Privacy Policy
Altitude Services mobile app. Last updated 9 November 2026.
Who is responsible for your data
Altitude Services Limited, company number 03350786, registered office Unit 10b 1, Dean Court, Shuttleworth Mead Business Park, Padiham, Burnley, BB12 7NG, is the data controller. Contact us about privacy at joshua.howarth15@gmail.com.
What we collect
- Account details: your first name, last name, email address and phone number, plus your password. Passwords go directly to our sign-in provider, and we never see them.
- Work records: timesheets and drafts, including the date, site, company, contract, people on the job, works carried out, plant, vehicle registrations, daily checks and lodging, and your signature.
- Technical data: IP address, the time and type of each request to our servers, app version, device and operating system details, and crash reports.
Account details and work records are needed to use the app, and we cannot provide it without them.
Device permissions
The Android app declares permission to access shared storage. You can revoke permissions in your device settings, although some features may then stop working. The current app does not use your location, camera or contacts. It keeps your email address and sign-in tokens on your device so you can stay signed in.
Why we use it, and our legal basis
- Running the app and recording your work: this is needed for your contract with us, or for our legitimate interest in keeping accurate work and payroll records.
- Security, fixing faults and keeping the service running: this is our legitimate interest.
- Meeting legal duties and handling legal claims: this is a legal obligation, or our legitimate interest in protecting our rights.
We do not sell your data, show advertising or use your data for marketing.
Who can see it
Altitude's admins and office staff can see work records, and people named on a timesheet may be shown on it. The app's developer can access data when maintaining the service. We also use these service providers:
| Provider | What it does | Location |
|---|---|---|
| Amazon Web Services | Account sign-in (Cognito): account details and password. | London |
| DigitalOcean | Runs the server the app talks to, and stores signature images. | London |
| Cloudflare | Carries all traffic between the app and our server and protects the server. It decrypts traffic in transit to do this. It also hosts this page. | Global network, provider based in the US |
| MongoDB Cloud | The database holding accounts and work records. | Provider based in the US |
| Dropbox | Stores timesheet PDFs and the master timesheet spreadsheet: names, dates, sites and work details. | Provider based in the US |
| Slack | Receives alerts when the server has an error. An alert may include the content of the request that failed. | Provider based in the US |
| Sentry | Crash reporting: the error, device details, and your account ID and name. Screenshots and timesheet content are not deliberately sent. | Germany, provider based in the US |
| Expo | Delivers app updates: an anonymous per-installation ID, the app version and the platform. | Provider based in the US |
We may use other hosting and network suppliers to keep the service running. We may also share data where the law requires it, or to deal with a legal claim.
Transfers outside the UK
Some providers process data outside the UK, including in the US. We rely on the safeguards they offer under UK data protection law, such as adequacy regulations or standard contractual clauses. Ask us if you would like details.
How long we keep it
We keep personal data for as long as we need it for the purposes above. We keep it longer where the law requires, or where it is needed for a legal claim. Timesheets are business records, so they may be kept after your account closes. A timesheet removed in the app may also stay in our records and backups.
Security
Current versions of the app use encrypted connections, and access to our systems is restricted. Please keep the app up to date.
Your rights
Under UK data protection law you can ask for a copy of your data, and ask us to correct or delete it. You can also ask us to restrict how we use it, object to our use of it, or send it to you in a portable format. These rights have limits, and we may need to keep some records. We reply within one month, and there is normally no charge.
To delete your account, email us from the address on the account. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office.
Changes to this policy
We will update this page when our use of data changes and change the date at the top. We will tell you in the app or by email if a change is significant.