Crew-Hub is operated by CREW-HUB, a business name registered in Ontario, Canada by Vladyslav Deineka, sole proprietor (BIN 1001718397), 58 Dunnett Drive, Barrie, Ontario, L4N 0J6, Canada, and we are the party responsible for the data described here. Contact us at team@crew-hub.ca.
Your company's data is stored in CrewHub's own cloud infrastructure, alongside other companies' data and separated by access rules — not in a cloud account belonging to your employer.
Identity. Your name and email address. Your phone number, if you provide one. A profile photo and certificates, if you add them. An e-Transfer address, if you enter one so you can be paid.
Work records. The hours you clock, the shifts you are scheduled for, tasks assigned to you, time-off requests.
Location, while a shift is open. See section 3 — it is the part most often described incorrectly, so it has its own section.
What you put in. Job-site photos, receipts and their photos, notes, messages, invoices and estimates.
Automatically. Usage statistics and error reports — section 5.
We do not collect: your contacts, your browsing outside CrewHub, advertising identifiers, your health, biometric or financial account data. We never see your payment card.
While your shift is open and the app is on screen, CrewHub checks your position about once every 75 seconds. It also records your position once when you clock in and once when you clock out.
It does not record a route. What is stored is a short list of zone events, at most 50 per shift:
last known position inside 2 km is stored once, and nothing further until you return.
Nothing is recorded when your shift is closed, and nothing is recorded while the app is not on screen — a phone in a pocket reports nothing. CrewHub does not use background location.
You can decline location and still clock in. If you decline, no coordinates are recorded and no zone events are logged.
Who is asked. Everyone who clocks in as crew is asked, and that includes a foreman: the disclosure appears on the clock screen before any location is requested, and declining still lets you clock in — the shift is recorded, only the coordinates are not.
The owner of the company is not asked separately. Setting the company up is that decision, and the records are theirs. If you are the owner and would rather your own location was not recorded, write to us at team@crew-hub.ca.
Location is never used to deduct pay automatically. GPS is imprecise; hours are edited by a person.
Photos are stripped of their metadata. Every image is re-encoded before upload, which removes the GPS coordinates, camera model and capture time a phone normally embeds in a photo file.
receipts, photos, documents, messages.
not see your email, your phone number, your hours or your pay.
estimates, invoices and payments. Nothing about any other job, nothing about any worker.
advertising. We do not use it to train anything.
CrewHub runs on services operated by other companies. Each receives only what it needs:
| Provider | What it receives | Why | |---|---|---| | Google (Firebase) | everything you put into CrewHub | storage, sign-in, notifications | | Google Analytics | anonymous usage counts, IP address, device identifier | understanding how the app is used | | Sentry | error reports: what failed, app and browser version, IP address | fixing crashes | | Stripe | subscription payment | billing. Card details go to Stripe directly and never reach us | | Resend | the address and contents of email CrewHub sends you | sending email | | OpenStreetMap | a job-site address typed into the address search, and IP address | finding a site on the map | | Microsoft Clarity | on the public website (crew-hub.ca/welcome) only, never inside the app: pages viewed, clicks and scrolling, device and browser, IP address. Anything typed into a field is hidden | seeing where visitors get stuck on the website | | Cloudflare, Google Fonts, unpkg | IP address when the page loads | serving the app and its fonts |
The usage statistics sent to Google Analytics are limited by the app itself to a fixed list: your role, your language, the size of the crew, the number of jobs, and how you heard about CrewHub. Names, phone numbers, company and job names, addresses and every money figure are removed by the app before anything is sent.
Data is stored on Google Cloud servers in the United States (Firestore multi-region nam5, Iowa and South Carolina; server functions run in Iowa, us-central1) and may be processed in other countries where these providers operate.
We process this data to provide CrewHub under our agreement with you and your employer, and because an employer has a legitimate interest in records of work performed for them. Location is processed on the basis of the consent you give on your device, which you can withdraw at any time in your phone's settings.
We keep your data for as long as your account is active, and for seven years after it is closed.
Seven years is not an arbitrary number. Records of hours worked and wages paid are an employer's records before they are ours: Ontario requires an employer to keep them, and the Canada Revenue Agency expects supporting books and records to be available for six years from the end of the tax year they relate to. Seven years covers both with room to spare.
Deleting one thing is not the same as destroying it, and you should know which you are getting. When a photo, a site document or a receipt is deleted in the app, it disappears from everybody's screens at once and the link to the file stops working at once — nobody who once had that link can open it again. The file and its details are then kept for seven years counted from the day you deleted it, somewhere the app cannot reach at all: no role, in any company, can open it, and getting to it needs our own administrative access. How old the file itself was makes no difference — a photograph taken years ago and deleted today is kept until seven years from today, the same as one taken this morning.
We do that because the things people delete are often the things they turn out to need. A receipt is a tax document you are required to keep for six years. A site photograph is the evidence a job was done the way you say it was. A signed permit settles an argument. None of that should depend on somebody being certain in the second they tap a button, and until seven years are up you can write to us and ask for it back. After that it is destroyed for good.
When you delete your account, your identity — name, phone number, photo, certificates and push tokens — is deleted immediately, and your company memberships are removed. What stays is the work record: the shifts you were paid for, the payments themselves, and the receipts you submitted. Those belong to the employer whose payroll they document, and a worker cannot erase the payroll of the company that paid them. Your name stays attached to them, because "34.5 hours — unknown" is a record of nothing.
You can:
your hours and pay;
If a request concerns records held by your employer — your hours, your pay — we will pass it to them, because those records are theirs to correct.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Data is encrypted in transit and at rest. Access is controlled by rules checked on the server on every read and write, not by what the app chooses to show. Only the owner of your company and you can read your pay.
CrewHub is for people aged 18 or over and is not directed at children.
If we change this policy in a way that affects what we collect or who sees it, we will say so in the app before the change takes effect.
---