biddl← Sign in

Privacy Policy

Effective: July 12, 2026

1. Introduction

biddl (“biddl,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect information when you use the biddl mobile application and web companion (the “App”) and related services.

We understand that contractors and handymen handle sensitive client information and proprietary job details. Our privacy practices are designed with the heightened confidentiality expectations of service professionals in mind.

By using biddl, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Full name
  • Email address
  • Password (stored in hashed form)

2.2 Professional Profile Information

You may optionally provide additional professional details, including:

  • Professional title (e.g., “General Contractor”)
  • Company or business name
  • License number
  • Phone number
  • Profile photo / avatar

2.3 Audio and Video Recordings

When you use the recording feature, we collect and process audio recordings of job walkthroughs, site assessments, client consultations, and other field documentation. These recordings are:

  • Recorded locally on your device
  • Uploaded to our secure cloud storage for processing
  • Transmitted to third-party transcription services (see Section 5)

2.4 Transcripts, Estimates, and AI-Generated Documents

We process and store:

  • Text transcripts generated from your audio recordings
  • AI-generated job estimates, scope-of-work documents, and analysis reports
  • Document metadata (document type, creation date, job association)

2.5 Job and Project Information

When you create jobs to organize your work, we collect:

  • Job name / title
  • Job number
  • Client name
  • Job site address
  • Client contact information
  • Job notes and descriptions

2.6 Receipt and Expense Data

When you use the receipt OCR feature, we collect:

  • Photos of receipts and invoices
  • Extracted text, line items, and totals from scanned receipts
  • Expense categorization and job associations

2.7 Email and Communication Data

When you use in-app email features to share documents, we collect:

  • Recipient email addresses
  • Email subject lines and message bodies
  • Sent email history and timestamps

2.8 Subscription and Payment Data

Subscription management is handled through Apple’s App Store and RevenueCat. We do not directly collect or store credit card numbers or payment instrument details. We receive:

  • Subscription status (free or Pro)
  • Subscription period and renewal dates
  • Anonymous purchase identifiers from Apple / RevenueCat

2.9 Device and Usage Information

We may automatically collect:

  • Device type, operating system, and version
  • App version
  • General usage patterns (e.g., feature usage frequency)
  • Crash reports and error logs

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To transcribe recordings, generate AI-powered job estimates and analysis, perform receipt OCR, and provide the core features of the App.
  • Account Management: To create and maintain your account, authenticate your identity, and manage your subscription.
  • Communication: To send password reset emails, service notifications, and respond to support requests.
  • Document Sharing: To facilitate email delivery of estimates and documents you choose to share with clients or team members.
  • Improvement: To analyze aggregated, de-identified usage patterns to improve app performance, features, and AI accuracy.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Data Storage and Security

4.1 Cloud Infrastructure

Your data is stored using Supabase, a cloud platform built on top of Amazon Web Services (AWS). Data is stored in secure, encrypted databases with the following protections:

  • Encryption at rest (AES-256) for all stored data
  • Encryption in transit (TLS 1.2+) for all data transfers
  • Row-level security (RLS) policies ensuring users can only access their own data
  • Secure authentication token management

4.2 Audio and Image File Storage

Audio recordings and receipt images are uploaded to Supabase Storage with access controls that restrict file access to the authenticated user who created the recording or upload. Files are transmitted over encrypted connections and stored in private buckets.

4.3 Local Device Storage

Authentication tokens and session data are stored securely on your device using platform-native secure storage mechanisms (iOS Keychain). Audio recordings and receipt photos are temporarily stored on your device during recording and processing.

4.4 Security Measures

While no system can guarantee absolute security, we implement industry-standard security measures including:

  • Secure password hashing (bcrypt)
  • JWT-based authentication with token rotation
  • API-level access controls and rate limiting
  • Regular security reviews of our infrastructure

5. Third-Party Services

To provide our services, we share certain data with the following third-party service providers:

5.1 Groq (Whisper transcription)

  • Purpose: Audio-to-text transcription of your recordings
  • Data shared: Audio file content
  • Policy: Groq processes inputs and outputs only to return a response and does not use API data to train models

5.2 Anthropic (Claude API)

  • Purpose: AI-powered job estimate generation, scope-of-work analysis, and receipt data extraction
  • Data shared: Transcript text, receipt data, and job metadata for estimate generation
  • Policy:Anthropic’s API usage policy states that API inputs are not used to train their models

5.3 Supabase

  • Purpose: Authentication, database hosting, and file storage
  • Data shared: All account data, job data, recordings, receipts, and documents

5.4 RevenueCat / Apple App Store

  • Purpose: Subscription management and payment processing
  • Data shared: Anonymous user identifier for subscription status tracking

5.5 Resend

  • Purpose: Transactional email delivery (password resets, document sharing)
  • Data shared: Recipient email addresses, email content

Each third-party provider is contractually obligated to handle your data in accordance with their respective privacy policies. We encourage you to review those policies independently.

6. Data Retention

We retain your data according to the following guidelines:

  • Account data: Retained for the lifetime of your account. Deleted upon account deletion request.
  • Audio recordings: Retained until you delete them or delete your account.
  • Transcripts, estimates, and AI documents: Retained until you delete them or delete your account.
  • Job and project information: Retained until you delete the job or delete your account.
  • Receipt and expense data: Retained until you delete them or delete your account.
  • Email history: Retained for 12 months, then automatically purged.
  • Usage analytics: Aggregated, de-identified data may be retained indefinitely.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Update or correct inaccurate information in your profile at any time through the Settings screen.
  • Deletion: Request deletion of your account and all associated data.
  • Portability: Request your data in a portable, machine-readable format.
  • Restriction: Request that we limit the processing of your personal data under certain circumstances.
  • Objection: Object to processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at support@biddl.app. We will respond to verified requests within 30 days.

8. Children’s Privacy

biddl is intended for use by licensed contractors, handymen, and service professionals aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal data from a person under 18, we will promptly delete that information.

9. Client Confidentiality

We recognize the importance of protecting your clients’ information and proprietary job details. Our technical and organizational measures are designed to maintain the confidentiality of client information processed through the App. However:

  • biddl is a technology tool and does not establish or modify any contractor-client relationship.
  • You are solely responsible for determining whether the use of cloud-based AI services is appropriate for sensitive client materials under your jurisdiction’s regulations and licensing requirements.
  • We recommend reviewing your state licensing board’s guidelines regarding the use of cloud-based and AI-powered tools for handling client project information.

10. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers maintain facilities. By using the App, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
  • No Sale of Data: We do not sell your personal information to third parties.

12. Do Not Track Signals

biddl is a mobile application and web companion and does not respond to “Do Not Track” browser signals. However, we minimize data collection to what is necessary to provide our services and do not engage in cross-site tracking or behavioral advertising.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the “Effective Date” at the top of this page
  • Notify you via the App or by email for significant changes
  • Obtain your consent where required by applicable law before applying changes retroactively

Your continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@biddl.app. We take every privacy concern seriously and will respond within 30 calendar days of receiving your request.

Built with intention · By Ember Development Studios