Crewhand app privacy policy

Last updated September 29, 2026

Crewhand is software for field service companies, provided by Crewhand. This policy covers the Crewhand app and website. Questions: support@gocrewhand.app.

Whose data this is

Companies use Crewhand to run their business. The customer and job information they put into Crewhand belongs to them; we store and process it on their behalf. Each company can only see its own data.

What we collect

Your account: name, email address, phone number if you add one, your role in the company, and your password (stored only as a one-way hash we cannot read).
Your company's business data: customers, properties, jobs, quotes, invoices, notes, tasks, calendar entries, and messages sent or received through Crewhand.
Location — only while you are clocked in, and only if you allow it. Clocking in or out records where you were and how far that was from the job. If your company turns on live location, the app shares your position with your company's office while you are clocked in. Live location collects nothing when you are off the clock. Live location history is deleted after 30 days. If your company uses the mileage log, the drives found in that history are kept as mileage trips (start, end and distance) for tax records, and you or your office can mark any of them personal or delete them.
Location for automatic mileage — only if you turn it on, on your own phone. If you switch on Automatic drive tracking in the app's Mileage page, the app uses your phone's location in the background, including when the app is closed, to notice when you are driving. For each drive it records where it started and ended, the route, the times and the distance, and adds it to your mileage log for you to mark Business or Personal. Your company's owner and office can see these drives, including ones you mark Personal; you are told this before it turns on. Location your phone reports while you are not driving is used only to notice the next drive and is not kept. Turn it off any time in Mileage, or in your phone's settings; signing out also turns it off.
Photos: job-site photos you take or choose, stored on the job they belong to. With location on, a photo records where it was taken. Receipt photos you hand in are kept with the job or expense they belong to.
Notification token: a code that lets us send alerts (a job assigned to you, a quote accepted, a customer reply) to your phone. It is removed when you sign out.
Email, if your company connects it: Crewhand sends quotes and invoices from your company's mailbox and reads replies into the app. A mailbox password is only ever sent over an encrypted connection and is never shown back in the app; Microsoft mailboxes connect through Microsoft's own sign-in, so no password is stored for them.
Sign-in safety: if two-step sign-in is on, a phone or computer you've already confirmed is remembered for 30 days with a cookie, so you aren't asked for a code every time.

We do not collect advertising identifiers, track you across other companies' apps or websites, or sell personal information.

How we use it

Only to provide Crewhand: showing your company its work, sending the documents and notifications it asks for, proving on-site attendance for timesheets, and keeping the service secure and working.

Who else handles it

Service providers that run parts of Crewhand, only for that purpose:

Render — hosting, in the United States
Stripe — card payments; card details go to Stripe directly and Crewhand never sees them
Expo and Apple Push Notification service — delivering notifications to your phone
Microsoft or Google — only if your company connects its mailbox through them
Twilio — text messages, only if your company turns texting on
OpenStreetMap and mapping services — turning addresses into map locations and drive times
Plaid — bank connections, only if your company connects a bank account
Anthropic — reading the total off a receipt photo, only where that feature is turned on; the photo is sent to read it and is not used to train anything

Keeping it and deleting it

Data is kept while your company's account is open. Live location history is deleted after 30 days. The account owner can delete the company's account and all its data at any time in the app, under Settings → Danger zone. Anyone else with a login can delete their own login in the app, under My Account (or Settings) → Delete my login. Anyone can ask us to delete their data at support@gocrewhand.app.

Security

Connections to Crewhand are encrypted. Passwords are hashed. Stored credentials for connected services (such as a mailbox password) are encrypted. Each company's data is kept in its own separate database.

Children

Crewhand is a business tool and is not meant for children under 13.

Changes

If this policy changes we'll update the date at the top, and tell account owners by email about significant changes.