Privacy policy

In short

Strawberry Safe is run by Strawberry Safe LLC (“we”). It collects what it needs to keep an equipment register and the inspections recorded against it, and little else. We don't sell data, show ads, or track you across other sites.

What we collect

About people:

• Your name, work email, language, and your role in each organization. Your password is stored only as a one-way hash, which can't be turned back into the password.
• The name, and an employee reference if your organization adds one, of each person it issues gear to, whether or not they have an account.
• On each inspection: who did it, their role at the time, their signature as drawn or typed, the answers, notes and photos, and when it was recorded and received.

About your organization: its equipment register, catalog, sites, manuals, logo and time zone, and a log of changes — who did what, and when.

When someone reports a problem from a label's page without signing in, we keep their note. We also keep a scrambled form of their network address for a short time, only to stop the button being abused.

What we don't collect

• No location tracking. Where gear was inspected is the site and location your organization set in the register, not a phone's GPS. Photos are re-saved on the phone before upload, which drops any location the camera wrote into them.
• No advertising, analytics or tracking cookies, and nothing sold or shared for marketing.
• No payment details: there's nothing to pay during early access.

How we use it

• To run the service: signing you in, showing your organization its records, working out what's due, sending the emails your settings ask for (alerts, the weekly digest, invitations and password resets), and producing the reports you ask for.
• To keep it secure: slowing down repeated sign-in attempts, and looking into misuse.
• To fix what breaks: when the app hits an error, it sends us a report of what went wrong and on which page. The report doesn't include your name, email or network address, or links that open something, such as an invitation.
• To help you, when you ask us to.

Who can see it

• The members of your organization, according to their roles.
• Anyone who scans a label sees only that item's category, status, inspection dates and manufacturer's instructions — never a serial number or who holds it. Your organization's name, and your logo, show on the label and that page only if you turn that on.
• Anyone you send a share link to sees that site's register and can download its audit pack, until the link expires or you revoke it.
• The companies that host the service for us, listed below, only to run it.
• Us, only to keep the service running, when you ask for help, or when the law requires it.

Where it's stored

In the United States. The app runs on Vercel, the database is hosted by Neon, email is sent through Resend, and reports of errors in the app go to Sentry. Each handles your data only to provide its part of the service to us.

Cookies

We use three cookies, all needed for the app to work: one keeps you signed in, one remembers which organization you're working in, and one remembers your language. The app also keeps inspections recorded offline on your phone until they upload.

How long we keep it

Inspection records are safety records, and they're kept for as long as your organization's account is open — often years, because that's what an audit asks about.

Removing someone from your organization ends their access, but the records they signed keep their name and signature as signed. Changing those would change the evidence.

If your organization closes its account, we give it a copy of its records and then delete them within 90 days. Deleted data can remain in backups for up to 30 more days, until those expire.

Your choices

You can change your password, your language and which emails you get in the app. To get a copy of your personal data, correct something you can't change yourself, or close your account, write to support@strawberrysafe.com. We'll answer within 30 days. Where records you signed have to be kept as evidence, we'll remove everything else we hold about you and tell you what we kept and why.

Security

Each organization's records are walled off from every other organization's at the database level, changes to them are logged, and connections are encrypted. If a breach affects your data, we'll tell your organization's admins without delay.

Changes to this policy

When this policy changes, we'll update the date at the top, and for a change that matters we'll email your organization's admins before it takes effect.

Contact

Privacy questions and requests: support@strawberrysafe.com.