Privacy Policy

Who this policy is for

Forge Field is a workforce time-tracking app. It is provided to employees of Ironwood Grounds & Excavation for recording work hours. It is not a consumer app and is not offered to the general public.

What is collected

• Location — a single coordinate captured at each clock-in and clock-out, with an accuracy estimate. If location is unavailable or switched off, the punch still goes through and is simply marked "no location."
• Time records — clock-in/out times, breaks, and the job selected.
• Work photos — photos you deliberately take in the app, or deliberately choose from your phone’s photo library, to document job progress, a receipt, or pre-existing damage. Only the ones you pick are read, and the record notes which of the two ways each one arrived. A photo taken in the app is stamped with the time and place it was taken; a photo you import is stamped with the time and place you filed it — this app never reads the date or location stored inside a file you choose.
• Account details — your name, the work email address you sign in with, the password you choose (stored only as a salted, peppered one-way hash — it cannot be read back, by us or by your employer), and any phone number your employer records for you. A one-time code is emailed to you when you first set the account up and if you ever need to recover it.
• Home address — optional, and yours to set or clear. It is what the "directions home" chip drives, and it is used for nothing else. It is erased when you delete your account.
• Pay rate and job costs — the hourly rate your employer records for you, the totals it produces on quotes and job costs, and the amounts on receipts filed against a job. This is your employer’s payroll record, and it is kept when you delete your account for the same reason your hours are.
• Work notes — the text you type into a daily log or a damage report, and a note your employer may keep on your record.
• Receipts and documents — the vendor, total, date and note on a receipt you file, and paperwork your office publishes to a job.
• Security log — sign-in attempts, code requests and password changes, each stamped with the time and the IP address they came from. It is what stops somebody guessing their way into your account, and it is kept after deletion for that reason.

What is NOT collected

• No background or continuous location tracking.
• No location when you are off the clock.
• No browsing of your photo library — the app cannot read it. Choosing a photo opens your phone's own picker, and only the file you hand back is uploaded.
• Nothing written back to your camera roll — a photo taken with the in-app camera is stored in Forge Field and is not saved to your device.
• No contacts, browsing history, microphone, or advertising identifiers.

How it is used

Solely to produce accurate time and job records for Ironwood Grounds & Excavation — confirming which site a punch happened at, calculating hours and overtime, and documenting job conditions.

Who can see it

Ironwood Grounds & Excavation's owner and managers can see time records and location stamps for their employees. Crew members see their own hours. This data is not sold, not rented, and never shared with advertisers or data brokers.

It is shared with a short list of named service providers that process it under contract, only to run features this policy already describes — never for their own purposes, never for advertising, and never combined with data from another company’s users:

• Resend — Sign-in codes, account invitations, email verification and account notices are delivered through this email provider. It receives the recipient's email address and name, the company name, and the contents of that one message — which for a sign-in or recovery email includes the one-time code itself.

Beyond that, it is not shared outside Ironwood Grounds & Excavation except where required by law or as strictly necessary for the cloud hosting providers that operate the service.

Retention

Records are kept for as long as Ironwood Grounds & Excavation needs them for payroll, tax, and job-costing purposes, consistent with applicable recordkeeping requirements.

How it is protected

All data is sent over an encrypted HTTPS connection and stored on managed cloud infrastructure. Signing in takes your work email address and a password you choose. Passwords are never stored in readable form: each one is put through 100,000 rounds of PBKDF2-HMAC-SHA256 with a random per-account salt and a server-held secret, so the stored value cannot be turned back into your password. A one-time code emailed to your work address is used to set the account up the first time and to recover it if you are locked out; those codes are short-lived and single-use. Each person only sees what their role allows.

Your choices

Location permission can be denied or revoked at any time in your device settings — the app continues to work and punches are recorded as "no location." To access or correct your personal data, or to ask what is held about you, contact Ironwood Grounds & Excavation directly.

Deleting your account and data

You can delete your own account from inside the app, by yourself. Tap the gear in the top bar — it is on every screen — and scroll to the bottom of the sheet: below the App section and the Sign out button, the last row is Delete my account. Confirm with your password. Nobody has to approve it and there is no request to file with Ironwood Grounds & Excavation: it happens the moment you confirm. Signing in stops working immediately, on that phone and every other device, and your email address, password, phone number, home address and personal settings are removed.

What stays is your name, your hours, the pay rate applied to them, and the jobsite location recorded at each punch — those are Ironwood Grounds & Excavation's payroll records, and an employer is required to keep payroll records that say who was paid. One thing more stays, and it is not a payroll record: a security log of account events — an access code issued or used, an emergency account recovery, this deletion — each one stamped with the network address it came from. That log holds no email address, but it does hold the account it belongs to, so the address is tied to the name that was kept. It stays because a record of who could get into a payroll system is the only thing that can ever answer whether somebody did. The full bargain, including what is kept and why, and what to do if you no longer have the app installed, is set out at /account-deletion.

Children

Forge Field is not directed to children and is not intended for anyone under the minimum legal working age.

Changes

If this policy changes materially, the updated version will be posted at this address.

Contact

Questions about this policy, or about your own data, should go to Ironwood Grounds & Excavation.