Effective September 8, 2026

Privacy Policy

JobCamLog is designed to work locally on your device without an account. Job records, photos, videos, location details, client labels, notes, reports, and JobStories remain on your device unless you choose to export or share them.

Permissions

Camera access is used only when you choose to capture media. Photo Library access is used only when you choose to import. When-in-use location is optional and is used to attach a location-quality snapshot to a capture. JobCamLog does not request background location. If you explicitly choose “Look up address,” the selected coordinates are sent to Apple’s geocoding service so Apple can return an address; the app does not perform this lookup automatically.

Analytics

Optional PostHog usage analytics is off by default and starts only with consent in Settings. It uses a random installation ID and basic app/device information, never photos, job content, file names, or precise locations. No advertising identifiers, cross-company tracking, automatic screen/tap capture, or session replay are used. Events request no IP-based location enrichment; providers still receive connection IP addresses.

Turning analytics off stops future collection and removes queued local events. Requests already sent may finish; this does not delete events already received by providers. Contact support for data questions. Provider practices: https://posthog.com/privacy.

Purchases

Apple processes payments. When configured, RevenueCat receives transaction/receipt data, a random app user ID, Pro entitlement status and basic app/device information to manage purchases and restores. Providers receive connection IPs. No job content or payment-card details are sent to RevenueCat. Otherwise the app uses Apple StoreKit directly. Provider practices: https://www.revenuecat.com/privacy/.

To administer the Founder offer, RevenueCat sends selected production purchase and refund notifications to our Cloudflare service. Cloudflare processes the incoming notifications transiently. Our Founder ledger stores only transaction and event identifiers transformed with a secret-key hash (HMAC), event types and timestamps, plus delivery counts and times. We do not store raw identifiers, full notification bodies or job content in this ledger. No job photos, notes or client labels are sent to this service. These purchase records are pseudonymous, not anonymous.

We use this limited ledger to count original Founder purchases without counting restores again, track refunds and reconcile the offer. It is not a real-time inventory guarantee. We retain the records for deduplication and purchase/refund reconciliation and review retention after the offer closes. Turning optional usage analytics off does not stop this purchase administration. Contact support for data questions. Provider practices: https://www.cloudflare.com/privacypolicy/.

Sharing and retention

You control exports through the iOS share sheet. App-generated social exports omit addresses, coordinates, client labels, and private notes. Unchanged original files may still contain embedded camera metadata, and the app shows a warning before sharing an original. Data remains until you delete it, uninstall the app, or remove it through device storage controls. Exported copies are controlled by the destination you choose.

Manual ZIP backups exclude your first free JobStory video, its local usage limit, and analytics consent. Save that video separately before reinstalling or moving devices.

Contact

Use the Support page in JobCamLog Settings or email support@jobcamlog.com.