What gets collected, why, who touches it, and how to get it deleted.
The short version
Your email and your payment go to running your subscription. The card number never touches our systems — the payment processor holds it. Nothing is sold, nothing is shared with advertisers, and nothing tracks you. The website counts visits only as totals, with no cookies and nothing that identifies you. On a crew or class licence, the people running it see the work you do for it, listed below. Students aged 13 to 17 use it only through a school, program or employer licence, and a school stays in charge of its students’ records. Ask and it all gets deleted.
Effective November 8, 2026 · Controller: Pipelogic LLC, 850 Euclid Ave Ste 819 #7312, Cleveland, OH 44114 · Questions: [email protected]
What is collected, and why
| What | Why | Kept for |
| Email address and name | To give you an account, send receipts, renewal reminders and correction notices | Until you delete the account |
| Your progress and saved things, when you are signed in | Which self-paced lessons you finished, your best and latest score on each and the questions you still have missed, your saved and recently opened pages, the notes you write on pages, your cut lists and job folders (job names, cut lists and job notes; job photos stay on the phone that took them), your best practice quiz scores, and your settings (text size, light or dark, glove mode and the like), so the website and the app on each of your devices show the same ones. If you turn on phone alerts in the app, we keep that phone's alert address (from Apple or Google) with your email so a crew or class hand-out can reach it; signing out takes it off. Alerts are sent through Google Firebase Cloud Messaging and say only what was handed out and by which crew or class. Only you see them; they are not shown to a foreman, instructor or admin. A certificate you earn carries the name you type and a check code, so anyone you show it to can confirm it on our site. | Until you delete the account |
| Your say messages (20.12), on the website | What you write, the page and the name or details you choose to add, plus your email if you are signed in, so we can write back. Only Pipelogic LLC reads them. | Until you ask us to delete them |
| On a crew, company, school or union hall licence | The licence’s admins, and the foreman or instructor who runs your crew or class, see your name, your email, when you last opened the book, and your practice quiz scores, with the questions you missed and the answers you picked, so they can manage seats and follow the crew or class. They also see which assigned pages you opened, the tasks and assignments you marked done, your lesson quiz scores and missed questions, the JSAs and toolbox talks you signed, the cut list pieces you sent to the cut man, and the photos of your work you add to a task or assignment. The crew’s cut man sees those pieces too. Nothing else about you is shown to them. | Until you are taken off the licence, when all of it is deleted, except the JSAs and toolbox talks you signed. Those stay with the licence as its safety record. |
| Subscription and payment records | To take payment, issue receipts and meet tax and accounting law | 7 years, as the law requires |
| Card details | Never held by us. In the app: Apple (iPhone) or Google (Android) holds the card and we never see any of it. Web: entered directly with Stripe, who is PCI compliant, and we see the last four digits and the expiry | Held by Apple, Google or Stripe, not us |
| Support emails, corrections, suggestions and stories you send | To answer you, to fix the entry you told us about, and — only where you said yes — to share your story with the name you chose | 3 years |
| Photos and files added on a crew or class dashboard | Prints, drawings, photos and documents a foreman, instructor or admin adds to what they hand out or to the Prints tab, and photos of your work you send back on a task or assignment. Only people signed in on that licence can open them, and only the people it was handed to see them in their list. Photos are made smaller on your phone before they are sent, which also takes out the camera’s location. We never look at them or use them for anything else. | Until the person who added it, or the foreman, instructor or admin, deletes it, or deletes what it is on. Your own work photos are deleted when you are taken off the licence. |
| A map pin, if a foreman or instructor taps “Pin where I am now” | So the crew gets directions to a jobsite with no street address. It is the spot the foreman’s phone reports at that moment, saved with the task, JSA or talk they hand out. Nobody’s location is tracked otherwise. | As long as that task, JSA or talk is kept on the licence |
| Visit counts on the website | Cloudflare Web Analytics counts which pages are opened, the site that linked to them (such as a Facebook post or a Google search), the country, and the kind of device and browser, so we can see what brings people in. It sets no cookie, stores nothing on your device, does not fingerprint you and keeps nothing that identifies you. The iPhone and Android apps do not count visits at all. | Only as totals, never tied to you |
| Basic technical logs (IP, device, browser, time) | Security, fraud prevention and keeping the thing running | 90 days |
| Your settings — theme, text size, language | So the book opens how you left it | On your device only; never sent to us. Email preferences (reminders, update notes) are kept with your account so they can be honoured. |
There is no advertising identifier and no behavioural profiling. The only analytics is the website’s visit count in the table above. If that ever changes, this table changes first and you get told.
Who else touches it
Only suppliers who need it to run the service, under contract, and only for that purpose:
- Stripe — takes the payment and holds the card details.
- Apple and Google — take the payment when you subscribe in the iPhone or Android app, under their own privacy policies.
- RevenueCat — tells the app whether a subscription bought through Apple or Google is active. It gets a random ID for the app on your phone, basic details of the phone and app version, and the store’s record of the purchase. It never gets your name or email.
- Google Firebase Cloud Messaging — delivers phone alerts to the app when you have turned them on. It gets your phone’s alert address and the alert itself (what was handed out and by which crew or class). It never gets your email.
- Cloudflare — serves the app and the website, and counts visits to the website as totals (see the table above).
- Supabase — holds your account: your email address, your sign-in and your plan status, and the crew or class work in the table above, including its photos and files.
- Resend — sends sign-in codes and update notices. Stripe sends receipts and renewal reminders.
If a partner's link brought you here, that partner sees that a plan was bought through it, which plan, the date and the amount, so they can be paid their share. They never see your name, email or anything else about you.
Nothing is sold, rented or shared for anybody's advertising. Data may be disclosed if the law requires it, or transferred as part of a sale of the business — in which case you get told first.
Your rights
Wherever you live, you can ask to see what is held, correct it, delete it, get a copy to take elsewhere, or object to a use of it. Email [email protected] and it will be actioned within 30 days, free, and using the service will not get worse because you asked.
- California (CCPA/CPRA): the rights above, plus the right not to be discriminated against for using them. We do not sell or share personal information, and we do not use it for cross-context behavioural advertising — so there is nothing to opt out of. Categories collected are in the table above.
- EU and UK (GDPR): our legal bases are performance of the contract (running your subscription), legal obligation (tax records) and legitimate interests (security, keeping the service up). You may complain to your supervisory authority.
- Deleting your account erases your email, name and settings. Payment and tax records are kept for the period the law requires and then erased.
Students and children
Field Fitter is for people learning or working in a trade. Students aged 13 to 17 can use it only through a seat on a licence from their school, training program, union hall or employer. It is not directed at children under 13, and accounts are not knowingly created for them. If we learn that an account belongs to someone under 13, it is deleted. Write to [email protected] if you believe that has happened.
School licences and student records
When a school or training program gives a student a seat, the school stays in charge of that student’s records. Under FERPA, the federal student privacy law, we act for the school as a “school official” and handle those records only to run Field Fitter for its class:
- Student records are used only to provide the book, the class dashboard and what the instructor sees, as the table above lists.
- They are never sold and never used for advertising, and they are never used to build a profile of a student for anything outside the class.
- The school can ask at any time to see, correct, export or delete its students’ records, and it is done within 30 days. A parent, or a student who is 18 or older, should ask the school, and we help the school answer.
- When the licence ends, the school can ask for its students’ class records to be deleted, and they are deleted within 30 days.
- Where the school has signed a student data privacy agreement with us, it applies as well, and it wins wherever it differs from this policy.
Security
Everything travels encrypted. Access to account data is limited to people who need it. Card data never reaches us. No system is perfect — if a breach affects you, you get told, and any regulator that must be told gets told, within the time the law sets.
Storage on your device
The book keeps your settings in your browser's own storage on your device. That is not a tracking cookie, it is not sent anywhere, and clearing your browser data clears it. Signing in sets one cookie that keeps you signed in. It is strictly necessary for the account to work and is not used for tracking. If you arrive through a partner's link on the website, a second cookie holds that partner's code for 60 days so they get credit if you subscribe. It holds nothing about you, and clearing your browser data clears it.
Where the data sits
Held in the United States. If you are outside it, your data is transferred there under the safeguards the law requires, such as standard contractual clauses.
Changes
If this policy changes in a way that matters, you get an email at least 30 days before it takes effect. The date at the top always tells you which version you are reading.