Legal
Last updated: 18 April 2026
Site Log is a mobile application provided by UrProject Inc., a company registered in the United Arab Emirates ("we", "us", "our", "the Company"). We are the data controller responsible for your personal data.
If you have any questions about this privacy policy or how we handle your personal data, contact us at: [email protected]
This privacy policy explains how we collect, use, store, and share your personal data when you use the Site Log mobile application and our website (together, "the Service"). It applies to all users of the Service, regardless of location, and is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Account Information. When you create an account, we collect your email address and the display name you choose. This data is necessary to provide you with access to the Service and manage your account.
Voice Recordings. When you use the voice logging feature, we temporarily process audio recordings on your device. These recordings are sent to a third-party AI transcription service to convert speech to text. The transcribed text is stored as part of your site log. Audio recordings are processed for transcription purposes only and are not retained by us or our transcription provider after processing is complete.
Photos and Annotations. When you capture or upload photos and add annotations (markups, drawings, text overlays), these images are stored as part of your site log entries. Photos may contain metadata such as the date, time, and GPS coordinates of where the photo was taken.
Location Data. With your permission, we collect your device's GPS coordinates when you create a log entry. This is used to geotag your logs and associate them with a specific site location. You can disable location access in your device settings at any time.
Device Information. We collect basic device information including your device type, operating system version, and a unique device identifier. This is used to ensure the app functions correctly on your device and to provide technical support.
Usage Data. We collect anonymised data about how you use the app, such as which features you access and how frequently. This helps us improve the Service. Usage data is collected on an aggregated basis and cannot be used to identify you personally.
Subscription Data. If you subscribe to Site Log Pro, your payment is processed entirely by Apple (via the App Store) or Google (via Google Play). We do not collect, process, or store your payment card details, bank account information, or any other financial data. We receive only a confirmation of your subscription status from Apple or Google.
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Account information | Create and manage your account, authenticate your identity, communicate about the Service | Contract performance (Art. 6(1)(b)) |
| Voice recordings | Transcribe spoken observations into written log entries | Consent (Art. 6(1)(a)) |
| Photos and annotations | Store visual evidence as part of site logs and generate PDF reports | Contract performance (Art. 6(1)(b)) |
| Location data | Geotag log entries with the site location | Consent (Art. 6(1)(a)) |
| Device information | Ensure technical compatibility and provide support | Legitimate interest (Art. 6(1)(f)) |
| Usage data | Understand how the Service is used and improve it | Legitimate interest (Art. 6(1)(f)) |
| Subscription status | Provide access to paid features | Contract performance (Art. 6(1)(b)) |
Where we rely on consent as the legal basis, you can withdraw your consent at any time by adjusting your device permissions (for location and microphone access) or by contacting us at [email protected]. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdraw it.
Where we rely on legitimate interest, our interest is in maintaining and improving a functional, secure, and reliable service. We have assessed that this does not override your rights and freedoms.
We share your personal data with the following categories of third parties, solely to the extent necessary to provide and maintain the Service:
Supabase Inc. provides our backend infrastructure, including user authentication, database storage, and file storage. Supabase processes your account information, log entries, photos, and annotations on our behalf. Supabase's servers are located in the European Union.
AI Transcription Services. Voice recordings are sent to a third-party AI service for transcription. Audio data is processed in real time and is not retained by the transcription provider after the transcription is complete.
Apple Inc. and Google LLC. If you subscribe to Site Log Pro, your subscription is managed and processed by Apple or Google through their respective app stores. We receive only your subscription status. Your payment details are handled entirely by Apple or Google under their own privacy policies.
We do not sell, rent, or trade your personal data to any third party. We do not share your data with advertisers.
Some of our third-party service providers are based outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR. These safeguards include transfers to countries that the UK government has determined provide an adequate level of data protection, or transfers subject to standard contractual clauses approved by the Information Commissioner's Office.
| Data Category | Retention Period |
|---|---|
| Account information | For as long as your account is active. Deleted within 30 days of account deletion. |
| Voice recordings | Audio is processed for transcription only and is not stored after transcription is complete. The resulting text is retained as part of your log entries. |
| Photos and annotations | For as long as your account is active. Deleted within 30 days of account deletion. |
| Location data | For as long as the associated log entry exists. Deleted with the log entry or upon account deletion. |
| Device information | For as long as your account is active. |
| Usage data | Retained in anonymised, aggregated form for up to 24 months. |
| Subscription status | For as long as your subscription is active, plus 12 months after expiry for record-keeping. |
When you delete your account, we will delete or anonymise all personal data associated with it within 30 days, except where we are required by law to retain certain records.
We implement industry-standard security measures to protect your personal data, including TLS encryption in transit, encryption at rest, and access controls on our backend systems. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access. You can request a copy of the personal data we hold about you.
Right to rectification. You can ask us to correct any personal data that is inaccurate or incomplete.
Right to erasure. You can ask us to delete your personal data. You can also delete your account directly within the app.
Right to restriction. You can ask us to restrict the processing of your personal data in certain circumstances.
Right to data portability. You can request that we provide your personal data in a structured, commonly used, machine-readable format.
Right to object. You can object to our processing of your personal data where we rely on legitimate interest as the legal basis.
Right to withdraw consent. Where we process your data based on consent, you can withdraw that consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113
Site Log is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that data promptly.
Our website may use essential cookies to ensure it functions correctly. We do not use advertising or tracking cookies on our website.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy within the app or on our website, with a revised "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
If you have any questions about this privacy policy or wish to exercise your rights, contact us at: [email protected]
UrProject Inc.