RoundwrightPrivacy Policy
Roundwright is an app for home watch operators, operated by Chris Crouch, a sole proprietor in Florida, USA ("we", "us"). This policy explains what the app collects, why, who helps us process it, and how to have it deleted. Questions: support@roundwright.com.
The short version
- We collect what the app needs to run your business: your account, your clients' property details, your checklists and your visit reports.
- Visit photos are never stored on our servers. They're kept on your device and only leave it attached to the report email you send.
- Location is looked up only when you take a visit photo or set a property's pin. Never in the background.
- Gate, alarm and lockbox codes are encrypted in our database.
- No ads, no tracking across apps or websites, no analytics services, and we never sell data.
Who this covers
Operators (you, and any delegates you invite) use the app. Your clients are the homeowners whose properties you watch. You enter your clients' information and decide what to do with it; we store and process it for you, only to provide the app. You're responsible for having your clients' permission to keep their details and to email them reports.
What we collect
Your account
Your email address and password (stored as a secure hash by our sign-in provider), and the business profile you enter: business name, business email, your name and phone.
Your clients' properties
For each property: its name and address, the client's name, email and phone, emergency contacts, access instructions, gate, alarm and lockbox codes (encrypted), its schedule, and an optional map pin.
Checklists and visits
Your checklist template and per-client checklist choices. For each visit report: the checklist answers and readings, your notes, when it was sent, who performed it, and when and where the arrival and departure photos were taken (to show the client the visit happened at their home). The photos themselves are not stored: see below.
Delegates
If you invite a delegate, their name, their email address and their access to your account. A delegate sees your clients' properties, including access codes, so they can carry out visits.
Crash reports
If the app hits an error, it sends us the error message, where in the app it happened, and your device and system type, so we can fix it. Addresses and access codes are removed from these reports before they're sent.
Photos
Photos you take during a visit are resized on your device and kept there until the report is sent. They travel only as attachments to the report email: our server passes them to our email provider in memory, without saving them. We never store them in our database or file storage, and keep only a record that a photo was taken, and when. Like any email service, our email provider may keep a copy of sent emails for a limited time under its own policies, and your client keeps the email you send them.
Location
With your permission ("While Using the App" only), the app looks up your location at the moment you take an arrival or departure photo, or when you set a property's pin. It's used to show "On-site ✓" in the report when the photo was taken near the property, and it's stored with that report. It's never drawn on a photo, and the app never tracks you in the background.
Importing with AI
If you import clients or a checklist from screenshots or pasted text, or let the app match a spreadsheet's columns, that content is sent to our server and read by an AI model (from Anthropic) to fill in the fields. It's processed in memory to give you the result and isn't stored or logged by us. Anything that looks like an access code is removed from pasted text first, and for screenshots you confirm none show a code. Spreadsheet rows themselves are read on your device; only the column headings and two sample rows, with codes hidden, are sent.
Sharing a checklist template
When you share your checklist template with another operator, the template travels inside the link itself. Nothing is uploaded to us, and the link carries only checklist wording and settings, never client or property information.
Who processes data for us
- Supabase: our database, sign-in and server functions.
- Resend: sends report emails, with photos attached, to your clients.
- Anthropic: reads imports, as described above, only when you use AI import.
- Apple: the App Store, and any purchases you make in the app.
They process data only to provide their service to us. We don't share data with anyone else, except if the law requires it.
On your device
The app keeps a copy of your data on your device so it works without signal. On iPhone and iPad that copy is in an encrypted database whose key is held in the device's Keychain. The app locks after a period of inactivity and unlocks with Face ID, Touch ID or your passcode. That check is done by iOS; the app never receives your biometric data. Signing out removes Roundwright's data from the device.
How long we keep it
We keep your data while your account is active. When you delete your account, it's deleted straight away, with its properties, checklists, template, reports, business profile, delegates and related records. Reports a delegate ran on someone else's account stay with that account, without the link to the deleted login. Crash reports are kept only as long as they're useful for fixing problems.
Your choices and rights
- You can view and change your business profile and your clients' details in the app at any time, and export your client list as a spreadsheet.
- To delete your account and its data, go to Settings → Delete account in the app. If you can't sign in, email support@roundwright.com from your account's email address.
- You can turn off location access in iOS Settings at any time; the app keeps working, without the on-site check.
If you're one of our operators' clients and want your details changed or removed, please contact the operator who looks after your home. You can also write to us and we'll pass it on.
Children
Roundwright is a business tool and isn't meant for anyone under 18.
Where data is processed
Roundwright is run from the United States, and our service providers process data in the United States.
Changes
If we change this policy, we'll update the date above, and tell you in the app or by email if the change is significant.
Contact
Chris Crouch, doing business as Roundwright, Florida, USA. support@roundwright.com