Privacy.
Last updated: 6 May 2026
This is a plain-English summary of how ubild handles your personal data. We don't sell it, we don't share it for advertising, and we collect as little as possible to make the product work.
Who we are
ubild is operated by Sympl Ltd (working name pending company registration), a UK-based company building work-management tools for trades. You can reach us at hello@ubild.app with any privacy question.
What we collect
- Account info: your email address (for sign-in), and any name you provide.
- Job data you create: job titles, customer names, addresses, quotes, photos, voice transcripts, phase notes — anything you put into ubild as you work.
- Helper / client contact details you choose to add to a job, so we can send them a magic link.
- Technical data: device type, browser, IP address (for security and rate-limiting), and basic page-load timings if you've consented to analytics.
- Anonymous usage stats (only if you tap "Allow analytics" in the cookie banner) — page views, which features get used. No identifiers, no cross-site tracking.
Why we collect it
- To run the service — sign you in, store your jobs, generate quotes, send your magic links.
- To improve the product — only if you've opted in to analytics. Helps us see which features matter so we can build the right ones.
- To prevent abuse — basic security logging.
- To meet legal obligations — accounting, fraud prevention.
Lawful basis (UK GDPR)
For account info and job data, we rely on contract — we need it to provide the service you signed up for. For analytics, we rely on consent — you can change your mind at any time by clearing your browser's site data and the cookie banner will ask again.
Who sees your data
- You, obviously.
- Anyone you share a job with — helpers and clients you invite via magic link see only the parts of the job you've shared.
- Our processors — the named services we use to run ubild (see below).
- Nobody else, unless we're compelled by law (e.g. court order) or you've explicitly asked us to.
Our processors
- Supabase (database, auth) — EU region. Privacy.
- Vercel (web hosting + edge network) — EU + US. Privacy.
- Resend (transactional email) — EU. Privacy.
- Anthropic (AI processing for capture, quote generation) — voice transcripts and job text are sent to Anthropic's API. Privacy. Anthropic does not train on data sent via API.
- Cloudflare (DNS) — EU + global. Privacy.
How long we keep it
- Account data: while your account exists, plus 30 days after you delete it (so we can recover from accidents).
- Job data: same as account, unless you've explicitly archived it for longer.
- Logs (security, errors): 90 days.
- Anonymous analytics: 24 months, aggregated.
Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of your data.
- Rectify — fix anything we hold that's wrong.
- Erase — ask us to delete your data ("right to be forgotten").
- Restrict / object — pause our processing in some cases.
- Portability — get your data in a machine-readable format.
- Withdraw consent — for anything based on consent (e.g. analytics).
- Complain — to the UK Information Commissioner's Office (ico.org.uk).
To exercise any of these, email hello@ubild.app. We'll respond within 30 days.
International transfers
Some of our processors operate servers outside the UK (mostly in the EU, occasionally in the US for Vercel's edge network). Where data leaves the UK, we rely on the UK Data Protection Act adequacy decisions or Standard Contractual Clauses — same protections in either case.
Cookies
We use the bare minimum. See our Cookie Policy for the full list.
Changes to this policy
If we make material changes we'll email registered users and update the "last updated" date above. Minor wording tweaks happen without notice.
Note: This policy is a working draft. We're not lawyers — you should have it reviewed by your data protection adviser before relying on it for compliance.