Privacy Policy

1. Who we are

The ThumpIT mobile application (“App”) is published by ThumpIT (“we”, “us”). This policy describes how the App handles information when you use it on your Android device.

Contact (privacy & data questions): thumpitapp@gmail.com

2. Summary

ThumpIT is designed to work primarily offline. Your projects, daily logs, photos, PDFs, and related content are stored locally on your device in an encrypted on-device database (Room with SQLCipher) and app-private storage. We do not operate our own cloud backend for core app data, and we do not sell your personal information.

Some optional features rely on Google services on your device (for example location and speech recognition). Those services are governed by Google’s policies. Android may also back up app data if you have device backup enabled.

3. Information the App processes

Depending on how you use ThumpIT, the App may process categories such as:

• Information you enter — project names, addresses, company details, crew and subcontractor names and contact details you choose to record, daily log text, schedule tasks, safety log entries, notes, and similar content.
• Photos and files — images you capture or attach, signature images, annotated overlays, exported PDFs, and backup ZIP files you create. These are stored under the App’s private storage on your device unless you share them yourself (for example via email, cloud storage, or another app).
• Location — if you grant location permission, the App may read the device’s current location (via Google Play services) to attach coordinates to logs or photos. That location data is stored with your log or photo records on your device and may appear in PDFs you generate or files you export.
• Audio (microphone) — if you grant microphone permission and use voice input, audio is processed for speech recognition. On many devices this uses Google’s speech services; processing may occur on-device or via Google’s servers depending on your device, language packs, and settings. We do not receive a separate copy of your voice on our servers.
• Preferences — theme, units, default project, and similar settings stored in local app preferences.

4. How we use this information

Information is used only to provide App functionality you request: documenting job sites, generating reports, scheduling, backups, and the home screen widget. We do not use your content for advertising and we do not build cross-app profiles of you.

5. Sharing and third parties

We do not transmit your project database or log content to servers we control.

The App includes or uses the following, which may process data according to their own terms and privacy policies:

• Google Play services (Location) — used to obtain device location when you allow it. See Google’s documentation and privacy policy for how Google handles location services.
• Android speech recognition — when you use dictation, recognition may be provided by Google or your device manufacturer as part of the operating system.
• Android backup — the App declares Android backup support. If you use Google’s Android backup (or your OEM equivalent), portions of app data may be backed up to your Google account under your device settings. That is between you and Google (or your device provider), not something we access directly.

When you share a PDF, photo, or backup file using another app or service, that sharing is subject to that third party’s terms.

6. Permissions

ThumpIT may request:

• Camera — to take photos for daily logs and documentation.
• Location (approximate and/or precise) — to record coordinates on logs and photos when you choose to use that capability.
• Microphone — for optional voice-to-text entry in text fields.

You can deny any permission; features that depend on a denied permission may be unavailable.

7. Data retention and deletion

Your data remains on your device until you delete it inside the App, uninstall the App, or erase device storage. Uninstalling the App typically removes app-private data unless Android backup restores it onto a new device.

Use the App’s export/backup features if you need a copy before uninstalling.

8. Security

We design the App to keep your project data in app-private storage on your device. The main database file is encrypted at rest using SQLCipher (encrypted SQLite). The database encryption key is stored using Android’s EncryptedSharedPreferences and a MasterKey backed by the Android Keystore where the device supports it (hardware-backed when available). Signature images are saved using AndroidX encrypted file APIs.

Exports and sharing — PDFs, photos, and backup ZIP files you create or send through another app are only as private as the place you put them. Backup archives can contain your full project data; treat them like sensitive documents.

Device access — The App does not require a separate password inside the app; anyone who can unlock and use your device can open ThumpIT. No security practice is perfect; use a lock screen and protect physical access to your phone.

9. Children

ThumpIT is intended for adults in a professional/work context. It is not directed at children under 13 (or the age required in your jurisdiction). Do not use the App to collect personal information from children in violation of applicable law.

10. Regional rights

Because we do not host your operational data on our servers, most access, correction, or deletion requests can be fulfilled by you directly in the App or by deleting app data. If you are in the EEA, UK, or another region with privacy laws, you may have additional rights; contact us at the email above and we will respond as required by law.

11. Changes

We may update this policy when the App or legal requirements change. We will post the new effective date at the top of this page. For material changes, we may also provide notice through the Play Store listing or in-app where appropriate.

12. Google Play

When you install ThumpIT from Google Play, Google processes information as described in Google’s policies. This policy covers the ThumpIT App’s behavior as we describe it here.