GumbyOps privacy policy
Effective October 17, 2026
GumbyOps is a time clock, scheduling, photo and messaging app for construction companies. It is made by GumbyWorks, a product line of kadosh3, llc ("we"). This policy covers GumbyOps on your phone (added to your Home Screen from the web), the office website and the customer portal.
Your company is in charge of its data. GumbyOps is provided to a company (your employer, or the contractor working on your project). That company decides who is invited and what is recorded, and we handle the information on its behalf. Questions about your records are best asked of the company first; we will help it answer.
What we collect
•
Account details: name, phone number, email address and role.
•
Location, only while you're clocked in: where you clock in and out, and when you open the app while clocked in, at most once every set number of minutes your company chooses. The app never tracks you in the background or while you're clocked out. Customers' locations are never collected.
•
Work records: clock-ins and clock-outs (including where they happened), time cards, schedules, notes, daily logs and team chat.
•
Photos and messages you add to a job, including the place a staff photo was taken. Photos uploaded by customers keep no location.
•
Device information: app version, browser and phone model, notification tokens, and error reports when something goes wrong (these never include location).
•
Your consent record: when you agreed to, declined or withdrew location tracking, and which version of this notice you saw.
How it is used
To run GumbyOps for your company: putting hours on the right job, showing where each crew member last checked in, offering a job switch at another site, scheduling, payroll exports, and support. We don't sell personal information, use it for advertising, or share it for others' marketing.
Who sees it
•
Inside your company, people see what their role allows. Location is visible to the company's Admins and Supervisors and to the manager of the job you're on; you can see your own location history in the app. Customers never see staff location, time or pay.
•
Service providers that run parts of GumbyOps for us, under contracts that limit their use of the data: Google (Firebase and Google Cloud for hosting, sign-in, storage, notifications and error reports; Google Maps Platform for addresses and maps), Postmark (email delivery), and Intuit (only if your company connects QuickBooks Online, and only the approved hours it sends).
•
When the law requires it, or to protect someone's safety.
How long it is kept
•
Location points are deleted no later than 90 days after they are collected. The place of each clock-in and clock-out stays with the time card.
•
Time records, photos, notes and messages are kept by your company for as long as it uses GumbyOps and the law requires.
•
Backups may hold deleted information for up to 14 days.
Your choices
•
Decline location tracking. If you don't agree, you can't clock in from the app; your company can record your time another way.
•
See your own location history in the app.
•
Delete your account in the app under the Me tab, Delete my account, or by emailing us. Your sign-in, profile details and location points are deleted; time records stay with your company because employers must keep them. See Deleting your account.
•
Customers can change or stop email updates at any time.
Security
Information is encrypted in transit and at rest. Each company's data is kept separate from every other company's by access rules, and access inside a company is limited by role.
Children
GumbyOps is not meant for children under 13, and we don't knowingly collect their information.
Changes
If this policy changes, we'll update the date above. If a change affects location tracking, the app asks you to agree again before your next clock-in.
Contact
info@gumbyworks.com