Privacy Policy

This policy explains what Marco Eid, doing business as Breeze Tech ("Breeze Tech," "we," "us") collects through the ContractIn app, why, and who it's shared with. It applies to ContractIn on iOS and to this website.

ContractIn turns a contractor's spoken site walk into a priced, client-ready estimate. Doing that means recording audio, sending it to a transcription service, and matching what was said against the contractor's own price list — so this policy covers voice recordings and the client details a contractor enters, not just account information.

Questions about any of this: [email protected].

All of it comes from you, using the app. We don't buy data about you from anyone.

Account & business profile: your email address (used to sign in with a one-time code — we never see or store a password), business name, logo, license number, phone number and business address, and your language and currency preferences.

Your price list ("Catalog"): the names, descriptions, units and prices of the services and materials you sell.

Site walk recordings and transcripts: the audio you record while walking a job, and the text our transcription provider generates from it.

Estimates and client information: any client name, phone number, email address or job-site address you type in or mention in a recording, plus the line items, quantities, prices and totals ContractIn builds from your catalog and the walk.

Imported price lists: a photo, screenshot, PDF or CSV you choose to import. It's used once, to read the items into your catalog, and then deleted — we don't keep a copy of the original file.

Device and diagnostic data: a push notification token (so we can tell you when an estimate is ready), and, if you've opted into crash reporting, a technical error report with no client names, prices or transcripts attached.

To turn your recording into an estimate: transcribing the audio, matching it against your catalog, and generating the PDF you send to a client.

To run your account: signing you in, keeping your catalog and estimates in sync across devices, and applying the settings (currency, tax, language) you've chosen.

To tell you when something needs your attention: a push notification when an estimate finishes processing, and a reminder if a client hasn't responded in a few days.

To keep the app working and secure: rate-limiting abusive use of the AI pipeline, and, if enabled, diagnosing crashes.

We do not use your data for advertising, we do not build advertising profiles, and we do not sell or rent your personal information to anyone.

We use a small number of service providers to run ContractIn. None of them see data beyond what their job requires, and none of them are permitted to use it for their own purposes.

• Supabase — hosts our database, authentication and file storage. Your recordings, transcripts, catalog and estimates live here, encrypted, in a private storage bucket scoped to your account only.
• Google (Gemini API, paid tier) — transcribes your site-walk audio and matches it against your catalog to draft an estimate. We use Gemini's paid API specifically because, under Google's terms, data sent through it is not used to train Google's models and is not reviewed by humans to improve their products — unlike Google's free tier.
• Resend — delivers the email containing your one-time sign-in code.
• Cloudflare (Turnstile) — a bot-detection check shown on the sign-in screen. It sees your device and network signals (like an IP address), not your email or app data.
• Expo — delivers push notifications using the device token mentioned above; it does not see the content of the notification's source data.
• Sentry — optional crash reporting, off in our development builds. When enabled, it never receives default personal identifiers, and screen-recording ('session replay') is disabled, because a screen in this app can contain a client's name and a job-site address.
• Apple — processes any App Store subscription payment. We never receive or store your card details; Apple shares with us only that your subscription is active.

Your estimates, prices and recordings are never shared with other contractors using ContractIn, and never shared with your clients directly — you choose what to send them, and how (WhatsApp, SMS, email, or however you share the PDF).

We disclose information if required by law, or to protect the rights, property or safety of Breeze Tech, our users, or the public.

Your account data — profile, catalog, estimates, recordings and transcripts — is kept for as long as your account is active, so you can revisit past estimates and reuse your catalog.

An imported price-list photo, screenshot, PDF or CSV is deleted from our storage immediately after its items are read into your catalog.

Deleting your account (in the app: Settings → "Delete my account") permanently and immediately removes your profile, catalog, estimates, estimate line items, recordings, transcripts and push token. This can't be undone. You can also request deletion by emailing [email protected].

Depending on where you live, you may have rights under laws like the GDPR (EU/UK), LGPD (Brazil) or CCPA/CPRA (California) to access, correct, export or delete your personal information, and to object to or restrict some kinds of processing.

You can exercise most of these yourself, at any time, in the app: edit your profile and catalog directly in Settings, or delete your entire account and everything tied to it from the same screen. For anything else — including a request to export your data — email us at the address below and we'll respond within 30 days.

If you're in the EU, UK or a jurisdiction with a data protection authority, you also have the right to lodge a complaint with your local authority.

Data is encrypted in transit (TLS) and at rest. Your files are stored in a private storage bucket that only your account can read or write to, enforced by row-level security at the database. Optionally, you can lock the app itself with Face ID.

No method of transmission or storage is perfectly secure, and we can't guarantee absolute security — but nothing above is treated as an afterthought.

Our service providers process data in the United States. If you're using ContractIn from Brazil, the EU, the UK or elsewhere, your information will be transferred to and processed in the US, under the standard contractual safeguards each provider offers for cross-border transfers.

ContractIn is a business tool for contractors and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.

If we make a material change to how we handle your information, we'll update the effective date below and, where the change is significant, notify you in the app.

Questions, requests or concerns about this policy: [email protected]. We aim to respond within two business days.