Suppli

Suppli Legal

Privacy Policy

Last updated: March 6, 2026

Highlights

  • We collect account details (email, workspace membership/join code), workday data (sessions, projects, activities, notes), and optional location snapshots tied to entries when your organization enables them.
  • While the mobile app is open and in use, it may refresh foreground location in memory to improve the reliability of entry start and stop waypoints. Only entry-linked snapshots are stored with work records, and coordinates may be reverse-geocoded to show an approximate address.
  • We collect photos you attach to item requests or approvals when you choose to capture or upload them.
  • Data is stored in managed infrastructure. Offline updates are encrypted on-device with SecureStore-backed keys before syncing. Performance analytics may be captured; no data is sold.
  • You can revoke location access in device settings, but some features may stop working. For data requests, contact privacy@suppli.be or your organization administrator.

Please also review our Terms of Service.

Data we collect

Account and organization data: your email, workspace membership/join code, role, and status so we can authenticate you and place you in the correct workspace.

Workday and project data: sessions you start/stop, selected projects/activities, hours, notes/comments, and adjustments made by you or your administrators.

Photos and attachments: images you capture or upload for item requests, approvals, or supporting documentation.

Location snapshots (when enabled): latitude/longitude, accuracy, timestamp, and whether the snapshot represents a start or stop. The mobile app may refresh foreground location while it is open and in use so start and stop waypoints can be attached more reliably; only entry-linked snapshots are stored with work records.

Device and usage data: app version, platform, performance metrics, and product usage events captured through analytics tools to improve reliability.

How we use data

Provide and improve Suppli: authenticate you, sync projects/activities, track time, and support approvals and exports.

Location-based validation: attach start/stop waypoints to entries when required by your organization, and optionally show approximate addresses for context.

Support and safety: detect abuse, troubleshoot issues, and comply with organizational or legal requirements.

How data is shared

With your organization: administrators and managers may view the data tied to your account (including location snapshots when collected) to run schedules, approvals, and reporting.

Service providers: infrastructure, geocoding, analytics, and support vendors that process data on our behalf to deliver the service.

Legal and safety: we may disclose data if required by law or to enforce these terms, protect users, or prevent fraud.

We do not sell your personal data or use it for advertising or cross-app tracking.

Location specifics

The mobile app requests foreground location permission to capture snapshots when you start or stop entries. While the app is open and in use, it may refresh location in memory to improve waypoint reliability. The app will continue prompting until permission is granted because certain workflows rely on these snapshots.

Location is not tracked in the background, and in-memory foreground updates are not stored as work records by themselves. Snapshots are stored only with their related entry and may be queued locally in an encrypted offline store until they sync.

Coordinates may be reverse-geocoded to show an approximate address. Your organization may treat entries without snapshots as incomplete.

You can revoke location permission in your device settings. Some features may stop working if location access is disabled.

Storage, retention, and security

Suppli stores data in managed infrastructure with transport encryption. Offline mutations are encrypted on-device with keys stored in SecureStore; the offline queue is cleared when you sign out or switch accounts.

Location snapshots and workday records are retained while your organization needs them for scheduling, approvals, compliance, or recordkeeping. Removal or export requests can be sent to your administrator or privacy@suppli.be.

For access, correction, or deletion requests, contact your administrator or email privacy@suppli.be.

Your choices and rights

Access, correction, deletion: contact your organization administrator or email privacy@suppli.be for help with data requests. We will honor applicable legal rights.

Permissions: manage location, notifications, camera, and photo library permissions in your device settings. Disabling certain permissions may limit functionality.

International transfers

Data may be processed in regions where our service providers operate. We rely on appropriate safeguards, such as contractual commitments, to protect data during transfer.

Changes and contact

We may update this Privacy Policy to reflect product or legal changes. We will note the latest revision date here.

Questions? Contact privacy@suppli.be. For general support, email support@suppli.be.