Your data, treated with care.

Who we are

Crewva provides workforce, compliance and site management software for the construction industry. This policy explains what personal data we process when you or your employer use the Crewva portal and the Crewva worker app.

What we collect

• Account details such as name, email, phone and employer.
• Employment and compliance records uploaded by your employer.
• Site attendance events (check in, check out, site assignment, signed documents).
• Device and diagnostic information needed to run the app securely.
• Approximate and precise location, only as described below.

The Crewva worker app uses location to confirm that a worker is physically present on an assigned site at check in, and to automatically sign a worker out when they leave that site. This section explains exactly how it works.

Background location use

After a successful check in, the app may use background location to detect when you leave the site geofence. The app does this only while you are checked in to an active shift. Background location stops as soon as you are checked out, sign out of the app, or revoke the permission.

Geofence based automatic sign out

Each site has a small geofence around its registered address. If you leave that geofence while checked in, Crewva records an automatic check out at the time the boundary was crossed. This protects workers from being marked as on site when they are not, and gives accurate attendance records to the employer.

What we do not track

• We do not track your location when you are not checked in to a site.
• We do not build a movement history or location trail.
• We do not share live location with your employer, with other workers, or with any advertiser or third party.
• We do not use location for marketing, profiling, or behavioural advertising.

Consent is required

Location sharing is opt in. The app asks for your explicit consent before using location, and your decision is recorded against your account at the moment of check in. You can revoke location permission at any time in your device settings. If location permission is off, check in via geofence will not be available and your employer may require an alternative method.

Retention

Attendance records, including the check in and check out coordinates, are retained for 24 months for compliance, payroll and dispute resolution, then deleted or fully anonymised. Raw background location pings that do not correspond to a site boundary event are not stored.

Data is encrypted in transit and at rest. Access is restricted using row level security so that each company can only see its own records. Crewva staff access is logged and limited to support and maintenance.

If you are in the UK or EEA, you have the right to access, correct, export, restrict or delete your personal data, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority (for UK residents, the Information Commissioner's Office). To exercise any of these rights, contact us at the email below and we will respond within 30 days.

We keep personal data only as long as needed for the purpose it was collected. Account data is kept while your employer's account is active and for up to 24 months after closure. Attendance and compliance records are kept for 24 months. You may request earlier deletion subject to legal obligations such as health and safety record keeping.

We use a small number of trusted subprocessors to run the service. Each is bound by a data processing agreement and only processes data on our instructions:

• Supabase (EU region) — database, authentication, file storage and serverless functions.
• Cloudflare — application hosting, edge delivery and DDoS protection.
• Stripe — subscription billing and payment processing for company accounts. Card details are handled directly by Stripe; we never see or store them.
• Resend — transactional and authentication email delivery (sign-in links, invites, notifications).
• Google — Google Places and Google Maps APIs for site address search and geocoding. Anthropic and Google AI models are used via server-side gateways to generate compliance documents; no personal worker data is sent to model providers for training.
• Apple and Google — the App Store and Google Play distribute the Crewva worker app and provide device push notification delivery.

A current subprocessor list is available on request from privacy@crewva.ai.

You can request deletion of your account and personal data at any time. See our Data deletion page for the exact steps, retention rules and contact route.

For any privacy question, data request, or to report a concern, contact our team at privacy@crewva.ai.

See also our homepage for more about Crewva.