KORVEX — Privacy Policy

KORVEX (“the app”, “we”, “us”) is a job-management app for construction and renovation crews. This policy explains what information the app handles, where it is stored, and the choices you have. KORVEX is designed to be local-first and bring-your-own-cloud: your data lives on your device and in a cloud account you control. We do not operate a central server that collects your job data.

1. Information the app handles

All of the following is entered or created by you, stored on your device, and — only if you enable syncing — copied to the cloud account you connect:

• Business & contact details — company name, owner/foreman name, email, phone, and address.
• Clients and crew — names, phone numbers, email addresses, and job-site addresses you record.
• Jobs, estimates & budgets — job details, line-item pricing, costs, notes, checklists, and payment/amount figures you enter.
• Labour & hours — worker names and the hours logged against a job, which may be included in the reports you generate and send (see section 4).
• Photos and videos — job-site and progress photos and videos you capture, import from your device, or attach.
• Signatures — customer sign-off signatures you capture on the device.

We (the developer) do not receive, store, or have access to any of this information.

2. Where your data is stored

• On your device — the app keeps its data in its private app storage. Uninstalling the app removes this local data.
• Your own cloud (optional) — if you connect a Nextcloud/WebDAV server or a Google Drive account, the app uploads a backup bundle and any photos or videos you choose to share to your account. That data is governed by that provider’s terms and your account settings, not by us.
• Your own KORVEX Server (optional) — if you pair the app with KORVEX Server running on your own Windows computer, your jobs, hours, photos, and sign-offs sync to that server over your own network. That data stays on the computer you run; it is not sent to us.

3. Google account and Google Drive

If you choose Google Drive as a cloud or sharing destination, KORVEX uses Google Sign-In and the Google Drive API. KORVEX requests only the drive.file scope, which limits the app to files and folders it creates in your Drive — the app cannot see or access your other Drive files.

KORVEX’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is used solely to upload and share the photos and videos you select, is never sold or transferred to third parties except as needed to provide this feature, and is not used for advertising.

4. Email (SMTP)

If you configure email sending, KORVEX connects directly to the mail server (SMTP) you provide, using the credentials you enter, to send the messages you initiate — for example, a photo or video link, or a PDF report to a client or to your own office. Reports you send may include job details and crew information such as worker names and hours logged. Your mail-server credentials are stored on your device and are used only to send your email. We do not receive your email credentials or messages.

5. Device permissions

• Camera / Photos & videos — to capture, import, or attach job photos and videos (only when you choose to).
• Internet — to sync with your cloud, share links, and send email you initiate.
• Biometrics — if you enable it, fingerprint/face is used locally to unlock the business profile. Biometric data never leaves your device and is handled by Android, not by the app.

6. What we collect

KORVEX contains no advertising, no third-party analytics or tracking SDKs, and does not transmit your data to the developer. The app can generate a diagnostic log (recent app activity and any crash traces) on your device, which you may choose to copy or share with us to report a problem — this is only ever sent if you initiate it.

7. Sharing and disclosure

We do not sell, rent, or share your information. Data leaves your device only to the destinations you choose — your own cloud account, the apps you pick from your device’s share sheet, or the email recipients you enter when sharing. Public share links you create (for example, a Nextcloud photo or video link) are accessible to anyone who has the link; you can set link expiry and an optional password where the provider supports it.

8. Data security

Network connections to your cloud and mail server use encryption in transit (HTTPS/TLS). You can protect the business profile with a PIN and optional biometric unlock. Please note that on-device PIN protection is a deterrent for shared devices, not a guarantee of security, and the overall security of your synced data also depends on your cloud provider and account practices (use a strong, unique app password).

9. Data retention and deletion

You control your data. Uninstalling KORVEX deletes its local data from your device. Data you uploaded to your own cloud remains there until you delete it from that account. Backups and shared folders can be removed directly in your Nextcloud or Google Drive.

10. Children’s privacy

KORVEX is a business tool intended for tradespeople and is not directed to children under 13 (or the equivalent minimum age in your region). We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by updating the “Last updated” date at the top of this page.

12. Contact

Questions about this policy or your data? Contact the developer at admin@hackitzlabs.net.

This document is a general privacy policy for the KORVEX app and is provided for convenience. It is not legal advice; you may wish to have it reviewed against the requirements of your jurisdiction and business before publishing.