Privacy
Privacy policy
Effective 30 July 2026
The short version
- No advertising. We run no ads and we work with no ad networks.
- No tracking. We do not track you across other companies’ apps or websites, so you will never see an App Tracking Transparency prompt from us.
- No sale of your data. We do not sell or share your personal information, and we never have.
- No location history. Location is collected only while you are using the app. A plumber’s position is stored as a single value that is overwritten each time it changes, and the live map while a plumber is en route is a real-time broadcast that is never written to a database. We keep no trail of anyone’s movements.
- You can delete everything — from inside the app, or at findplumbers.world/delete-account without the app.
Who this covers
This policy covers the FindPlumbers mobile app and this website, findplumbers.world. FindPlumbers is the controller of the personal information described here. Contact us any time at support@findplumbers.world.
FindPlumbers is a marketplace: it connects customers who need plumbing work with independent licensed plumbers. Some of what follows applies to customers, some to plumbers, and it says which.
What we collect and why
From everyone
- Phone number. It is how you sign in. We send a one-time code by SMS and verify it. We do not read your messages and the app requests no SMS or call-log permission.
- Display name, and a photo if you add one. Shown to the other party on a job.
- Ratings and rating comments you write about the other party.
- Device push token, so we can tell you a plumber accepted or a job came in.
- Crash and diagnostic reports — device model, operating system, app version, and your user id — when something goes wrong.
- Reports you file about another user, and their content, so we can act on them.
From customers
- The job you describe — the problem, the job type, access notes, and a photo if you attach one.
- The job address and map pin, plus any addresses you save. Address search text goes to Google Places to power autocomplete.
- Your precise location while you are using the app, to centre the map and to find plumbers near you.
- Payment method. Card details go directly to Stripe and are never stored on our servers. We hold the last four digits and the name on the card.
From plumbers
- Your plumbing licence number and a photo of the licence, reviewed by a human before you can take jobs.
- Your bio, shown to customers.
- Your precise location while you are available or on a job, to match you to nearby work and to show the customer where you are while you are en route.
- Payout and tax details — bank account and tax identification — collected and held by Stripe as part of its identity verification. We do not see or store them.
We do not request background location, contacts, SMS, call log, microphone or calendar access, and the app declares none of them.
Every service we send data to
This is the complete list. It is the same list we file with Apple’s privacy labels and Google’s Data Safety form. If we add a service, this table changes the same day.
| Service | Data it touches | Linked to identity? | Used for tracking? | Purpose |
|---|---|---|---|---|
| Supabase (auth, database, Realtime, Storage) | Phone number, name, photos, precise location, job text | Yes | No | App functionality |
| Stripe (Connect Express, Payments) | Payment method, name, last 4, plumber bank + tax ID (KYC held by Stripe) | Yes | No | Payments, fraud prevention |
| Expo Notifications (APNs / FCM) | Push token, device identifier | Yes | No | Transactional notifications only |
| Sentry | Crash logs, device model, OS, app version, user id | Yes | No | Diagnostics |
| Google Places Autocomplete | Address search text, approximate location | No | No | Address entry |
| Google Maps / react-native-maps | Precise location while in use | Yes | No | Showing the job and the plumber |
| expo-location | Precise location while in use | Yes | No | Matching and live en-route tracking |
| SMS provider behind Supabase phone auth (e.g. Twilio) | Phone number | Yes | No | Delivering sign-in codes — declared as data shared with a service provider |
Who else sees your information
- The other party on a job. Once a plumber accepts, the customer sees the plumber’s name, photo, rating and licence status, and the plumber sees the customer’s name, the job address and the job description. Before anyone accepts, plumbers see the job and its approximate area — not your identity or your exact address.
- The service providers in the table above, each only for the purpose listed.
- Law enforcement or a regulator, when we are legally required to, or when we believe in good faith that it is necessary to prevent serious harm.
- Nobody else. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not hand it to data brokers.
Location, specifically
Location access is while-in-use only. The app asks for it at the moment it is needed — when a customer opens the map to confirm the job address, and when a plumber toggles themselves available — and explains why in the prompt.
On Android, while a plumber is driving to a job, the app runs a foreground location service with a persistent notification so it is always obvious that location is being shared. It stops when the plumber arrives.
We retain no location history. A plumber’s current position is a single database column that is overwritten every time it updates, and the moving dot the customer watches is an ephemeral real-time broadcast that is never written to a table. There is no journey log to request, export, or leak.
How long we keep things
We keep your account information for as long as your account exists. Financial records — payments, line items and the amounts on completed bookings — are kept for as long as tax and accounting law requires, in the anonymised form described below. Crash reports are kept for a short diagnostic window and then discarded.
Deleting your account
Two ways, one result. In the app: Settings → Delete account. Without the app: findplumbers.world/delete-account, where you confirm your phone number with a code. Both run the same deletion.
What is destroyed
- Your sign-in account and your phone number, and every signed-in session on every device.
- Your display name and profile photo.
- A plumber’s licence number, licence photo, bio and last known location.
- Saved addresses, access notes, job descriptions and job photos.
- The text of every rating comment you wrote, and your authorship of it.
- Your device push tokens — notifications stop immediately.
- Blocks you created or that were created against you.
- Every file you uploaded: avatars, licence images, job photos.
- Your Stripe customer record.
What is retained, anonymised
Some records have to outlive the account, for tax, for reconciliation with Stripe, and so the other person on a job keeps their own history. Everything below is stripped of anything that identifies you, and your profile becomes a tombstone reading “Deleted user”:
- Completed bookings, reduced to the booking id, job type, amounts, platform fee, timestamps and the tombstoned party. The description, access notes, photo and formatted address are erased and the map pin is snapped to a roughly one-kilometre grid.
- Payments and line items, kept in full as financial records.
- Star ratings you received, so the other party’s average is still meaningful. The comments attached to them are erased.
- Reports, with the reporter, the reported user and the written detail all removed — an anonymous record that an incident was handled.
- The booking audit trail, with the actor removed.
- Your deletion request itself, with the phone number removed, as proof the deletion happened.
Stripe, and the 90-day delay
If you are a plumber, your Stripe connected account is not closed on the day you delete. Closure is deferred for approximately 90 days so that any remaining balance pays out on its normal schedule and so a late chargeback on a job you did can still be handled. Nothing in that account is used for anything else during that window, and the anonymised ledger described above is what makes the delay safe. Your FindPlumbers account and the personal data listed above are destroyed immediately, not after 90 days.
When deletion has to wait
We cannot delete an account while a job is still in flight or while money is being held but not yet charged. If that is the case you will be told exactly why and what has to finish first. Nothing stays blocked indefinitely.
Your rights
Depending on where you live — and in California under the CCPA as amended by the CPRA — you have the right to:
- Know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to.
- Access a copy of that information in a portable form.
- Correct personal information that is inaccurate.
- Delete your personal information, subject to the narrow legal and accounting exceptions listed above.
- Limit the use of sensitive personal information. We use precise location only to deliver the service you asked for, which is the one purpose the law already permits without a separate opt-out.
- Opt out of sale or sharing. There is nothing to opt out of: we do not sell personal information and we do not share it for cross-context behavioural advertising. In the last twelve months we have sold or shared none.
- Not be discriminated against for exercising any of these rights. The service works exactly the same either way.
To exercise any of these, email support@findplumbers.world from the number or account in question, or use the deletion page. We verify requests by confirming control of the phone number on the account. An authorised agent may act for you with written permission that we can verify. We respond within 45 days and will tell you if we need longer.
Security
All traffic between the app and our servers is encrypted in transit. Database access is governed by row-level security rules, so one user cannot read another user’s data even if a client is tampered with. Card numbers and plumbers’ bank details never touch our servers — they go straight to Stripe. No system is perfect, and we will tell affected users promptly if there is ever a breach.
Children
FindPlumbers is for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we change what we collect or who we send it to, we update this page and the effective date at the top, and we notify you in the app before the change takes effect. The table of services above is updated the same day a service is added.