Privacy Policy for BRCKS

Last Updated: October 2, 2026

BRCKS IO LTD ("BRCKS") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our mobile application and web platform.

1. Information We Collect

We collect contact information, user-generated content, in-app communications, media, transcriptions, scheduling information, location information, and device/usage information. Full details are in the privacy policy tables on this page.

2. How We Use Your Information

We use it to create and manage your account, provide and maintain the Services, process transactions, send technical notices and support messages, monitor trends, prevent fraud, personalise the Services, and power AI-assisted features.

3. Lawful Basis

We rely on performance of a contract, legitimate interests, consent, and legal obligation under GDPR and UK GDPR.

4. Disclosure

We share data only with trusted service providers who help us operate the Services, such as cloud hosting, messaging, video conferencing, push notifications, email delivery, address lookup, speech-to-text and AI/ML providers.

Sub-processors

  • Stream (GetStream.io) — hosts all chat messages, photos, videos, voice notes and documents sent in BRCKS Chat, and the voice/video call media.
  • Supabase — hosts the BRCKS database, file storage and authentication.
  • Sentry — receives crash reports and performance diagnostics from the mobile apps. No personal data is attached to these reports.
  • Google Maps — renders maps where site photos are shown on a job.
  • OpenAI — generates text embeddings used to power search and suggestions.
  • Twilio — sends the SMS sign-in codes.

These are service providers processing data on BRCKS's behalf under contract. BRCKS does not sell personal data, and does not share personal data with third parties for their own purposes.

5. AI and Machine Learning

Certain features use third-party AI/ML models. We do not use your data to train our own models and require our AI partners not to use your data for training.

6. Data Storage, Security and Retention

Data is encrypted in transit using HTTPS/TLS, stored on secure cloud servers, and protected by Row Level Security (RLS). We retain information only as long as necessary for the purposes set out in this policy or as required by law.

7. Your Rights

Under GDPR and UK GDPR you have the right to access, rectification, erasure, restrict processing, object to processing and data portability. You can lodge a complaint with the Information Commissioner's Office.

8. Contact

For privacy questions contact [email protected].