BUILD HALT
Privacy Notice
Last updated: 2 October 2026
Who we are
Build Halt is operated by Build Halt Limited, registered in England and Wales, company number 17184837, registered office 66 Paul Street, London EC2A 4NA. Build Halt Limited is a subsidiary of Vorfreude Limited (company number 15125270), which publishes the Build Halt app on the App Store.
For questions about this notice or your data: support@buildhalt.com
Our parent company, Vorfreude Limited, is registered with the Information Commissioner’s Office, registration number ZC226772.
Two different relationships
If you are an employer using Build Halt to run your team, we are a data processor acting on your instructions. You are the controller of your employees’ data.
If your employer uses Build Halt and you have an account through them, your employer decides what data goes into the app and how long it is kept. Ask them first about access or deletion — but you can always contact us and we will help.
For your own account details — the email you sign in with, your name — we are the controller.
What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, phone number | To create your account and let your team identify you | Contract |
| Profile photo | Optional. So colleagues recognise you | Legitimate interests |
| Location at clock-in and clock-out | To confirm you were at the workplace when your shift started and ended | Legitimate interests of the employer |
| Hours worked, breaks | Timesheets and pay | Contract / legal obligation |
| Hourly pay rate | Payroll calculations | Contract |
| Photographs taken in the app | Recording work progress | Legitimate interests |
| Messages, announcements, comments | Team communication | Legitimate interests |
| Tasks, projects, forms, checklists | Running the work | Contract |
| Reports you make, and people you block | Dealing with objectionable content and abuse (see below) | Legitimate interests — keeping the service safe, as our terms require |
| Device token | Sending you notifications | Consent — you can refuse |
| Crash reports | Diagnosing faults | Legitimate interests |
Location — what we do and do not do
We take a single location reading when you clock in and again when you clock out. That is all.
We do not track your location continuously, in the background, or when you are not clocking in or out. We do not know where you are between those two moments, or at any point outside working hours.
If your employer has set a workplace location, the reading is used to check you are within 300 metres of it.
Reports and blocking
Anyone can report a message, comment, announcement or photo, or block another person. When you do, we record who reported or blocked whom, the reason you chose, and a copy of the reported item as it was at that moment (for a photo or file, we can open the item itself). A small number of Build Halt staff review each report within 24 hours, and use it for nothing else.
The person you report or block is not told who reported them. If a report is upheld, the content is removed and the person who posted it loses access to Build Halt.
Reports are kept for 12 months after they are closed. A block stays until you lift it (Account → Blocked people) or either account is deleted. A record that an account was suspended is kept for as long as the suspension lasts. See our terms of use, clause 7.
What we never collect
We do not use facial recognition, fingerprints or any other biometric data.
Who your data is shared with
Every provider that stores your data is in the EU. Apple and Google are involved only in delivering notifications and in sign-in, if you choose their sign-in button.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, file storage and sign-in | Frankfurt, Germany |
| Vercel | Hosting our website and the web app managers and crew use in a browser; nothing is stored there | Frankfurt, Germany |
| Sentry | Crash reporting | EU region |
| Geoapify | Map images | Germany |
| IONOS | Our support mailbox and email | Germany / United Kingdom |
| Stripe | Taking payment for a company’s plan, on our website. Stripe sees the paying manager’s billing details and card; never worker data or project content | Ireland |
| Apple | Delivering push notifications to iPhones; “Sign in with Apple” if you use it | United States |
| Delivering push notifications to Android phones; “Sign in with Google” if you use it | United States |
The full list, with what each provider receives, is at buildhalt.com/subprocessors.
We do not sell your data. We do not use it for advertising. We do not use it to train AI models.
Where your data is held
In Germany. Transfers from the UK to the European Economic Area are permitted under the UK’s adequacy regulations, so no additional safeguards are required.
Push notifications are delivered by Apple (iPhone) or Google (Android) in the United States. This is limited to a device identifier and the text of the notification, and is unavoidable for any phone app.
How long we keep it
- Your account — until you delete it or your employer removes you
- Working-time records — two years, because employers are legally required to keep them. These survive account deletion, without your name attached
- Photographs and messages — for as long as your employer keeps the project
Your rights
You can ask us to give you a copy of your data, correct anything wrong, delete your account, object to processing based on legitimate interests, or restrict processing while a complaint is resolved. We will respond within one month.
Deleting your account
In the app: Account → Delete account. It takes effect immediately and does not need anyone’s approval. If you no longer have the app, email support@buildhalt.com from the address you signed up with and we will delete it within one month.
On deletion: deleting your account removes your login and every personal detail — name, phone number, photograph, pay rate. Hours you have already worked remain on record without your name attached, because your employer is required by law to keep them for two years. We cannot remove those on request.
Contact support@buildhalt.com. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
Data is encrypted in transit and at rest. Access is restricted at the database level so people can only reach their own organisation’s records. We keep the number of staff who can access production data to the minimum necessary.
Changes
We will update this page and, where changes are significant, tell you in the app.