Privacy Policy

Introduction

ServiceDispatch ("the App") is developed and maintained by Cody Somerville ("Developer," "we," "us," or "our"). This Privacy Policy explains how information is handled when you use ServiceDispatch.

Our Privacy-First Architecture

How It Works

When you set up ServiceDispatch, the onboarding wizard guides you through creating your own Supabase database instance. All of your business data—including customer information, job details, property records, and financial data—is stored exclusively in your own Supabase database, which you control.

Key Points:

• You own and control your database
• We have no access to your Supabase instance
• We cannot view, access, or retrieve your business data
• You manage your own database credentials and access controls
• You are the data controller; we merely provide the application interface

Information Storage and Handling

1. Data You Control (In Your Supabase Database)

The following data is stored in your own Supabase instance:

Customer Information:

• Names, phone numbers, email addresses
• Physical addresses (street, city, state, zip code)
• Customer type (residential, commercial, etc.)
• Notes and service history

Property/Equipment Records:

• Make, model, year of spa/hot tub equipment
• Equipment nicknames and identifiers
• Service locations

Job Records:

• Scheduled service dates and times
• Job descriptions and internal notes
• Labor costs, material costs, and pricing
• Payment information (amounts, methods, status)
• Transport addresses (pickup/dropoff locations)

Technician Information:

• Names and contact information
• Labor rates and schedules

Financial Records:

• Invoice details
• Payment history
• Commission calculations

2. Data Stored on Your Device

Local Cache (Temporary):

• For offline functionality, the App temporarily caches customer and job information on your device
• This cache is refreshed daily to ensure you have access to your schedule even without internet connectivity
• Cached data is stored locally on your iOS device and is protected by iOS system security

Secure Credential Storage:

• Your Supabase database URL and API key are stored securely in the iOS Keychain
• These credentials are encrypted by iOS and never transmitted to us
• Onboarding completion status is stored in UserDefaults

3. Data Shared with Third-Party Services

Google Calendar (Optional):

• If you enable Google Calendar integration, job scheduling information is synced to your Google Calendar
• This includes: job summaries, customer names, property details, addresses, financial summaries, and job notes
• Data is transmitted directly from the App to Google's servers using OAuth 2.0 authentication
• We do not intercept or store this data
• You control this integration and can disconnect it at any time
• Google's use of this data is governed by Google's Privacy Policy

Supabase (Your Instance):

• Your data is stored in your own Supabase project
• Supabase's handling of data is governed by Supabase's Privacy Policy
• You control access, backups, and data retention for your instance

Information We Do NOT Collect

• We do not collect analytics or usage statistics
• We do not track your location
• We do not use advertising identifiers
• We do not collect device information beyond what iOS provides for normal app functionality
• We do not have telemetry, crash reporting, or third-party analytics SDKs

How We Use Information

Since we do not collect or have access to your business data, we cannot use it. The App functions as a client interface that connects directly to your Supabase instance and (optionally) your Google Calendar.

Data Security

Your Responsibility:

• You are responsible for securing your Supabase credentials
• Use strong passwords for your Supabase account
• Follow Supabase's security best practices
• Manage user access controls in your Supabase project

Our Implementation:

• Credentials are stored securely in iOS Keychain
• All network communications use HTTPS/TLS encryption
• We follow iOS security best practices for local data storage
• The App does not transmit data to any servers controlled by the Developer

Device Security:

• Your iOS device security protects locally cached data
• Use device passcodes, biometric authentication, and encryption features
• If your device is compromised, locally cached data may be at risk

Data Retention

On Your Device:

• Offline cache is refreshed daily and contains only current/recent job data
• Credentials remain in Keychain until you reset/delete the app or manually clear them in Settings

In Your Supabase Database:

• You control all data retention policies
• You can delete data at any time through the App or directly in your Supabase dashboard
• We cannot delete or access your data

Your Rights and Choices

Access and Control

• You have complete access to all data stored in your Supabase instance
• You can export, modify, or delete any data at any time
• The App provides data export functionality for convenience

Google Calendar Integration

• You can connect or disconnect Google Calendar integration at any time in Settings
• Disconnecting will prevent future syncs but does not delete existing calendar events
• You can manually delete calendar events through Google Calendar

Deleting Your Data

• To delete all local data: uninstall the App from your device
• To delete your business data: delete your Supabase project (see Supabase documentation)
• To revoke Google Calendar access: disconnect in Settings or revoke access in Google Account settings

Resetting the App

• You can reset Supabase credentials and clear local data in Settings
• This will clear the onboarding state and require re-setup

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know: You have the right to know what personal information is collected. As described above, we do not collect your business data—you control it in your own database.

Right to Delete: You have the right to request deletion of personal information. Since we do not collect or store your data, there is nothing for us to delete. You control all data in your Supabase instance.

Right to Opt-Out: We do not sell personal information, so there is no opt-out required.

Non-Discrimination: We do not discriminate against users who exercise their privacy rights.

To exercise any rights or ask questions, contact us at Doctor4spas@gmail.com.

Children's Privacy

ServiceDispatch is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information through the App, please contact us at Doctor4spas@gmail.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected with a new "Last Updated" date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

We will notify users of material changes through:

• In-app notifications
• Email (if we have a communication channel)
• Posting the updated policy at https://spadoctorcrm.com/privacy

Third-Party Services

Supabase

• Website: https://supabase.com
• Privacy Policy: https://supabase.com/privacy
• You create and control your own Supabase project
• Supabase provides database, authentication, and storage services

Google Calendar (Optional)

• Website: https://calendar.google.com
• Privacy Policy: https://policies.google.com/privacy
• Terms of Service: https://policies.google.com/terms
• Used only if you enable calendar integration
• Requires OAuth 2.0 authorization which you can revoke at any time

Contact Us