Privacy Policy

Effective date: 30 September 2026

This policy explains how the BuildSmart Cyprus iPhone app and this website handle your personal data. We have kept it in plain words. If anything is unclear, email operations@praesi.ai.

The short version

Without an account, everything you enter stays on your phone. Nothing is sent to us.
With an optional BuildSmart account, your account and the projects you share are stored with Supabase in the EU (Frankfurt, Germany).
Only the people you invite to a shared project can see it.
No ads, no selling of your data, no third-party analytics or tracking.
You can export your data and delete your account in the app at any time.

1. Who is responsible for your data

The controller is PRAESI TECHNOLOGIES LTD, a company registered in Cyprus (VAT CY60308617C). In this policy, "we" and "us" mean PRAESI TECHNOLOGIES LTD.

Contact for all privacy matters: operations@praesi.ai.

2. Two ways to use the app

Without an account

You create a profile on your phone (your name, your role and, if you choose, your email). Your profile and everything you add to your project are saved in the app's storage on your phone. We do not receive any of it. If you delete the app, this data is removed from the phone.

With a BuildSmart account

An account is optional. You need one only if you want to share a project with someone else, such as your architect or engineer. When you use an account, the data described below is stored on servers run by our processor, Supabase, in the EU (Frankfurt, Germany), so that it can be shared with the project members you invite.

3. What data we handle and why

Data	Why we use it	Legal basis (GDPR)
Account data: email address, password (stored only as a secure hash, never in readable form), name and role (for example homeowner or architect)	To create and run your account, let you sign in, reset your password and show your name to people in your shared projects	Contract (Article 6(1)(b)): needed to provide the account you asked for
Shared project data: project details, roadmap progress, notes, due dates, documents, photos, budget and payment records, quotes, snags, handover items, diary entries and team contacts that you add to a shared project	To store the project and keep it in sync between you and the members you invite	Contract (Article 6(1)(b))
Camera and photo library access	Only when you choose to take or add a photo or file, for example for a snag or a document	Consent (Article 6(1)(a)), given through the iPhone permission prompt. You can withdraw it at any time in iPhone Settings.
Notifications	To show reminders you set and due dates of roadmap steps. These are local notifications scheduled on your phone, not sent from a server.	Consent (Article 6(1)(a)), given through the iPhone permission prompt. You can turn it off in the app or in iPhone Settings.
Support emails: your email address and what you write to us	To answer your question or request	Legitimate interests (Article 6(1)(f)) in answering people who contact us, or contract where the request is about your account

Photos you take may contain metadata, such as the time and place they were taken, depending on your camera settings. Team contacts you add may include other people's names, phone numbers and email addresses. Please add only contacts you have a reason to keep for your project.

We do not use your data for advertising, profiling or automated decisions, and we do not sell it.

4. Analytics and tracking

The app contains no advertising, no third-party analytics and no tracking across other apps or websites. The app has a setting called "Share anonymous usage statistics". It is off unless you turn it on, and this version sends no statistics anywhere. If we ever add statistics, we will update this policy first and they will only be sent if you have turned the setting on.

This website sets no cookies and loads no trackers, fonts or scripts from other sites.

5. Where your data is stored

On your phone: everything you enter in the app, whether or not you have an account.
Supabase, EU (Frankfurt, Germany): account data and shared project data, only if you use a BuildSmart account.

Supabase is based in the United States. Your data is stored in its EU region. If Supabase or its sub-processors need to access data from outside the European Economic Area, for example for technical support, that transfer is covered by the European Commission's Standard Contractual Clauses in Supabase's data processing agreement.

Project members you invite. Everyone in a shared project can see the records, documents and photos in that project. Only invite people you trust with them.
Supabase, as our processor, which stores the data on our behalf under a data processing agreement and may not use it for its own purposes.
Authorities, only if the law requires us to disclose data.

When you use the share buttons in the app (for example to send a snag list or a summary), you choose the app and the recipient, and that sharing is between you and them.

Apple provides the App Store and TestFlight and handles your Apple ID, downloads and any crash reports you choose to share with developers under its own privacy policy.

This website is served by Cloudflare, which processes basic technical data such as IP addresses to deliver and protect the site.

7. How long we keep your data

On your phone: until you delete it in the app, delete your profile, or delete the app.
Account and shared project data: until you delete it or delete your account.
When you delete your account: your account and the data we store for it are deleted immediately from the live database. Copies in our provider's backups are not restored and expire on the provider's backup schedule. Shared projects owned by other people keep their own copies of what was shared in them.
Support emails: as long as needed to deal with your request, and after that only as long as the law requires us to keep records.

8. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you.
Rectify data that is wrong or incomplete. You can edit most data directly in the app.
Erase your data. Use Team tab, then Delete account (or Delete profile and all data) in the app, or email us.
Portability. Use Export my data in the app to get a file with your profile, project setup, roadmap progress, documents list, budget, team contacts, diary and reminders.
Object to processing based on legitimate interests, and restrict processing in some cases.
Withdraw consent at any time, for example by turning off camera, photo or notification access in iPhone Settings. This does not affect what happened before you withdrew it.

To use any of these rights, email operations@praesi.ai. We will reply within one month. We may ask you to confirm your identity, for example by writing from the email address on your account.

You also have the right to complain to the Cyprus supervisory authority, the Commissioner for Personal Data Protection (dataprotection.gov.cy), or to the supervisory authority where you live or work.

9. Security

Data sent between the app and Supabase is encrypted in transit. Passwords are stored only as secure hashes. Access to shared projects is limited to their members. Data saved on your phone is protected by your iPhone's own security, so keep a passcode on your phone. No system is completely secure, and if a breach affects your data we will tell you and the authorities as the law requires.

10. Children

BuildSmart Cyprus is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.

11. Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date. If a change materially affects how we use your data, we will tell you in the app before it applies.

12. Contact

PRAESI TECHNOLOGIES LTD, Cyprus
Email: operations@praesi.ai