CrewTrack Privacy Policy

About This Policy

This policy describes how the CrewTrack Android application (the "App") collects, uses, stores, and shares information when used by field crews and administrators of a business client (your "Employer").

CrewTrack is developed and operated by Learned Geek LLC ("we," "us," or "our"), a Wisconsin limited liability company. CrewTrack is licensed to businesses (your "Employer") who deploy it to their crew members for workforce management. In privacy terms, your Employer is the data controller and Learned Geek LLC is the data processor acting on their behalf.

For the general Learned Geek website privacy policy, see /policies/privacy. This document covers the CrewTrack mobile app specifically.

Information We Collect

Account Information

When your Employer provisions your CrewTrack account, we collect and store:

Your name (as provided by your Employer)
Your email address (used for login)
Your role (Owner, Supervisor, or Crew)
Your preferred display language (English or Spanish)
A password hash (we never store the plaintext password)

Location Data (GPS)

CrewTrack collects precise GPS coordinates from your device in the following situations, when authorized via Android location permissions:

When you clock in or clock out — a single coordinate is recorded with the time entry, used by your Employer to verify the clock event happened at the job site.
When you start, complete, or skip a task — a single coordinate is recorded with the action, used to verify on-site work.
While clocked in, in the background — your device periodically reports its location while a foreground-service notification is displayed (typically every 30 seconds when moving). This is how your Employer verifies travel time between job sites and confirms time billed against location. Background location tracking stops the moment you clock out.

Location data is transmitted to our servers and forwarded to your Employer's administrators via the CrewTrack admin web interface. You can revoke location permissions at any time via your Android Settings; doing so will prevent the app from recording location during clock-in events and may affect your Employer's payroll verification.

Photos

The App allows you to capture photos for documenting completed tasks, material deliveries, supplier pickups, and job-site conditions. When you capture a photo through the App:

The image is stored on our servers under your Employer's account.
The image is tagged with the task, work order, time, and (if available) GPS coordinates of capture.
Your Employer's administrators can view, download, and export captured photos.

Photos captured through CrewTrack are owned by your Employer as part of their work records. They are not used for any purpose outside the direct workforce-management workflow.

Device Identifiers

Firebase Cloud Messaging (FCM) Token — a token generated by your device's Google Play services. We use this token to deliver push notifications (e.g., admin force-login messages, long-shift nudges). The token is rotated by Android periodically.
Device identifier — a stable identifier that binds the App installation to your account, so your Employer's admin can push session messages (e.g., force-logout for a lost device).

Activity and Audit Logs

The App and our servers record:

Login and logout events (success and failure, with reason)
Lockout events when too many failed logins occur
Time entries (clock-in / clock-out timestamps)
Task actions (start, complete, skip — with timestamp and crew member)
Photo uploads (timestamp, file size, associated task)
Administrative actions performed by your Employer (force sign-in/out, lockout cleared, etc.)

These records are visible to your Employer's administrators via the CrewTrack admin web interface.

Technical Information

When the App communicates with our servers, standard request metadata is logged for security monitoring and debugging:

IP address of the device
Approximate timing and size of API requests
Error messages and diagnostic information when failures occur

How We Use Your Information

We use the information we collect to:

Authenticate your access to the App
Deliver work orders, tasks, and materials assigned to you by your Employer
Record time entries used by your Employer for payroll and billing
Provide your Employer with location verification of clock events and on-site work
Send push notifications related to your work (e.g., shift status, admin messages)
Detect and resolve technical issues with the App and our servers
Comply with legal obligations

We do not use your personal data for advertising, do not sell it to third parties, and do not share it for marketing purposes.

Data Sharing

We share information only as follows:

With your Employer — Your Employer's administrators have access to all data the App collects from you in the course of your work, via the CrewTrack admin web interface. This is the core purpose of the product.
With Google (Firebase Cloud Messaging) — Push notification delivery is performed by Google's Firebase Cloud Messaging service. We send Google a message payload and your FCM token; Google delivers the notification to your device. Subject to Google's Privacy Policy.
With Mapbox — For map display, address geocoding, and snapping GPS trails to roads, we send Mapbox individual coordinates and addresses. Subject to Mapbox's Privacy Policy.
Legal requirements — If required by law, regulation, court order, or to protect the rights or safety of users or third parties.

Data Retention

We retain your data for as long as your CrewTrack account is active under your Employer's deployment. Specific retention windows:

Account credentials — retained while your account is active. Deleted within 30 days of account deactivation by your Employer.
Location history (background GPS) — retained for 90 days by default; your Employer may configure a shorter or longer window.
Clock-event GPS, task GPS, and photos — retained as part of your Employer's work records for as long as your Employer retains those records, typically per payroll and tax record-keeping requirements (often 4-7 years in the United States).
Audit logs — retained for the lifetime of the Employer's account.
Server logs (technical) — retained for 30 days.

Your Rights

Because CrewTrack data is your Employer's workforce data, requests to access, correct, or delete your personal information are generally handled by your Employer. You may:

Request access to the data your Employer has collected about you through CrewTrack
Request correction of inaccurate data
Request deletion of your data (subject to your Employer's record-keeping requirements)

Contact your Employer's CrewTrack administrator for these requests. If your Employer is unable or unwilling to address your request, you may contact us directly at [email protected] and we will work with your Employer to honor it where legally required.

Security

We use industry-standard security measures including:

HTTPS encryption for all data transmitted between the App and our servers
Encrypted password storage (bcrypt or equivalent hashing)
Encrypted-at-rest storage for sensitive configuration values
JWT-based authentication with short-lived access tokens (15 minutes default)
Account lockout after repeated failed login attempts
Audit logging of all administrative actions

However, no method of transmission over the Internet or method of electronic storage is 100% secure.

Children

CrewTrack is designed for use by adult workforce members and is not intended for use by children under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via the App or by email to your Employer's administrator. The "Last updated" date at the top of this page reflects the most recent revision.

Contact Us

If you have questions about this policy or how CrewTrack handles your data, please contact us at:

Learned Geek LLC
Email: [email protected]
Website: https://learnedgeek.com