Privacy Policy

Effective date: 28 September 2026  ·  Simple Effective Ltd

1. Who we are

SiteCaddy, including the SiteCaddy: Air and SiteCaddy: Water apps, is a product of Simple Effective Ltd, a company registered in Scotland (Company Number SC892885).

Contact: info@sitecaddy.co.uk

2. What data we collect

When you create a SiteCaddy account or subscribe to one of our apps, we collect:

• Email address — used to create and manage your account
• Password — stored securely and encrypted by Supabase; we never see your password in plain text
• Subscription status — which apps you are subscribed to and the status of your subscription
• Payment reference — a Stripe customer ID and subscription ID used to manage billing; we do not store card numbers or full payment details

3. What data we do not collect

SiteCaddy apps are designed to work offline. All inspection data, site records, asset information, photographs and compliance reports that you create within the apps are stored locally on your device only. This data is never transmitted to or stored on our servers.

The apps use your device's camera only when you choose to take a photograph for a record or report. Photographs are stored on your device and are only shared when you choose to share or export a report.

4. How we use your data

We use the data we collect solely to:

• Create and manage your SiteCaddy account
• Verify your subscription status when you access the apps
• Process payments and manage billing via Stripe
• Send essential account communications (subscription confirmation, renewal reminders, payment failures)

We do not use your data for marketing without your explicit consent, and we do not sell your data to any third party.

5. Third-party services

• Supabase — account authentication and subscription data storage. Data is stored on servers located in the European Union.
• Stripe — payment processing. Stripe handles all card data and is PCI DSS compliant.
• Cloudflare Pages — website and app hosting. Cloudflare may log basic access data for security and performance purposes.
• Google Play — distribution of the Android apps. Google may collect data in line with its own privacy policy when you download apps from Google Play.

6. Data retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

7. Your rights under UK GDPR

As a UK data subject you have the right to access, correct, or request deletion of your personal data, object to processing, and lodge a complaint with the ICO at ico.org.uk. Contact us at info@sitecaddy.co.uk to exercise any of these rights.

8. Cookies

The SiteCaddy website uses only essential cookies required for authentication. We do not use tracking, advertising or analytics cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email. The effective date at the top of this page will always reflect the most recent update.

10. Contact

info@sitecaddy.co.uk

11. Deleting your account

You can request deletion of your SiteCaddy account and the associated data at any time. Email info@sitecaddy.co.uk from your registered email address with the subject "Delete my account". We will confirm your request and delete your account data within 30 days, except where we must retain records for legal or financial purposes (for example, payment records).

Inspection data, photographs and reports are stored on your device only. You can remove them by clearing the app's data or uninstalling the app.