SiteMaster AI Privacy Policy

Last updated: 8 October 2026

SiteMaster AI is a construction takeoff and estimating app developed by MMB Software (an Android app and a web version at sitemaster-ai.web.app/app). This page explains what data is collected, where it is kept, and your rights.

Data controller: MMB Software · mmbsoftware.dev@gmail.com

1. In short

• The app has no ads. Your data is not sold and is not used for advertising.
• In guest mode your project data stays only on your device.
• With Pro, your project data is also stored in the cloud so you can open it on your other devices and on the web.
• For AI features, what you type and the files you upload are sent to an AI service provider to produce the answer.
• You can delete your account and data at any time.

2. Data we collect

• Account information: when you sign in with Google, your name, email address, profile photo and account ID. Guest mode collects no account information.
• Project data: your projects, takeoff and estimate records, prices, material library, proposal settings and company details (name, address, logo). These are stored on your device.
• Cloud sync (Pro): with Pro, the project data above and your AI conversation text are also stored in our cloud database, linked to your account. Only you can access them.
• AI requests: the text you send to the AI and the photos, PDFs, drawings and spreadsheets you upload. We do not keep the files after the answer is produced; only the text and file name remain in the conversation.
• AI usage counters: the AI credit and number of requests used by your account (for quota and abuse control). Topics asked are also counted in aggregate, without identity.
• Subscription: your subscription type, expiry date and Google Play purchase token. We never see or store your card details; payment is handled by Google Play.
• Device fingerprint: a one-way hash of a device identifier, used only to prevent gift and trial allowances being claimed again on the same device.
• Feedback: a message you send from the Settings screen reaches us together with your account ID, app version, language and region. It is deleted when you delete your account.
• Crash reports: when the app fails, the error log, device model and OS version. They contain no name, email or project information.
• Usage statistics: which screens are opened, membership type and region, without identity. Off by default in the European Union and the United Kingdom. You can turn them on or off in Settings.
• Security verification: to confirm that requests come from the genuine app we use Play Integrity on Android and reCAPTCHA Enterprise on the web. These services process device and browser information.

3. Your own AI key

Pro members can enter their own AI key (a Google Gemini API key). In that case:

• The key is stored encrypted only on your device (in your browser on the web); it is never sent to our servers.
• Your AI requests go directly to Google without passing through our server, and are subject to Google's API terms and privacy policy.
• The key is removed from the device when you sign out or delete your account.

4. How we use data

• To run the app: sign-in, calculations, reports, cloud sync, AI answers.
• To manage membership and AI credit.
• To prevent abuse and fraud.
• To find and fix errors and improve the app.

Legal bases: performance of a contract, legitimate interests (security, troubleshooting), legal obligation (financial records) and, where required, your consent (usage statistics).

5. Who we share it with

Your data is shared only with the following service providers, to deliver the service:

• Google Firebase / Google Cloud: sign-in, cloud database, server functions, crash reports, usage statistics, security verification.
• Google Play: subscriptions and payment.
• AI service provider: the content of your AI requests, to produce the answer. Requests are relayed through our server; your name and email address are not passed on.
• Authorities: only where required by law.

These providers' servers may be located outside your country, including in the European Union and the United States.

6. Retention and deletion

• Your data is kept for as long as your account exists.
• You can delete your account in the app (Settings → Delete my account) or at sitemaster-ai.web.app/delete-account.
• Deletion removes your sign-in account, cloud project data, subscription record and AI allowance.
• Purchase receipts (for the legally required period) and the device fingerprint are kept, unlinked from your account.
• Deleting your account does not cancel a Google Play subscription; cancel it in the Play Store.

7. Security

Data is transmitted over encrypted connections. Only your account can access your cloud records. No system is completely secure; in the event of a breach you will be notified within the legally required period.

8. Your rights

Under KVKK, GDPR, UK GDPR and US state laws you have the right to access your data, have it corrected or deleted, object to its processing, withdraw consent and request a copy. Send your request to the email address above; we reply within 30 days. You may also complain to your data protection authority. We do not sell personal data.

9. Children

The app is intended for professionals; it is not directed at children under 13 and we do not knowingly collect their data.

10. Changes

If this policy changes, the current version is published on this page with a new date.