Crew App Privacy Policy
The Crew App ("Crew App by CoreLedgery") is used by the employees and crew of businesses that run their books on Investimates. Your employer sets up your account; you use the app to clock in and out, see the jobs you are assigned to, message the office and send in receipts. This policy explains what the app collects, why, and what you can do about it. The general Investimates Privacy Policy also applies.
Who is responsible for your information
Your employer decides what goes on your employee record and uses the app to run their business. Investimates stores and processes that information on your employer's behalf. Questions about your employment record itself (pay, hours, what the office has on file) are best asked of your employer; questions about the app can come to us at info@investimates.io.
What the app collects
- Your sign-in details: your email address and a PIN (stored only as a one-way hash, never readable). If you choose texted sign-in codes, the phone number on your employee record is used to send them.
- Your employee record: name, contact details and any other items your employer chooses to share with you in "My information".
- Time clock entries: when you clock in and out, the job you pick and any note you add. Times come from our server's clock.
- Receipts: photos or PDFs of receipts you choose to send, with the job and note you type.
- Messages: what you and the office write to each other in "Message the office".
- A notification token: if you allow notifications, your phone gives the app an address (a device token) that lets us send notifications to it. We store it with the type of phone (iPhone or Android).
- A sign-in cookie: one cookie that keeps you signed in. Our server also records ordinary technical logs (such as IP address and time of a request) to keep the service secure.
The app does not collect your location, contacts, or photos you have not chosen to send. It has no advertising and no third-party analytics or tracking.
How it is used
- To sign you in and keep your account secure.
- To record your hours for your employer and show them to you.
- To show you the jobs and schedule your employer shares with you.
- To deliver your messages and receipts to the office.
- To notify you about new jobs, changes to your jobs and messages from the office.
We do not sell your information and do not use it for advertising.
Who it is shared with
- Your employer, who sees your hours, receipts and messages.
- Service providers that run the service for us: Apple Push Notification service and Google Firebase Cloud Messaging (to deliver notifications), Telnyx (to text sign-in codes), Resend (to email sign-in links), and our hosting provider. They receive only what they need to do that job.
- Authorities, only where the law requires it.
How long it is kept
Your information is kept for as long as your employer keeps your employee record on Investimates. Office notifications about your activity are removed after 90 days. When a notification token stops working (for example the app is deleted), it is removed. Your employer may be required by law to keep payroll and time records for a period of years.
Deleting your account
In the app, open My information and tap Request account deletion. This tells your employer, who can remove your sign-in and your record. You can also email info@investimates.io and we will work with your employer to delete your account and the information that is not required to be kept by law. Signing out on a phone stops notifications to that phone straight away.
Security
Connections to the app are encrypted (HTTPS). PINs are hashed, sign-in attempts are limited, and each business's data is kept in its own separate database.
Children
The Crew App is for working adults and is not directed to children under 13.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
CoreLedgery, Inc. · info@investimates.io · Crew App support