Privacy Policy

This is a plain-language summary. The legally binding version is the German Datenschutzerklärung, which goes into more detail.

Who we are

dev2devs SH.P.K., Bedri Shala 15, Prishtinë, Kosovo. Questions about your data: info@baurapport.at.

We are based outside the EU, but Baurapport is sold to firms inside it, so the GDPR applies to us all the same.

What we collect

• Your account — name, email, password (stored hashed) or a one-time sign-in code, your role, and which company you belong to.
• Your company's details — name, address, logo, VAT number and bank details, used to put a header on your invoices.
• What you log — sites, working hours, photos, quotes, measurements, invoices, receipts, customers and appointments.
• Website visits — standard server logs (IP address, time, page). No analytics, no tracking, no advertising.

Whose data it is

For your account and your payment, we are responsible. For everything your firm records in the app — your employees' hours, your customers' details — your firm is responsible and we only act on its instructions. If you are an employee wondering why your hours are being logged, ask your employer; they decide that, not us.

Who else sees it

• Supabase stores the database and your photos, on servers in the EU.
• Resend sends sign-in codes and notification emails (based in the USA).
• Stripe handles payment on the web. We never see your card number.
• Apple and Google handle purchases made inside the app, under their own privacy policies.

That is the whole list. We do not sell your data, we do not use it for advertising, and we do not share it with anyone else.

Cookies

None that need your consent. The site remembers your language choice in your own browser and nothing more — which is why you are not being asked to dismiss a banner.

How long we keep it

• Account data: as long as the account exists.
• Your firm's records: as long as your firm keeps them.
• Sign-in codes: five minutes.
• Invoices and receipts: seven years, because Austrian tax law requires it.

Deleting your account

Open the app and go to Settings → Delete my account. What goes depends on who you are:

• Employees lose their login. The hours you logged stay with the firm — they are its site record, and it has to keep them.
• Owners delete the whole business with it: every site, entry, photo, quote, invoice and receipt, and your employees' logins too. There is no undo.

Deleting your account does not cancel a subscription you bought through the App Store or Google Play. Cancel that in your store settings.

Your rights

You can ask us for a copy of your data, correct it, delete it, restrict how we use it, take it elsewhere, or object to it — email info@baurapport.at and we will sort it out. If you think we have handled your data badly, you can complain to the Austrian Data Protection Authority (dsb.gv.at).

Security

Everything travels encrypted over TLS. Passwords are only ever stored as hashes. One firm cannot see another firm's data — that is enforced in the database itself, not just in the app. Photos sit in private storage and are served through short-lived signed links.

Last updated: September 2026