Privacy Policy

Effective: April 28, 2026 · Last updated: April 28, 2026

Elevated Workforce Management ("EWM," "we," "us," or "our") provides workforce deployment and productivity-tracking services to its customers (hotels, hospitals, rental operators, and industrial sites). This Privacy Policy explains what information we collect through the EWM Workforce mobile application and the EWM admin web portal, how we use it, and the choices you have.

1. Who is the data subject

• Workers — field staff who sign in to the EWM Workforce mobile app to view shifts, clock in/out, and complete tasks.
• Site managers and area managers — EWM and customer staff who access the admin portal to schedule shifts, view performance, and run billing.
• Customers — the organizations that contract with EWM for workforce services. Customer billing and rate data is associated with the customer record, not with individual end users.

2. Information we collect

We collect only the information needed to operate the service:

• Account information — full name, email address, optional phone number, preferred language. Created by an EWM administrator; you can change name/language/phone after first sign-in.
• Authentication — email and password, processed and stored by Supabase Auth. Passwords are hashed; we never see your plaintext password.
• Shift and task records — scheduled times, the site you are assigned to, tasks assigned, your status (scheduled / clocked in / clocked out), times you start and complete each task, optional photo proof you attach, and free-text notes you enter.
• Location at clock-in — one latitude/longitude reading captured the moment you press Clock In. Used solely to verify you are within the geo-fence of your assigned site. We do not track your location continuously, in the background, or after clock-out.
• Camera and photo library access — used only when you scan a site/room QR code or attach a photo to a task. Photos you take are uploaded to a private Storage bucket and associated with that task.
• Device push token — if you opt in to notifications, an opaque token issued by Apple or Google so we can send you reminders about scheduled shifts or task assignments. (Push notifications are currently disabled in this version.)
• Usage and audit logs — every state change on a task (started, completed, blocked, skipped) is recorded with a timestamp and the actor's user ID, in an append-only audit log used for accountability and operational reporting.

We do not collect: payment card data, social security numbers, health information, biometric data, contacts, calendar, microphone audio, or advertising identifiers. The app contains no third-party analytics SDKs and no advertising.

3. How we use your information

• To assign you shifts and tasks, and let you view, start, and complete them.
• To verify you are at your assigned site at clock-in (geo-fence check).
• To produce the operational reports your employer and the customer site contract for: hours worked, tasks completed, on-time performance, incident counts.
• To produce billing line-items between EWM and the customer based on completed billable tasks (e.g. rooms cleaned).
• To produce payroll reports between EWM and you, based on hours worked.
• To investigate operational issues (a missed shift, a contested clean, a safety incident).

4. Who we share information with

• Your employer (EWM) and authorized supervisors — site managers, area managers, and regional vice presidents at EWM see your scheduled shifts, hours, tasks, and completion status as part of their operational duties.
• The customer site you are deployed to — the customer (e.g. a hotel general manager) sees aggregated performance for their site, including which tasks were completed, by which named worker, and when. They do not see your wage, payroll details, or contact information beyond your name.
• Sub-processors that we use to operate the service:
  • Supabase, Inc. (database, authentication, file storage) — privacy.supabase.com
  • Apple Inc. and Google LLC (push notification delivery, when enabled)
  • DigitalOcean LLC (hosting of the admin web portal and marketing website)
• Law enforcement or regulators — only when legally compelled or in response to a valid court order.

We do not sell or rent your personal information to advertisers, data brokers, or any third party.

5. Data retention

Operational records (shifts, tasks, audit events, photos) are retained for the duration of the customer engagement plus seven years thereafter, to satisfy customer-billing audits and labor-law record-keeping requirements (FLSA Section 11(c) requires three years of payroll records, and we keep operational data the same length for consistency). Account information is retained while your worker account is active and removed within 90 days of deactivation, except where law requires longer retention.

6. Your choices and rights

• Access, correction, deletion — email privacy@elevated-workforce.com with your request and we will respond within 30 days.
• Location — you can deny location permission in iOS or Android Settings. Without it, you cannot clock in to a site that has a geo-fence configured.
• Camera / photos — you can deny these permissions. Tasks that require photo proof cannot be completed without permission.
• Push notifications — opt in or out at any time in iOS or Android Settings.

Residents of California, Colorado, Connecticut, Utah, Virginia, and other US states with comprehensive privacy laws have additional rights under those laws, including the right to opt out of certain data sales (which we do not perform) and the right to appeal an access or deletion decision. Contact us using the address above to exercise these rights.

7. Children

EWM Workforce is a tool for employed adult workers and is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has used the service, contact us and we will remove the account.

8. Security

All traffic between the mobile app and our backend is encrypted with HTTPS (TLS 1.2 or higher). Database row-level security policies enforce that workers see only their own shifts/tasks, site managers see only their site, and area managers see only their region. Photos are stored in a private storage bucket and accessed only via short-lived signed URLs.

9. Changes to this policy

We will post a new effective date at the top of this page if the policy changes. Material changes will be communicated to active users via the app or email. Continued use of the service after the new effective date constitutes acceptance of the revised policy.

10. Contact

Elevated Workforce Management
Frisco, Texas, USA
Privacy questions: privacy@elevated-workforce.com
General support: support@elevated-workforce.com