Privacy Policy - Dashboard Serramentistico

Last Updated: October 29, 2025
Effective Date: October 29, 2025

1. Introduction

Welcome to Dashboard Serramentistico ("the App"), developed and operated by 3emmegi / Fratelli Mecca ("we," "our," or "us"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our iOS application for construction project management.

By using Dashboard Serramentistico, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

2.1 Personal Information You Provide

When you register for and use the App, we collect the following personal information:

Account Information:

Email address - Used for account creation, authentication, and communication
Display name - Your full name for identification within teams
Password - Encrypted and securely stored through Firebase Authentication
Profile photo (optional) - If you choose to upload one

User Activity Data:

Account creation date
Last login timestamp
Team memberships - List of teams you belong to

2.2 Project and Business Data

When you create and manage projects, we collect and store:

Project Information:

Project names and descriptions
Start and end dates
Budget information
Timeline and completion percentages
Revenue and cost data
Productivity metrics (e.g., square meters installed, daily targets)
Safety information (incident reports, days without incidents, man-hours)
Cash flow data (payments, income)
Custom alert thresholds

Collaboration Data:

Team information - Team names, member roles (owner, admin, editor, viewer)
Activity logs - Records of actions performed (project creation, updates, deletions, member additions/removals)
Modification history - Who made changes and when

2.3 Subscription and Payment Information

Subscription status - Whether you have an active trial or paid subscription
Trial period data - First launch date and trial expiration
Purchase history - Managed securely by Apple through StoreKit

Important: We do not directly collect or store credit card information. All payment processing is handled securely by Apple through the App Store.

2.4 Technical and Usage Data

Device Information:

Device type and model
Operating system version (iOS)
App version

Local Storage:

User preferences (e.g., color scheme selection)
Cached project data for offline functionality

2.5 Information We Do NOT Collect

We want to be transparent about what we don't collect:

We do not use analytics (Firebase Analytics is disabled)
We do not display advertisements or collect advertising identifiers
We do not track your location
We do not access your contacts, photos, or other personal files beyond what you explicitly provide
We do not collect biometric data

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

Account management - Creating and maintaining your user account
Authentication - Verifying your identity when you log in
Project management - Storing and syncing your project data across devices
Collaboration - Enabling team-based project sharing and real-time updates
Offline functionality - Caching data locally for use without an internet connection

3.2 Service Improvement

Feature development - Understanding how features are used to improve the App
Bug fixing - Diagnosing and resolving technical issues
Performance optimization - Ensuring the App runs smoothly

3.3 Communication

Account notifications - Password reset emails and account-related updates
Subscription management - Trial expiration and subscription renewal reminders
Customer support - Responding to your inquiries and providing assistance

3.4 Legal Compliance

Complying with applicable laws and regulations
Protecting our legal rights and preventing fraud or abuse

4. How We Share Your Information

We respect your privacy and limit sharing of your information as follows:

4.1 Within Teams

Project data and activity information are shared with other members of teams you join, based on their assigned roles and permissions:

Owners - Full access to all team data and settings
Admins - Can manage team members and all projects
Editors - Can view and modify projects
Viewers - Read-only access to projects

4.2 Service Providers

We use the following third-party service providers to operate the App:

Google Firebase

Services used: Firebase Authentication, Cloud Firestore (database), Cloud Storage
Purpose: User authentication, data storage, and real-time synchronization
Data shared: Email, display name, user ID, project data, team data
Privacy Policy: https://firebase.google.com/support/privacy

Apple Inc.

Services used: StoreKit (In-App Purchases), iCloud (optional backup)
Purpose: Subscription management and payment processing
Data shared: Purchase history, subscription status
Privacy Policy: https://www.apple.com/legal/privacy/

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

Valid legal requests from law enforcement or government authorities
Court orders or subpoenas
Protection of our legal rights, safety, or property
Investigation of fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity. You will be notified of any such change in ownership.

4.5 What We Don't Share

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage and Security

5.1 Where Your Data is Stored

Cloud Storage: Your data is stored on Google Firebase servers, which may be located in various regions globally
Local Storage: Some data is cached on your device for offline functionality
Data Residency: Firebase infrastructure complies with GDPR and international data protection standards

5.2 Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

Encryption in transit - All data transmitted between your device and our servers uses SSL/TLS encryption
Encryption at rest - Firebase encrypts stored data on their servers
Secure authentication - Passwords are hashed and never stored in plain text
Access controls - Role-based permissions limit data access within teams

Organizational Safeguards:

Regular security audits and updates
Restricted employee access to user data
Secure development practices

5.3 Data Retention

Account data: Retained while your account is active and for 30 days after account deletion
Project data: Retained while you maintain an active subscription and for 30 days after cancellation
Activity logs: Retained for 90 days for security and audit purposes
Backup data: Maintained for up to 30 days for disaster recovery

You can request deletion of your data at any time by contacting us (see Section 11).

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

Right to access - Request a copy of the personal information we hold about you
Data portability - Export your project data in CSV or other formats through the App

6.2 Correction and Deletion

Right to correction - Update your profile information directly in the App settings
Right to deletion - Request deletion of your account and associated data

6.3 Consent and Objection

Withdraw consent - Stop using the App and request account deletion
Object to processing - Contact us to object to specific data processing activities

6.4 How to Exercise Your Rights

To exercise any of these rights:

Use the in-app profile settings for account updates
Export your data using the Export feature in the App
Contact us directly at [your-email@example.com] for deletion requests or other inquiries

We will respond to your request within 30 days.

7. Children's Privacy

Dashboard Serramentistico is not intended for use by children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages.

If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

8. International Data Transfers

8.1 Cross-Border Transfers

The App is operated from Italy, but our service providers (Firebase/Google) may process and store data in the United States or other countries. By using the App, you consent to the transfer of your information to countries outside your country of residence.

8.2 Legal Protections

These transfers are protected by:

EU-US Data Privacy Framework - Google participates in this framework for EU data transfers
Standard Contractual Clauses - Used where required by data protection laws
Firebase security measures - Ensuring data protection regardless of location

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

9.1 Right to Know

You have the right to request disclosure of:

Categories of personal information collected
Sources of personal information
Business purposes for collecting information
Categories of third parties with whom we share information

9.2 Right to Delete

You may request deletion of your personal information, subject to certain exceptions.

9.3 Right to Opt-Out

We do not sell personal information. If this changes, we will provide an opt-out mechanism.

9.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at [your-email@example.com] or use the in-app contact feature.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation:

10.1 Legal Basis for Processing

We process your data based on:

Contractual necessity - To provide the services you requested
Legitimate interests - To improve and secure the App
Consent - Where required, such as for optional features
Legal obligations - To comply with applicable laws

10.2 Your GDPR Rights

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right not to be subject to automated decision-making

10.3 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at:

Email: [dpo-email@example.com]
Address: [Your company address in Italy]

10.4 Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

3emmegi / Fratelli Mecca
Email: [your-email@example.com]
Address: [Your company address]
Phone: [Your phone number]

For data protection inquiries:
Data Protection Officer: [dpo-email@example.com]

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes:

We will update the "Last Updated" date at the top of this policy
We will notify you through the App or via email
For significant changes, we may require you to review and accept the updated policy

Your continued use of the App after changes become effective constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Subscription and Trial Information

13.1 Free Trial

New users receive a 3-day free trial
Trial start date is recorded when you first launch the App
You can access all features during the trial period
No payment information is required for the trial

13.2 Paid Subscription

After the trial expires, continued use requires a paid subscription
Subscription price: [€19.99/month or as displayed in the App]
Subscriptions are managed through Apple App Store
Billing is handled by Apple according to their terms

13.3 Subscription Data Usage

We track your subscription status to provide access to the App
We do not store your payment card information
You can cancel your subscription at any time through App Store settings

14. Offline Functionality and Local Storage

The App stores some data locally on your device to enable offline functionality:

14.1 Locally Stored Data

Project data you've accessed recently
User preferences (display settings, color scheme)
Cached images and assets

14.2 Data Synchronization

When you reconnect to the internet, local changes sync to the cloud
Conflicts are resolved by last-modified timestamp
You control when data syncs through the App settings

14.3 Clearing Local Data

You can clear locally cached data through:

App settings menu
Deleting and reinstalling the App
iOS storage management settings

Note: Clearing local data does not delete your cloud-stored projects and account information.

15. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

16. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information:

We will notify affected users within 72 hours of discovering the breach
We will provide details about what information was compromised
We will advise on steps you can take to protect yourself
We will notify relevant data protection authorities as required by law

17. Cookies and Tracking Technologies

Dashboard Serramentistico does not use cookies or tracking technologies for analytics or advertising purposes.

The only tracking-related data we use is:

Authentication tokens - To keep you logged in securely
Session management - To maintain your app state
Firebase SDK - For app functionality, not for analytics

18. Consent

By using Dashboard Serramentistico, you consent to:

The collection and use of information as described in this Privacy Policy
The transfer of your data to Firebase/Google servers
The sharing of project data with team members you collaborate with
The storage of data on your device for offline functionality

You can withdraw your consent at any time by:

Deleting your account through the App
Contacting us to request data deletion
Uninstalling the App from your device

19. Glossary

Personal Information/Personal Data: Information that can be used to identify you, such as your name, email, or account information.

Processing: Any operation performed on personal data, including collection, storage, use, modification, or deletion.

Data Controller: The entity that determines the purposes and means of processing personal data (3emmegi / Fratelli Mecca).

Data Processor: A third party that processes data on behalf of the controller (e.g., Firebase).

Data Subject: An individual whose personal data is processed (you, the user).

20. Accessibility

We are committed to making this Privacy Policy accessible to all users. If you need this policy in an alternative format (large print, audio, etc.), please contact us at [your-email@example.com].

21. Language

This Privacy Policy is written in English and Italian. In case of any discrepancy between versions, the English version shall prevail for legal interpretation.

Thank you for trusting Dashboard Serramentistico with your project management needs. Your privacy and data security are our top priorities.

This Privacy Policy was last reviewed and updated on October 29, 2025.

Quick Summary (Not Legally Binding)

For your convenience, here's a quick summary of our privacy practices:

✅ What we collect: Email, name, project data, team collaboration info
✅ Why we collect it: To provide project management and collaboration features
✅ Who we share it with: Team members (based on permissions), Firebase (for infrastructure), Apple (for payments)
✅ Your rights: Access, correct, export, or delete your data anytime
✅ Security: Encrypted transmission and storage, secure authentication
✅ Analytics: None - we don't track you or show ads
✅ Contact us: [your-email@example.com] for any privacy questions

Please read the full Privacy Policy above for complete details.