Who is responsible
FieldProof is provided by MCODE, D. Cesarica 67, Croatia. Contact us at hello@mcode.hr for privacy questions or requests.
MCODE controls information used to operate FieldProof, manage access, provide support and maintain the service. A business using FieldProof decides which customer details and job photographs it uploads and shares. For that customer content, the business is responsible for its use and FieldProof provides storage and processing on its behalf. If you received a report from a service provider, contact that provider about the underlying job or invoice.
Information we process
- Workspace information: your shop name, business region, internal identifiers, membership and roles.
- Job and customer information: job titles, customer names, email addresses, phone numbers, service addresses, descriptions, dates and job status that you enter.
- Photos and documents: photographs you select or take, their job/section assignment, before/after selections, quotes, invoices, totals, tax rates and shared document snapshots.
- Payment instructions: payment handles, bank account details and instructions you choose to display on invoices. These are recipient-facing details; do not enter bank passwords or login credentials.
- Optional account information: email and authentication information if you create a recovery account or join a team. You can begin setup and subscribe without creating a FieldProof email account.
- Purchase information: a RevenueCat app user identifier, subscription status and transaction information needed to validate store purchases and restores. Apple or Google handles the payment; FieldProof does not receive your full card details.
- Technical information: installation/device-history identifiers and labels, service requests, IP addresses and operational logs processed by our infrastructure and subscription providers.
- Support correspondence: information you send us when asking for help.
Why we use it
We use information to create and protect workspaces, organize and synchronize your work, prepare documents, provide links you choose to share, manage subscriptions, respond to support requests and investigate misuse or technical problems.
Where European data protection law applies, we rely on performance of our contract for the service you request; legitimate interests in securing, maintaining and supporting the service; legal obligations where applicable; and consent when a specific optional use requires it. Your business must have an appropriate basis for entering and sharing other people’s information. Device camera or photo-library permission is requested when the related feature is used; you can change that permission in device settings.
Local storage and cloud services
The app stores job data, drafts and photo files locally so captured work can remain available without a connection. Cloud features use Google Firebase and Google Cloud services, including Authentication, PostgreSQL through Firebase SQL Connect, Cloud Storage and Cloud Functions. The current backend is hosted in the United States (us-central1); relevant provider operations may take place in other countries.
RevenueCat manages subscription validation and entitlement information. We do not send job photos or invoice content to RevenueCat as part of our subscription integration. Providers may process technical information needed to deliver their services. See Firebase privacy and security information and RevenueCat’s Privacy Policy.
Where personal data is transferred internationally, applicable provider data-processing terms and transfer mechanisms apply. Contact us for information relevant to your use of the service. This policy is not a claim that all information stays in your country.
Sharing that you control
A shared document or report can be viewed by anyone who has its link. Links expire after 30 days and can be revoked in the app. Treat them as private links and share them only with intended recipients. Published quote/invoice versions preserve a snapshot of their details, selected photos and any enabled payment instructions; editing the original job does not rewrite an existing shared version.
Email, SMS, WhatsApp, Viber and other sharing destinations open through your device’s apps. You choose the recipient and confirm sending. Those apps and recipients then handle the information under their own terms. Revoking a link prevents future access through that link; it cannot remove a PDF, image, message or screenshot someone has already saved.
Workspace teammates can access information according to their role. We may also disclose information when legally required or when necessary to protect the service or the rights of others. We do not sell your job content or use it for advertising.
Retention and deletion
Workspace content remains stored while needed to provide your workspace and until it is deleted through available controls or a verified deletion request is processed. Deleting an original photo does not delete a copy already included in a shared document snapshot. Link expiration or revocation disables access; it does not itself erase the stored snapshot.
We may retain limited transaction, security or correspondence records where needed for legal obligations, dispute handling or protection against misuse. Provider backups and logs follow their configured retention and deletion cycles. Uninstalling the app does not automatically delete cloud content or cancel a store subscription.
To request deletion or an export of your workspace or account information, email hello@mcode.hr. We may ask you to verify control of the workspace before acting. Anonymous workspaces can be difficult to recover after uninstalling; an optional recovery account provides a way to regain access.
Your rights and choices
Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to certain processing, and withdraw consent where processing relies on consent. Contact us to exercise these rights. If we process customer content for a service business, we may refer your request to that business.
You may complain to the relevant data protection authority. In Croatia, this is AZOP. You may also contact the authority where you live or work where applicable.
Website, children and policy changes
The marketing website does not use advertising or analytics cookies. Hosting providers still process ordinary technical request data to serve and secure the site. The native app uses necessary local storage and authentication/subscription identifiers. We do not direct FieldProof to children.
We may update this policy as the service changes. The date above identifies the latest version. Material changes will be communicated through an appropriate service channel. Contact hello@mcode.hr if anything is unclear.