Privacy Policy

Effective Date: March 1, 2026 · Last Updated: June 6, 2026

1. Who We Are

Jobby ("the App," "we," "us," or "our") is a field inspection and reporting application operated by RLHF Labs LLC, a Nevada limited liability company based in Las Vegas, Nevada, United States. We provide mobile software tools for field service businesses to conduct inspections, generate reports, and deliver documentation to their customers.

Contact:
Email: support@appjobby.com
Website: appjobby.com

2. Information We Collect

2.1 Account Information

When you register for Jobby, we collect:

• Full name and email address
• Company name and business address
• Company logo (optional, if uploaded)
• Role within your organization (admin or technician)
• A unique user identifier (UUID) generated at account creation and used to associate your data with your account

2.2 Inspection and Job Data

As you use the app to conduct inspections, we collect:

• Customer names, addresses, and contact information you enter
• Inspection checklists, findings, and technician notes
• Photos taken or uploaded during inspections
• AI-generated and manually edited report narratives
• Customer signatures captured within the app
• Job dates, service types, and completion status

2.3 Payment Information

Jobby does not store, process, or have access to your full credit card numbers or banking details. In-app purchases on iOS, including subscriptions and credit packs, are processed by Apple. Web dashboard subscriptions, eligible web billing flows, and card payments for customer invoices may be processed by Stripe. Jobby receives only the payment confirmation and related account, subscription, invoice, or credit information needed to provide the service.

2.4 Device and Technical Data

We may collect limited technical data including:

• Device push notification token (for job schedule reminders — optional, requires your permission)
• App version and operating system version
• General crash and error logs (anonymized; no personal data included)

2.5 Data We Do NOT Collect

Jobby does not collect the following:

• Precise or approximate location data
• Microphone audio or recordings
• Contacts from your device's address book
• Health or fitness data
• Browsing history or search history
• Information about other apps installed on your device
• Advertising identifiers (IDFA/GAID)
• Biometric data
• Financial account details (handled by Apple, Stripe, or the applicable payment processor)

We do not use advertising trackers, behavioral analytics SDKs, or profiling tools of any kind.

3. Device Permissions

Jobby requests the following device permissions. All permissions are requested in context and explained to you at the time they are needed. You may deny or revoke any permission through your device settings; some features may not function without certain permissions.

Permission	Why It Is Needed
Camera	To take photos during field inspections
Photo Library (Read/Write)	To upload photos from your camera roll into inspection reports, and to save generated report PDFs to your device
Push Notifications	To send optional job schedule reminders; requires your explicit opt-in

Jobby does not request access to Location, Microphone, Contacts, Bluetooth, Calendar, Health, Face ID/Touch ID, or any other device capability beyond those listed above.

4. How We Use Your Information

We use your information solely to provide and improve the Jobby service:

• To operate the app — store inspection data, generate reports, sync across devices
• To generate AI reports — inspection checklist data (not personal customer data) is sent to Anthropic's Claude API to generate professional report narratives
• To deliver PDFs — generate and email PDF reports to customers on your behalf
• To send notifications — deliver optional job schedule reminders if you opt in to push notifications
• To process payments — verify in-app purchases, credit purchases, subscription status, invoice payments, and related billing records
• To provide support — respond to issues you report to us
• To maintain security — use crash logs to identify and fix app stability issues

We do not use your data for advertising, sell it to third parties, or use it to train AI models.

5. App Tracking Transparency

Jobby does not track you. Specifically:

• We do not track your activity across third-party apps or websites
• We do not use your data to serve targeted advertising
• We do not share your data with data brokers or advertising networks
• We do not use Apple's Advertising Identifier (IDFA)

Because Jobby does not engage in tracking as defined by Apple's App Tracking Transparency framework, we do not present an ATT permission prompt.

6. Third-Party Services and Data Sharing

Jobby relies on the following trusted third-party services. Data is shared with these services only to the extent necessary to deliver the functionality described. Each provider has its own privacy policy:

Provider	Purpose	Data Shared	Privacy Policy
Supabase	Database, authentication, file storage (hosted on AWS US)	Account data, inspection records, uploaded photos	supabase.com/privacy
Anthropic / Claude API	AI report narrative generation	Inspection checklist results, service type, technician notes only — no customer PII	anthropic.com/privacy
Apple	App Store distribution and iOS in-app purchase processing for subscriptions and credit packs	In-app purchase confirmation, product identifiers, subscription status, and related App Store transaction information; Jobby never sees Apple payment card details	apple.com/legal/privacy
Stripe	Payment processing for web dashboard subscriptions, eligible web billing flows, and customer invoice payments	Payment confirmation and related billing records; Jobby never sees full card details	stripe.com/privacy
Expo / Expo Push	Mobile app platform and push notification delivery	Push notification token (only if you opt in)	expo.dev/privacy
Google	App Store distribution	Governed by Google platform policies where available	policies.google.com/privacy

We do not sell, rent, or lease your personal data to any third party.

7. AI-Powered Report Generation

Jobby uses Claude AI, developed by Anthropic PBC, to generate professional inspection report narratives. This feature is optional and requires your action (tapping "Generate AI Report") to activate.

What is sent to Anthropic when you request an AI report:

• Your inspection checklist results (Pass / Fail / N/A selections)
• The service type (e.g., chimney inspection, air duct cleaning)
• Any technician notes you have added to the inspection

What is NOT sent to Anthropic: Customer names, addresses, contact information, photos, signatures, payment data, or any personally identifiable information about you or your customers.

How Anthropic handles this data: Per Anthropic's API usage policy, data submitted via the API is not used to train AI models. Anthropic processes the inspection data solely to return a generated report narrative. You can review Anthropic's privacy policy at anthropic.com/privacy.

By using the AI Report Generation feature, you consent to the transmission of your inspection checklist data (as described above) to Anthropic's API for the purpose of generating a report narrative. You may decline to use this feature and write report narratives manually at any time.

Data retention at Anthropic: Jobby does not retain inspection data on Anthropic's infrastructure after the report is returned. All inspection records are stored in Jobby's own secure database with row-level security isolation per company account.

8. Data Storage and Security

Cloud storage: Your data is stored in Supabase's cloud infrastructure hosted on Amazon Web Services (AWS) in the United States. Supabase applies encryption in transit (TLS 1.2+) and encryption at rest for all stored data.

Row-level security: Jobby enforces database-level row-level security (RLS) ensuring each company's data is strictly isolated. Technicians and admins can only access data belonging to their own organization.

Local storage: The app stores a local offline copy of inspection data on your device using SQLite. This local data is protected by your device's operating system security (encrypted by iOS/Android when the device is locked). Local app data is not backed up to iCloud; your inspection data is synced exclusively through Jobby's secure Supabase backend.

Authentication: User accounts are authenticated via Supabase Auth using email and password. Passwords are hashed and never stored in plaintext. Jobby does not have access to your password.

While we take reasonable security measures, no system is completely secure. We encourage you to use a strong, unique password and keep your account credentials private.

9. Data Retention

We retain your data for as long as your account is active. Specific retention periods:

Data Type	Retention Period
Account information	Until account deletion
Inspection records, photos, reports	Until account deletion
Crash/error logs	90 days, then auto-deleted
Payment transaction records	7 years (legal/tax compliance)
Push notification tokens	Until you revoke notification permissions or delete your account

If you delete your account, we will permanently delete your company data, customer records, inspection reports, and photos within 30 calendar days, except where we are required to retain records by applicable law (e.g., financial transaction records for tax purposes).

To request account deletion: Email support@appjobby.com with the subject line "Delete My Account." We will confirm deletion within 30 calendar days.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data. To exercise any right, email support@appjobby.com. We will respond within 30 calendar days.

Right	Description
Access	Request a copy of the personal data we hold about you
Correction	Request correction of inaccurate or incomplete data
Deletion	Request permanent deletion of your account and all associated data
Portability	Request an export of your data in a machine-readable format (JSON/CSV)
Opt-out of notifications	Disable push notifications at any time through your device Settings > Notifications
Withdraw AI consent	Stop using the AI report generation feature at any time with no impact on other app functionality

California Residents (CCPA / CPRA)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by businesses and their service providers
• Opt out of the sale of personal information (not applicable — we do not sell data)
• Non-discrimination for exercising their CCPA rights

To submit a CCPA request, email support@appjobby.com.

European Union / EEA / UK Residents (GDPR / UK GDPR)

If you are located in the EU, EEA, or UK, the following applies:

Legal bases for processing your personal data:

• Performance of a contract — We process your account information and inspection data to provide the Jobby service you have contracted with us to receive (Article 6(1)(b) GDPR).
• Legitimate interests — We process crash/error logs to maintain app stability and security, which is in both your interest and ours (Article 6(1)(f) GDPR).
• Consent — We process your data for AI report generation only when you explicitly initiate the feature (Article 6(1)(a) GDPR). You may withdraw this consent at any time.

International data transfers: Your data is processed in the United States. Supabase and other providers maintain standard contractual clauses or equivalent safeguards for international data transfers as required under GDPR.

Additional EU rights: In addition to the rights listed above, EU/EEA/UK residents also have the right to object to processing based on legitimate interests, restrict processing in certain circumstances, and lodge a complaint with your national data protection authority.

11. Data Linked to Your Identity

For transparency in line with Apple App Store privacy disclosure requirements, the following summarizes how data collected by Jobby is categorized:

Data linked to your identity (your Jobby account):

• Name, email address
• Company name and address
• Inspection records, customer data you enter, photos, signatures
• Payment transaction status
• Push notification token

Data not linked to your identity:

• Anonymized crash logs and error reports
• App version and OS version

Data used to track you across apps or websites: None. Jobby does not engage in cross-app or cross-website tracking.

12. Customer Data You Enter

When you enter your customers' names, addresses, and contact information into Jobby, you are the data controller for that information under applicable privacy laws. Jobby acts as a data processor on your behalf.

You are responsible for:

• Ensuring you have appropriate authorization or consent from your customers to store their information in a third-party cloud application
• Complying with applicable privacy laws in your jurisdiction regarding customer data
• Providing your customers with any required privacy notices about how their information is used in connection with your field service business

13. Children's Privacy

Jobby is a business tool intended exclusively for use by adults (18 years of age and older). We do not knowingly collect personal information from children under the age of 13 (or under 16 in the EU/EEA). If you believe a child has created an account, please contact us immediately at support@appjobby.com and we will delete the account promptly.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you via:

• Email to the address associated with your account, and/or
• An in-app notice

We will provide at least 14 days' notice before material changes take effect. Your continued use of Jobby after changes take effect constitutes acceptance of the updated policy.

The current version of this policy is always available at appjobby.com/privacy.html.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: