Privacy Policy

Last updated: June 16, 2026

Job Holster ("Job Holster," "we," "us," "our") is operated by Jobholster LLC, a company registered in Missouri, United States. This policy explains, in plain language, what data the Job Holster mobile and web app ("the app") collects, why we collect it, who we share it with, and the choices you have. Questions? Email [email protected].

The short version

We collect your account email, the client and job information you enter, basic usage analytics, crash reports, and your subscription status.
Your client records are stored with access controls, and your optional cloud backup is end-to-end encrypted. We cannot read it.
We do not sell your data, we do not use it for advertising, and we do not track you across other apps or websites.
You can delete your account and all of its data from inside the app at any time.

Who the data belongs to

Job Holster is a tool for tradespeople to track their own jobs and clients. Much of what you enter (your clients' names, phone numbers, addresses, photos, and notes) is personal information about other people. You are responsible for having a lawful basis to store that information; you act as its controller, and we process it on your behalf to provide the app.

What we collect and why

Account information. Your email address and authentication credentials, handled by our authentication provider, to create and secure your account. If you sign in with Apple or Google, we receive a unique identifier and your email address from them. Nothing else.
Content you create. Client and job records: names, phone numbers, addresses, custom fields, tags, field-change history, pasted messages, notes, voice-memo audio, AI-cleaned transcripts, photos, and drawings. This is stored to provide the app's core function and to sync across your devices. Your optional cloud backup is end-to-end encrypted with a passphrase only you hold. We store only ciphertext and cannot read it.
Usage analytics. We use a product-analytics service to understand which features are used so we can improve the app. These events are tied only to a random account identifier (a UUID). Never your email, your name, or any client content. Autocapture and session recording are turned off. You can opt out any time in Settings → Privacy.
Crash diagnostics. We use a crash-reporting service to receive crash reports (error details, device model, OS version) so we can fix bugs. Crash reports do not include your client content.
Photo location (optional). If photo location tagging is on, the app reads your device location when you add a photo so it can stamp that photo with where the work happened. The coordinates are turned into a place name by our reverse-geocoding provider, BigDataCloud, and kept with that photo on your own jobs. Location is used only for this. There is no background or continuous location, and it is never used for tracking or advertising. You can turn photo tagging off in Settings → Privacy, or deny the location permission, and still use every other part of the app.
Subscription information. If you subscribe, our subscription-management provider, together with Apple or Google, processes the purchase and tells us your subscription status so we can unlock paid features. We never receive your full payment-card details.
AI features. When you use the "Analyze a message" or "Format with AI" features, the content you choose to analyze (pasted text or a shared screenshot) and, for matching, the names, phones, and addresses of your existing clients, is sent through our AI proxy to our third-party AI provider, Anthropic (Claude), to extract job details. When you record a voice memo, the recorded audio is sent to our transcription provider, Cloudflare (specifically Cloudflare Workers AI, which runs the OpenAI Whisper speech-recognition model on Cloudflare's own infrastructure), to convert your speech to text. Both happen only after you agree to the in-app AI notice, and only for the items you choose to send. This data is used solely to perform your request and, per these providers' terms, is not used to train their models; the audio is not sent to our message-AI provider. Photos you attach to jobs, your password, and other clients' data are never sent to the AI provider. You can use the app without the AI features.

Who we share data with

We share data only with service providers ("processors") who handle it on our behalf under contract, solely to run the app:

Provider	What they handle
Supabase	Cloud database, authentication / sign-in, and encrypted backup storage
Cloudflare	App hosting / CDN, relaying AI requests through our proxy, and voice-memo transcription (Cloudflare Workers AI running the OpenAI Whisper model)
PostHog	Anonymous product analytics, tied to a random ID only
Sentry	Crash diagnostics so we can fix bugs
RevenueCat, with Apple & Google	Subscription processing and billing
Resend	Account and team-invitation email delivery
BigDataCloud	If you turn on photo location tagging: turning a photo's coordinates into a place name (reverse geocoding)
Anthropic (Claude)	Third-party AI: extracting job details from content you choose to analyze (details below)
Intuit / QuickBooks	If you connect QuickBooks: syncing the customers and jobs you choose to share (details below)
Apple, Google	Sign in with Apple / Google (if you use it) and App Store / Google Play subscription billing

Sharing with third-party AI. Personal data is shared with our third-party AI provider only when you choose to use an AI feature ("Analyze a message" or "Format with AI"), and only after you have agreed to an in-app notice that tells you what is sent and to whom. What is shared: the text or screenshot you submit for analysis and, for matching, the names, phone numbers, and addresses of your existing clients. It is used solely to fulfill that request and, per our provider's terms, is not used to train AI models. Our AI provider is contractually bound to protect this information to a standard at least equivalent to the protections described in this policy, to use it only to process your request, and not to retain it for training or any other purpose. The AI features are optional. The app works fully without them, and you can turn them off at any time in Settings → Privacy.

Connecting QuickBooks (Intuit). If you choose to connect your QuickBooks account, the customer and job details you select to sync are shared with Intuit so it can create and update the matching records in your QuickBooks. This happens only for a connection you explicitly authorize through Intuit's secure sign-in, only for the data you choose to send, and you can disconnect at any time in the app. Intuit then processes that data under its own privacy policy. We request only the QuickBooks permissions needed to sync the records you ask us to.

We do not sell your data and we are not a data broker. We may disclose data if required by law or to protect rights and safety. The providers listed above process data on our behalf under contract, in the United States and other countries; where required, appropriate safeguards apply. You can request more detail about any provider at [email protected].

What we do not collect

No device identifiers, no advertising identifier (IDFA), no contact lists, and no calendar entries. The only location we ever use is optional photo tagging, described above, and only if you turn it on.
No access to your phone's SMS, iMessage, or call history. You paste in text yourself.
No cross-app or cross-site tracking, and no advertising.

Each user's data is isolated from every other user's by row-level security at the database layer, so no two accounts can ever see each other's data.

Cookies and local storage

The app uses your browser's localStorage to cache your data for offline access and to remember your sign-in session. It does not set tracking cookies. If you sign out and clear browser data, the local cache is removed.

Deleting your account

You can permanently delete your account and all associated data at any time from inside the app: open Account → Delete my account, type the confirmation phrase, and confirm. Deletion is immediate and removes your sign-in identity, all client records, messages, notes, attachments, voice memos, encrypted backups, organization memberships, and AI usage history. If you can no longer access the app, see our account-deletion page for an email-based request process. Aggregated, non-identifiable analytics events and anonymized server logs may persist briefly before being purged.

Data retention

We keep your account and content until you delete them. Soft-deleted rows are kept for 30 days before being permanently purged, so accidental deletions can be undone. Disaster-recovery backups taken by our cloud database provider are retained according to that provider's standard backup window and then deleted.

Security

Data is encrypted in transit using HTTPS/TLS. Your cloud backup is end-to-end encrypted. Access controls (row-level security) ensure each account can only reach its own data. No system is perfectly secure, but we take reasonable measures to protect your information.

Your rights and choices

Delete your data: Settings → Delete account (see above).
Turn off analytics: Settings → Privacy.
Access, correct, and export: you can view and export your data in the app at any time; contact us for any additional request.
Depending on where you live (for example, the EEA/UK under GDPR, or California under CCPA/CPRA), you may have additional rights. We do not sell or share your personal information for cross-context behavioral advertising. To exercise any right, email [email protected].

Children

Job Holster is a business tool and is not intended for anyone under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy. If it materially changes, we'll update the "Last updated" date above and surface a notice in the app on next sign-in.

Contact

Jobholster LLC, Missouri, United States. Privacy questions: [email protected]. General support: [email protected].