Privacy Policy
Effective date: August 5, 2026
Gambo Labs, LLC ("Gambo Labs," "we," "us," or "our") operates CrewDoc (the "App"), a native iOS application for service contractors to capture proof-of-work photos, checklists, and voice notes and generate customer-ready reports. This Privacy Policy explains what data the App handles, how it's stored, and what choices you have. It applies to the App and to the CrewDoc marketing website (together, the "Service").
By using CrewDoc, you agree to the practices described in this Privacy Policy.
The short version
CrewDoc is built so that your job data stays yours. Everything you create in the App is stored on your device first, and works fully offline.
What leaves your device depends on whether you're signed in:
- Signed out. Nothing you create reaches us. Jobs, photos, checklists, recordings, transcripts, and reports stay on your device and sync only to your own iCloud account via Apple's CloudKit.
- Signed in (Sign in with Apple). Two things are backed up to storage we operate: your job photos, and your job records — the job's number, customer name, service address, phone, email, notes, status, and dates. That's what lets your work survive a lost phone and lets everyone on your crew see the same jobs. We also store account information — who you are, your business's contact details, your plan, and monthly usage counts. Checklists, voice recordings, transcripts, and generated PDF reports are still never uploaded; they stay on your device and in your own iCloud.
We don't sell your data, we don't use it for advertising, and we don't use your photos or job records to train AI models. We hold them for one reason: so you and your crew can get to them. Creating an account is optional; the App's core features work without one, and without an account we hold nothing.
One thing to be aware of, because it's your customers' information, not just yours: the job records you upload contain your customers' names, addresses, and contact details. Everyone you add to your CrewDoc account can see them. Only add people you'd hand your customer list to.
Job content we never collect
Even when you're signed in, the following is created and stored entirely on your device and, if you're signed into iCloud, mirrored to your private CloudKit database — a storage space tied to your personal Apple ID that only you (and devices signed into that Apple ID) can access. We do not receive, store, or have access to any of it:
- Checklists and their completion state
- Voice recordings and their transcripts
- AI-generated summaries of your recordings
- The PDF reports you generate, and any customer signature captured on one
Apple's own privacy terms govern the CloudKit half; see Apple's Privacy Policy at apple.com/legal/privacy.
Job records we store for you
If you're signed into a CrewDoc account, the jobs you create are stored on our account service so they're available to you on any device and to everyone on your crew.
What a job record contains: the job number, your customer's name, the service address, their phone number and email if you entered them, your notes, the service type, the job's status and dates, the technician name, and the address's approximate coordinates.
Who can see it: only the active members of your CrewDoc account. Access is enforced at the database level, scoped to your account. Gambo Labs staff do not browse customer records; we access them only when you ask us to (for example, a support request) or where we're legally required to.
How long we keep it: while your account exists. Deleting a job removes it from our servers — we keep a deletion marker for up to 90 days so the delete reaches every device on the crew, then that goes too.
Your customers' information is your responsibility. You decide what to enter and who to put on your crew. If your customers have privacy rights where you operate, you're the one who holds the relationship with them; we process this information on your behalf so we can run the Service for you.
Photos we store for you
If you're signed into a CrewDoc account, the photos you take in the App are uploaded to private storage that Gambo Labs operates (hosted for us by Supabase, Inc. on infrastructure in the United States). This is the feature that lets your work survive a lost, wiped, or replaced phone, and that lets a crew member's photos land in the same account as everyone else's.
What's uploaded with each photo: the image itself, a thumbnail, the time it was taken, the job it belongs to, its label (Before/After/Damage), which account member uploaded it, and — if you've granted Location access — the GPS coordinates captured at the shutter, which are what make a report usable as proof of work.
Who can see it: only the active members of your CrewDoc account. Storage is private and access is enforced at the database level, scoped to your account — not by the app asking politely. Gambo Labs staff do not browse customer photos; we access them only when you ask us to (for example, a support request to recover a job) or where we're legally required to.
How long we keep it: on the Free plan, full-resolution originals are kept for the period shown in the App (30 days at the time of writing) and then deleted, leaving the thumbnail. On CrewDoc Pro, originals are kept while your subscription is active. Thumbnails are kept while your account is active. The current retention period is always displayed in Settings → Photo Backup.
How to stop it: don't sign in, or sign out — photo backup requires an account and never runs without one. Deleting a photo in the App deletes our copy of it. Deleting your account deletes every photo we hold for you.
What we never do with it: we don't sell it, we don't use it for advertising, we don't use it to train AI models, and we don't share it with anyone outside the infrastructure providers that host it for us.
Information the App accesses on your device
CrewDoc requests the following permissions, each used only for the stated purpose. Everything below is processed on-device; the "leaves your device" column says what, if anything, is uploaded when you're signed in.
| Permission | Why CrewDoc asks for it | Leaves your device? |
|---|---|---|
| Camera | To capture before/after job photos. | Yes — photos are backed up to CrewDoc when you're signed in. |
| Location (While Using) | To GPS-tag photos and jobs so your reports hold up as proof of work. | The coordinates captured at the shutter travel with a backed-up photo, and a job's address coordinates travel with its job record. We never collect continuous or background location. |
| Photo Library (Add Only) | Only if you choose to export a report PDF or photo to your Photos library. | No. |
| Microphone | To record client walkthroughs so you don't have to write notes while talking and walking the site. | No — recordings never leave your device or your own iCloud. |
| Speech Recognition | To transcribe your walkthrough recordings. Transcription happens entirely on-device using Apple's on-device Speech framework — audio is never sent to Apple's servers or ours for this purpose. | No. |
CrewDoc also uses Apple's on-device Apple Intelligence models (where available on your device and OS version) to generate bullet-point summaries of your recorded walkthroughs. This processing happens locally on your device — recordings and transcripts are not sent to Gambo Labs or to any third-party AI service for summarization.
You can review or revoke any of these permissions at any time in iOS Settings → CrewDoc.
Account information we do collect
If you sign in with Apple to create a CrewDoc account, we store the following on our account service (hosted for us by Supabase, Inc. on infrastructure in the United States):
- Your Apple sign-in identifier, and your name and email address if you chose to share them with us at sign-in (Apple's "Hide My Email" is fully supported)
- The business information you enter for your reports: business name, phone, email, and address
- Your plan (Free or CrewDoc Pro), subscription status, and billing period dates
- Monthly usage counts (number of jobs, photos, and reports created) used to apply Free-plan limits
- If you upgrade, saved branding preferences (logo reference, colors, report style)
We use this information only to operate your account: syncing your plan across devices, applying plan limits, and managing your subscription. We do not sell it or use it for advertising. Your checklists, recordings, transcripts, and generated reports are never stored on this service — they stay on your device and in your own iCloud account as described above.
To delete your account and everything we hold for it, use Settings → Account → Delete Account in the App, or contact us at the address below.
Subscription and payment information
CrewDoc Pro is sold and billed entirely through Apple's App Store / StoreKit. Gambo Labs does not receive or store your payment card details — Apple handles billing, and Apple's own privacy practices govern that transaction. When you subscribe, Apple's servers notify our account service of your subscription's status (such as purchases, renewals, cancellations, and refunds, referenced by an Apple transaction identifier tied to your CrewDoc account) so the App can unlock or restrict CrewDoc Pro features. We never see your payment details.
Information we may collect directly
If you contact us for support (for example, by email), we'll have whatever information you choose to include in that message, such as your name, email address, and the content of your inquiry. We use this only to respond to you and to improve the App, and we don't sell it.
The CrewDoc marketing website does not use third-party advertising trackers. If we add basic, privacy-respecting analytics in the future (e.g., aggregate page-view counts), we will update this policy first.
Devices and team members
CrewDoc plans include a limited number of active account members (one on the Free plan; up to three with CrewDoc Pro). Member counts are tracked as part of the account information described above.
Everything in an account is shared across its members. Jobs and photos created by any member are visible to every active member, and each record notes who created it. Joining someone else's crew — by entering their invite code — moves you onto their account and off your own; a person can be on one account at a time. Removing someone from a crew ends their access immediately but does not delete the work they contributed, which belongs to the business.
An account owner can see the name or email associated with each member's Apple ID, as shown on the Crew screen. Nothing else about a member's Apple ID is visible to anyone. The App may also store a small "device registration" record (a device identifier and name) in your own private CloudKit database — this is used only to let the App show you which of your own devices are active, and is never visible to Gambo Labs.
Data retention and deletion
You are in control of your data, and the controls differ by where it lives:
- Deleting a job, photo, checklist, or recording in the App deletes it locally and removes it from your CloudKit database on next sync. Deleting a photo also deletes our backed-up copy of it.
- Deleting the App removes local data from that device; data already synced to iCloud remains in your private CloudKit database until you delete it there (e.g., via iOS Settings → [your name] → iCloud → Manage Account Storage) or delete it from within the App on another signed-in device.
- Backed-up photos are retained for the periods described under "Photos we store for you" above, and are deleted when you delete the photo or your account.
- Job records are deleted when you delete the job. A deletion marker is kept for up to 90 days so the delete propagates to every device on your crew, then it's removed entirely.
- Because we never hold a copy of your checklists, recordings, transcripts, or reports, we have none of those to delete on our end.
- Your account information (the sign-in identity, business details, plan, and usage counts described above) is retained while your account exists.
- Deleting your account — Settings → Account → Delete Account — permanently removes your sign-in identity, business details, plan, usage counts, and every photo we hold for that account. It does not delete anything on your device. An active subscription must be cancelled separately through Apple.
Children's privacy
CrewDoc is a business tool intended for contractors and tradespeople and is not directed at children. We do not knowingly collect information from anyone under 13.
International use
CrewDoc relies on Apple's CloudKit and StoreKit infrastructure, which may store and process data in different countries depending on your Apple ID's region settings, consistent with Apple's own data-residency practices. Account information and backed-up photos are stored on infrastructure in the United States. If you use CrewDoc from outside the United States, you're consenting to that transfer.
Changes to this policy
We may update this Privacy Policy from time to time, for example as we add features. We'll update the "Effective date" above and, for material changes, provide notice within the App or on the CrewDoc website.
Contact us
If you have questions about this Privacy Policy or CrewDoc's data practices, contact:
Gambo Labs, LLC
Email: support@crewdoc.app