Legal

Privacy Policy

Last updated: August 2026

1. Who Is Responsible for Your Data

Gumly is operated under the trade name Gumly Technologies ("Gumly", "we", "us"), and we are responsible for the personal information described in this policy. Privacy questions, and any request about your own data, go to support@gumly.tech.

2. What We Collect

You give us: your name, email address, phone number, and the service address for a booking — including the ZIP code, which determines whether we can serve you at all. Also anything you write in booking notes, quote responses, support messages, or the contact form.

Bookings generate: the service requested, date and arrival window, price and quote history, job status, the technician assigned, completion notes, ratings you leave, photos or video you upload about the job, and — where a job is signed for — a signature captured on the technician's device.

Location: the coordinates of a booking address, so a technician can navigate to it. In the technician app, a technician's own device location while they are working a job. We do not track customers' device locations in the background.

Payment: handled by Stripe. We receive confirmation, amount, status, and the last four digits and card brand. We never receive or store your full card number.

Automatically: device and browser information, and website usage — pages viewed, which button started a booking, and the marketing campaign that brought you to the site. This is described in section 9.

We do not collect biometric identifiers, and we do not run facial recognition on job photos. A signature captured to confirm a job is not used to identify you elsewhere.

3. Why We Use It

To check we serve your address, place your booking in an available slot, and assign a technician.
To give the technician what they need to arrive and do the job — your name, address, contact number, and job details.
To take payment, pay technicians, and handle refunds, failed payments, and disputes.
To send booking notifications by push, SMS and email — for example that a technician is on the way. These are transactional; you can turn SMS and email off in your notification settings, though we will still contact you where a booking requires it.
To verify technician identity and run background checks, for technician accounts only.
To answer support requests and resolve complaints.
To detect fraud and abuse, and to keep the platform secure.
To understand which parts of the site lead to a booking, so we can improve them.

We do not use your information for automated decisions that produce legal effects about you, and we do not sell it.

4. Who We Share It With

The technician assigned to your booking receives your name, service address, contact number, and job details. They need these to arrive and do the work. Technicians are independent contractors and are separately responsible for how they handle what they receive.

Service providers, each receiving only what their function requires:

Supabase — database, authentication and file storage (United States).
Stripe — card payments and technician payouts, including identity verification for payouts.
Twilio (SMS) and Resend (email) — booking notifications.
Vercel — website hosting.
Mapping and address-lookup providers, to turn a typed address into a verified one and to plot a route.
Where a background check or identity check is run, the provider performing it receives only what that check requires.

We may also disclose information where the law requires it, to enforce our Terms, or to protect someone's safety. If the business is ever sold or transferred, information may transfer with it, and we will give notice before that happens.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

5. Where It Is Stored

Our infrastructure is hosted in the United States. If you use Gumly from outside the United States, your information will be processed there.

6. How Long We Keep It

Account information is kept while your account is open. Booking and payment records are kept after that where we need them for tax, accounting, warranty, or dispute purposes. In practice: booking and payment records are kept for 7 years to meet tax and accounting requirements; support messages for 2 years; website analytics for 14 months; and photos attached to a job for 12 months after it is completed.

7. Your Rights and Choices

You can view and update your account information at any time in your account settings.

Deletion. To delete your account and the personal information associated with it, email support@gumly.tech or use the contact form, and we will process the request. We will confirm when it is done. We may keep records we are legally required to retain — principally completed bookings and payment records — and will tell you what has been kept and why. We will respond within 30 days.

Depending on where you live, you may also have the right to a copy of your data in portable form, to correct it, to object to or restrict certain processing, and not to be discriminated against for exercising these rights. To exercise any of them, contact us at the address above. We will verify your identity — usually by confirming control of the email on the account — before acting.

8. Notification Choices

Push, SMS and email notifications can be switched off individually in your settings, and you can set quiet hours during which non-urgent messages are held rather than sent. Urgent booking messages — a technician arriving, or a payment failing — may still be delivered during quiet hours. Marketing email, if we ever send it, will always carry an unsubscribe link. Replying STOP to an SMS stops SMS from us.

9. Website Analytics, Cookies and Global Privacy Control

Our website records page views and a small number of interaction events — that a booking was started, that a form was submitted — together with the marketing campaign that referred you. These are grouped by a random session identifier that is stored only for the browser session and is discarded when you close the tab. It is not a cookie, not tied to your account, and not shared with any advertising network. We record the referring site's domain, never the full referring URL.

We honour Global Privacy Control. If your browser sends a GPC signal, our site records nothing at all.

Cookies and similar storage are used to keep you signed in. We do not run advertising or third-party analytics tags on the site.

10. Security

Access to data is restricted at the database level so that customers see their own bookings and technicians see the jobs assigned to them. Traffic is encrypted in transit. Card numbers are handled by Stripe and never reach our systems. No system is perfectly secure; use a strong, unique password, and tell us immediately if you think your account has been accessed. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.

11. Children

Gumly is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy. If a change materially affects how we handle your information, we will give notice in the app or by email before it takes effect, and update the date above.

13. Contact Us

Questions about this policy can be sent to support@gumly.tech or via our contact page.