Vorkeon — Privacy Policy

Last updated: 2026-10-24

Vorkeon ("we", "us") is an estimating, quoting, scheduling and crew app for contractors of every trade. It is provided by Badradin Al Abrahim, a sole proprietor in Ontario, Canada, carrying on business as Vorkeon (Google Play developer name: Craft Ai Studio), 176 Aberfoyle Avenue, Hamilton, Ontario.

This policy explains what information the app collects, why, who else sees it, where it is stored, how long we keep it, how to delete it, and your rights. It covers business users (owners and their team), homeowners who ask for quotes (section 2A), your customers who open a quote or invoice link (section 2B), and workers who use the time clock (section 2C).

In short: we use your information to run the app for you. We never sell your data, we show no ads, we use no advertising or analytics trackers, and nothing you send is used to train AI models. When you use an AI feature, what you give it is sent to our AI provider, Anthropic, to produce the answer.

Who is responsible for your information

Your account (your sign-in, your profile, your plan): we decide how it is used. We are the organisation responsible (the "controller").
Information a business puts into Vorkeon about other people — its customers, homeowners, workers and team, their time records, clock-in locations and photos, messages and files: that business is responsible for it (the "controller"), and we store and process it on the business's behalf as its service provider ("processor"). If you are a customer or worker of a business that uses Vorkeon, contact that business first about your information; we will help them and pass on requests that come to us.

1. What we collect

Information	Where it comes from	Why we need it
Account details: email address, password (stored only as a hash by our sign-in provider), the business you belong to and your role in it. If you choose Continue with Google, Google shares your name, email address and profile picture with us instead of a password. If you choose Continue with Apple (iPhone), Apple shares your name (the first time only) and your email address, or a private relay address if you choose to hide it	You, when you sign up or are invited; Google or Apple, if you sign in with them	To sign you in and show you your business's data
Your agreement to the terms: which version of the Terms and Privacy Policy you accepted, when, and from which kind of device (Android, iPhone or web)	You, when you tap I agree	To keep a record of what you agreed to
Business data: business name, contact details, HST/GST number, logo, labour rates, productivity rates, waste defaults, profit targets, pricing defaults, and your public business page	You, in Settings	To price quotes and print your details on customer quotes
Customers and projects: customer names and contact details, project site addresses and postal codes, notes, measurements, estimates, quotes and revisions, booked dates, the crew on each project, and the site's location on a map (found from the address, or set by the owner standing at the site)	You, as you work	This is the product: your quotes and projects
Address search: the address you are typing	You, when you search for an address	To suggest matching addresses. It is sent to our address search provider (section 3)
Uploaded documents: PDFs and photos you attach to a project (drawings, scopes of work, supplier quotes, site photos)	You, from your files or camera	To read them with AI and turn them into an estimate draft
AI job records: the text the AI produced, the questions it asked, token counts, which model answered	Generated when you use an AI feature	To show you what the AI found, and to audit and bill AI use
Location for store search (optional): your postal code or device location	Only when you tap "Stores near me" and allow it	To find building-supply stores near the project. Used for that search and not saved
Location at clock-in and clock-out (workers): the spot where the phone was at the moment of tapping Clock in or Clock out, how accurate it was, the distance to the project site, and whether the phone reported a fake-location app	The worker's phone, only at the moment of the tap	So the business can check that time was worked on site. Location is never tracked between taps or in the background. See section 2C
Closest-project suggestion (workers)	The worker's phone	The phone compares its own location with the project sites to put the closest project first. Worked out on the phone; that location is not sent or saved
Monitoring notice acknowledgement (workers): that the worker read the time-clock notice, which version, and when	The worker, before their first clock-in	So the worker and the business have a record that the worker was told what is recorded
Quotes you send to sign: the quote and its choices, your note to the customer, when the link was opened and how many times, which choice the customer picked, the name they typed, their finger-drawn signature, the date they signed or declined, and the reason if they gave one	You; your customer, on the quote page	So your customer can accept and sign on their phone, and so you have a record of what they agreed to
Invoices and payments: deposit and final invoices, amounts, due dates, your payment instructions (for example your Interac e-Transfer email), and the payments you record	You	To ask for a deposit and get paid. Vorkeon does not handle the money
Change orders: extra work priced after a quote was accepted, its lines and total, when the link was opened, the name your customer typed, their signature and the date they approved or declined	You; your customer	So your customer can approve extra work, and so you have a record
Card payments (only if you connect Stripe): your Stripe account ID and whether it can take payments; for each card payment, the amount, any card fee, and Stripe's payment reference	Stripe	To mark the invoice paid. Card numbers go to Stripe only; we never see or store them
Plan payments: the plan and period you chose. In the app stores: a purchase token and status from Google Play or the App Store (through RevenueCat). On the website by card: your Stripe customer and subscription IDs, status and renewal date. By Interac e-Transfer: the amount, a payment reference and any note you add	You; the stores; Stripe	To turn your plan on and keep it on. We never see your card number
Follow-up reminders: when you last followed up with a customer about a quote	You	To remind you to follow up on quotes that got no answer
Time-clock data: clock-in, clock-out and break times, the project, notes, flags (for example "clocked in off site" or "auto clocked out"), the owner's approvals and corrections, and fix-a-mistake requests	Workers and the business	For pay, timesheets and comparing actual hours with the estimate
Pay stubs and payroll: the worker's name, pay period, pay date, hours, rates, earnings, deductions, year-to-date totals, payment method, and the payroll details the business enters to work out deductions (for example province or state, pay frequency, tax claim amounts and exemptions). We do not ask for social insurance or social security numbers	The business	So the business can give its workers pay stubs. Only the business's owners and payroll managers, and the worker the stub is for, can see it
Signatures: signatures you draw or type and save, which one is your default, whether you turned on automatic signing and when you agreed to it, and who signed each pay stub and when (and whether it was signed automatically)	You	To sign pay stubs and other documents for you, as you set up. You can delete a saved signature at any time
Photo at clock-in (only if the business turns it on)	The worker's camera, at the moment of clocking in	So the business can see who clocked in. Kept in private storage
Team chat: messages, photos and files sent in chat, reactions, who read what and when	You and your team	So your team can talk about projects. Only members of a conversation can read it
Safety records, site reports, receipts and material orders: training certificates, toolbox-talk sign-offs, incident reports (which may include injury details), daily site reports, receipts and orders	You and your team	To keep the business's safety and job records
Gallery and business page: project photos, captions, tags, before/after pairs, and the text of your business page	You and your team	To keep project records and, only for photos you mark as best work, to show them on your public business page
Notification token: an ID for your phone from the notification service	Your phone, when you allow notifications	To send chat messages and alerts. Removed when you sign out
2-step verification (optional): that you turned it on, and a secret key shared with your authenticator app	You	To ask for a 6-digit code when you sign in. Held by our sign-in provider; we never see your codes
Technical data: server logs with the time of a request, the endpoint, your user ID, a scrambled internet address for rate limits, and error messages	Automatically	To keep the service running and secure. Logs do not contain quote or document contents

We do not collect contacts, call logs, SMS, advertising identifiers, browsing history, or location in the background. The app uses the microphone while you talk to Vorkeon (after you tap its button, or after you say its name); that recording is sent to our speech-to-text provider (ElevenLabs) to turn it into text and is not kept by us after it is transcribed. If "Hey Vorkeon" is on (Settings; you can turn it off at any time), the app listens for its name only while it is open and on screen, and that listening happens on your device: on phones it uses the phone's own on-device speech recognition, and in a web browser it uses the browser's built-in speech recognition (which, depending on the browser, may be handled by the browser maker's service). Nothing is recorded or sent to us while it waits for the name; only what you say after the name is sent, as a normal request to Vorkeon. We never receive your fingerprint or face: the phone checks it and only tells the app yes or no.

2. How we use it

To provide the app: store your quotes, calculate prices, build schedules, make PDF quotes, send links you ask us to send.
AI features you choose to use: reading documents, drafting a quote, answering estimating questions, searching retailer websites for prices. What you give the feature (documents, notes, measurements and questions) is sent to Anthropic to produce the answer. You agree to this when you accept these terms in the app; if you do not want it, do not use the AI features. AI answers can be wrong: always check them.
Daily briefing: for the business owner on a paid plan, a short greeting is written by AI from the business's own counts (and money totals the owner can already see) and spoken with an AI voice unless "Say hi out loud" is off. The voice is clearly labelled as an AI voice.
To send notifications you allow (chat messages, clock reminders, owner alerts) and account emails (sign-up confirmation, password reset, receipts and notices about your account or these terms). These are service messages, not marketing.
Marketing: we do not send marketing emails or texts unless you have agreed to receive them, and every one would have a working unsubscribe link (Canada's CASL).
To keep the service secure: sign-in checks, 2-step verification, rate limits, abuse prevention, and audit records of who approved a quote or corrected a time.
To support you when you contact us, and to run the business behind Vorkeon: our private admin page shows each business's account details (owner name and email, how they sign in, business name and phone), its plan, and usage counts. It does not show your customers' details or what is in your quotes.
If you ask for a lead-generation invite, we keep what you send us to contact you about it. If we switch on new customers for your business, you will see homeowners who asked for quotes (see 2A).
To meet legal obligations and to protect our rights in a dispute.

Legal bases (for people in the EU, UK and similar places): we rely on contract (to provide the app you signed up for), legitimate interests (security, fraud prevention, improving and supporting the service, keeping records of agreements), consent (optional features such as notifications, location for store search, marketing), and legal obligation. For data a business puts in about others, the business decides its own legal basis.

We never sell your data, never share it for cross-context behavioural advertising, and do not use your business data to advertise to you or anyone else.

2A. Homeowners who ask for quotes ("Get a quote" page and business pages)

If you are a homeowner and fill in our Get a quote page:

What we collect: your name, phone number, email (optional), town or city, postal code (optional), the kind of work, your description, budget and timeline (optional), the date you agreed, and a scrambled (hashed) version of your internet address, which we use only to stop spam.
Why: to pass your request to up to 3 local contractors who use Vorkeon, so they can call, text or email you about this job. You agree with the tick box on the form before you send it.
Who sees it: Vorkeon, and the contractor businesses we send your request to. They may use your details only for your request and may not sell or share them.
How long: 12 months from when you asked, then deleted. A contractor who quotes or does your job keeps their own records.
Remove your request any time: email hello@vorkeon.com with the phone number you used. We delete it within 30 days and tell the contractors it was sent to.

A contractor's business page. If you send the "Ask for a quote" form on a contractor's page, the same details are collected, but your request goes only to that one contractor. The rest of this section applies the same way.

2B. Your customers: quote links, signatures and invoices

When a contractor sends a quote, change-order or invoice link from Vorkeon, the person who opens it is the contractor's customer. The contractor decides what to send and is responsible for it; Vorkeon stores and shows that information on the contractor's behalf.

Quote and change-order links: we record when the link is opened and how many times. If the customer accepts, we keep the choice, the name they typed, their signature (a drawing) and the date and time. If they decline, we keep the date and any reason they gave.
Invoice links: show the contractor's payment instructions. Payments go directly to the contractor. If the contractor connected Stripe, the customer can pay by card on Stripe's page: the card details go to Stripe, the money goes to the contractor's own Stripe account, and Vorkeon never receives the money or sees the card.
Links are long and random so they cannot be guessed. Quote links stop working when the quote expires (60 days at most) or when the contractor takes them back.
To see, correct or delete your information, ask the contractor, or write to us and we will pass it on.

2C. Workers: the time clock

Workers join a business with an invite code and use the app to clock in and out, take breaks, see their projects, chat with their team (if the business allows it) and ask their boss to fix a time.

Before the first clock-in the app shows each worker a notice of what is recorded and asks them to confirm they read it. We keep that confirmation.
What the business sees: times, breaks and notes; the spot where the phone was at each clock-in and clock-out (and its distance to the site); flags such as "off site", "fake location app on", "no break" or "auto clocked out"; the clock-in photo if the business turned that on; and fix-a-mistake requests. Every correction is recorded with who made it.
What is never collected: location between taps, location in the background, or anything else on the worker's phone.
Which projects a worker sees: only the projects their boss puts them on, with the project name and site address. Workers never see customers' contact details, prices or quotes unless the owner allows it.
Who decides: the business is the employer and decides how this information is used (for example for pay). Workers who want a copy, a correction or deletion can ask their employer, or write to us and we will pass the request on.
Ontario employers with 25 or more employees must have a written electronic monitoring policy under the Employment Standards Act, 2000 and give employees a copy. The time clock's location stamps and photos are electronic monitoring. The employer is responsible for that policy; Vorkeon gives owners a template under Settings.

3. Who else sees your data (service providers)

We use a small number of companies to run Vorkeon. Each one receives only what it needs for its job and is bound by its own privacy and security terms. We will update this list before adding a new provider that receives personal information.

Provider	What they do	What they receive	Where
Supabase	Database, file storage and sign-in (including 2-step verification)	Everything in section 1 that is saved	Cloud data centres (ask us for the region)
Fly.io	Runs our server (the API and the public web pages)	Requests passing through: the data needed to answer them (for example a quote being turned into a PDF); short server logs	Canada (Toronto)
Anthropic	AI (Claude models) for document reading, quick quotes, the assistant, price search and the owner's briefing text	Documents you upload for analysis, project notes, measurements and quantities being priced, your questions; for the briefing, counts, first names and project names. Not your password, wages or margins. Under Anthropic's commercial terms, inputs and outputs are not used to train their models	United States
ElevenLabs (and OpenAI only as a backup)	Turns the owner's briefing and Vorkeon's replies into speech, and turns what you say to Vorkeon into text	The words being spoken, and your voice recording while you talk to Vorkeon (not kept by us after it is turned into text)	United States / EU
Expo and Google Firebase Cloud Messaging	Deliver notifications to your phone (Apple's push service on iPhone)	The notification token and the notification (a title and a short preview)	United States
Google	Optional "Continue with Google" sign-in; Gmail for account emails (sign-up confirmations, password resets); Google Play billing	Your name, email and picture (sign-in); your email and the email's content; a purchase token and status	United States
Apple	Optional "Sign in with Apple"; App Store billing	Your name (first sign-in) and email or relay address; a purchase token and status. If you delete your account we ask Apple to remove Vorkeon from your Apple ID	United States
RevenueCat	Keeps track of Google Play and App Store subscriptions	Your business ID, the purchase receipts and status from the store. No card numbers	United States
Stripe	Card payments for Vorkeon plans on the website, and (only if a contractor connects it) customers' card payments on invoices	Business name, email and plan; for invoices the amount, number and business name. You type card details on Stripe's own page	United States / Canada
OpenStreetMap services — Nominatim, Overpass and Photon (Komoot)	Address search, finding a site on the map, finding stores near a postal code	The address, postal code or coordinates being looked up. No account data	Europe
Open-Meteo and Environment Canada	Weather for a project site	The site's approximate coordinates (Open-Meteo) or the nearest city (Environment Canada). No account data	Europe / Canada
Retailer websites (for example Home Depot, RONA, Lowe's, Home Hardware)	Price search reads their public product pages	Only the material description being searched	Canada / United States
Contractor businesses on Vorkeon	Contact homeowners about the job they asked for	The homeowner's request (see 2A)	—

We do not share personal information with anyone else, except when you ask us to (for example sending a quote link or PDF to your customer), when the law requires it (for example a valid court order), to protect people's safety or our legal rights, or if the business behind Vorkeon is sold or transferred (the buyer would have to respect this policy).

4. Where your data is stored

Vorkeon is a Canadian business, but our providers store and process data in Canada, the United States, the European Union and other countries (see the table). Information stored in another country may be accessed by that country's courts and authorities under its laws. For transfers from the EU, UK or Switzerland we rely on our providers' standard contractual clauses or similar safeguards. For people in Quebec, we assess transfers outside Quebec as Quebec's Law 25 requires and use providers whose contracts require them to protect the information.

5. How long we keep it

Account and business data: as long as your account or business exists.
Uploaded documents: until you delete the file or project, or the business is deleted.
AI job records: 12 months, then deleted.
Records of your agreement to the terms and workers' monitoring-notice confirmations: as long as the account exists; they are deleted with the account (or with the business, for the notice).
Signed quotes, change orders and invoices: as long as the business exists (they are the business's record of what was agreed).
Time-clock records, clock-in photos and fix requests: as long as the business exists, unless the business deletes them. Employers usually have to keep hours-worked records for years under employment law; that is the employer's decision and duty.
Chat messages, files and gallery photos: until the sender or the business deletes them, or the business is deleted.
Notification tokens: until you sign out on that phone or the token stops working.
Homeowner requests: 12 months, then deleted (sooner on request).
Server logs: 30 days.
Backups: rolling backups for up to 30 days; deleted data disappears from backups on that schedule.
Payment and tax records: kept as long as tax law requires (in Canada, generally 6 years), even after an account is deleted.

6. Deleting your account and your data

In the app: Settings → Delete my account (workers: Me → Delete my account). You type DELETE to confirm. If you are the only owner of a business, the app tells you that the business and everything in it will be deleted too, and asks a second time. Cancel any store subscription in Google Play or the App Store as well, because deleting the account does not stop the store from billing you.

On the web or by email: follow the steps at vorkeon.com/delete-account, or write to hello@vorkeon.com from the address on your account. We verify the request and delete the account within 30 days.

If you leave a business that has other owners, your quotes stay with that business, but your sign-in and personal details are removed. You can also delete single projects, files, quotes, photos and messages without deleting your account.

7. Your rights

Wherever you live, you can ask us to see the personal information we hold about you, get a copy (in a common, portable format), correct it, delete it, or withdraw consent (which may mean we cannot provide some features). We answer within 30 days. We may need to confirm who you are, and we may keep what the law requires us to keep. We will not treat you differently for using your rights.

Canada (PIPEDA and provincial laws): you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376), or your provincial commissioner.
Quebec (Law 25): you also have the right to be told when a decision about you is made only by automated processing (Vorkeon does not do this), and to complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
EU, UK and similar places (GDPR, UK GDPR): you also have the right to object to processing based on legitimate interests and to restrict processing, and to complain to your local data-protection authority (in the UK, the ICO).
California and other US states: you have the right to know, delete, correct, and opt out of "sale" or "sharing". We do not sell or share personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you.

If your information was put into Vorkeon by a business (you are its customer or worker), ask that business first; we will help them answer.

8. Security

Data travels over HTTPS. Every business's data is separated at the database level with row-level security, so one business can never read another's, and workers can reach only their own time records and the projects they are on. Inside a business, each person's role and the switches the owner sets decide what they can see; the owner is responsible for who they give access to. Passwords are handled by our sign-in provider and never seen by us. You can turn on 2-step verification. On the phone, your sign-in is stored encrypted, and you can add a fingerprint or face lock. Photos and files are in private storage behind links that expire. Server keys are never in the app.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the regulators the law requires (including the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information), and keep a record of it. If a breach affects data a business put in about others, we tell that business without undue delay so it can meet its own duties.

9. Children

Vorkeon is a business tool for adults. It is not for anyone under 18, and we do not knowingly collect information about children. If you believe a child has given us information, write to us and we will delete it.

10. Changes

If we change this policy, the date at the top changes and the app shows a notice the next time you open it. Significant changes (new kinds of data, new providers, new uses) are announced by email or in the app before they take effect, and we ask again for your agreement where the law requires it.

11. Contact and privacy officer

Our privacy officer is Badradin Al Abrahim, who is responsible for how Vorkeon handles personal information.

Vorkeon — Badradin Al Abrahim
176 Aberfoyle Avenue, Hamilton, Ontario
Canada
Email: hello@vorkeon.com