change or approval, when, and any reason given). Regular and overtime hours are calculated from these times. Hours records do not include wages, pay rates, or other payroll information, which we do not collect. Timesheet exports are created when you download them; we do not store them.

Because employers may be required by law to keep records of hours worked, we keep each hours record for three years from the date the shift was worked, even after the rest of the account's data has been deleted. While an account is active, including after it moves to a lower plan, its hours records stay in the account. Once an account is locked or deleted, we keep its hours records only for this purpose, and we permanently delete each record three years after the date the shift was worked. A shift worked more than three years before the account was locked or deleted may be deleted soon after.

Once an account's other data has been deleted, its hours records are no longer available in the app. They are available only on request. A company's account owner may request a copy of their team's hours records, and a crew member may request a copy of their own, by emailing privacy@roughinapp.com at any time while the records are kept. For example, if you delete your account and later need your hours, email us and we will send you a copy of the records we still hold. We will verify your identity before releasing any records.

Keeping these records is a convenience, not a record-keeping service. Each employer remains responsible for its own legal record-keeping obligations (see our Terms of Service).

8.5 Other information we keep

• Free-tier usage record. To stop people from deleting and re-registering to reset free limits, we keep a usage record identified by a one-way hash of your email address. It does not contain your email address and is kept for 12 months.
• Deletion confirmation email. The email we send to confirm your deletion is kept in our outbound email queue until 30 days after it is sent.
• Anonymised analytics. Records of how upgrade screens were used are kept with the link to you removed.
• Backups. Our database is backed up daily, and backups are kept for up to 7 days. Information from a deleted account may remain in those backups until they expire. Backups do not contain stored files such as PDFs and photos, which are permanently deleted when removed. We make reasonable efforts to remove stored files when you delete them.
• Service providers. Our service providers keep their own records under their own policies and retention periods.
• Legal reasons. We may keep information longer where the law requires it or where needed to resolve disputes and enforce our agreements.

We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is completely secure, and we cannot guarantee absolute security. To report a security concern, contact security@roughinapp.com.

Under Alberta's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act, you may:

• request access to the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• withdraw your consent to our collection, use, or disclosure, subject to legal and contractual limits (withdrawing consent may mean we can no longer provide the Service);
• make a complaint about our handling of your information.

To exercise these rights, email privacy@roughinapp.com. We will respond within the time required by law. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

The Service is intended for adults who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@roughinapp.com and we will delete it.

We may update this Privacy Policy from time to time. If changes are material, we will notify you in the app or by email before they take effect. When we publish an updated version, the app will ask you to accept it before you continue. Continuing to use the Service after the effective date also means you accept the updated Policy.

Workbench Technologies Inc.

Privacy Officer (privacy questions and requests): privacy@roughinapp.com

Security concerns: security@roughinapp.com

General support: support@roughinapp.com