TreeSafe
OhOh! Ltd (OhOh Safety) is the data controller for TreeSafe (Android package com.treesafe.app). This policy explains what we collect, who receives it, and how to delete it. It applies to TreeSafe, not to other OhOh Safety products.
1. Who we are
Controller: OhOh! Ltd (OhOh Safety).
Contact: info@ohohsafety.com
UK GDPR applies.
2. Information we collect
Account
- Name and email from Google Sign-In, Apple Sign-In, or email and password
- Profile picture if your sign-in provider supplies one
Work you create in the app
- Risk assessments, RAMS, site visits, quotes, invoices, checklists, and method statements
- Company details, logos, signatures, and team names you enter in Settings
- GPS coordinates you add to sites, documents, or map pins
- Photos you attach to documents or trees
Location used while you work
If you allow location, the app reads your GPS to show weather, centre the site map, find a nearby A&E, or stamp coordinates on a document. Location is not used for advertising.
Free-tier document count
When you are on the free plan we store a monthly count of finished documents so the cap can be enforced. That is a usage counter, not analytics or advertising tracking.
Device and crashes
- Device type, operating system, and app version
- Crash logs via Firebase Crashlytics
Payments
Subscription status comes from RevenueCat and Google Play or the App Store. We do not store card numbers.
3. Where data is stored
- On your device (SQLite, photos, logos, exported PDFs)
- In Google Firebase (Authentication and Cloud Firestore) when you are signed in, including photos stored as part of your document records so they restore on another signed-in device
TreeSafe does not use Firebase Storage buckets. PDFs are generated on the device. If you share a PDF, that copy lives where you sent it.
4. Who receives data
We do not sell personal data. These processors receive only what they need to run TreeSafe:
- Google Firebase (Authentication, Cloud Firestore, Crashlytics): account, documents, photos in those documents, crash reports
- Open-Meteo (open-meteo.com): current GPS coordinates to return weather
- OpenStreetMap tile servers (openstreetmap.org/copyright): map tile requests that include the area you are viewing
- Google Places: GPS coordinates to find a nearby A&E, only in builds that include a Places API key. The default hospital list is a bundled NHS directory and does not call Google
- RevenueCat, Google Play, Apple: subscription status and restore purchases
- Google or Apple: sign-in
We do not run a separate analytics or advertising SDK. We do not use the Android advertising ID.
5. Public quote, invoice, and site-visit links
If you send a quote, invoice, or site visit from the app, TreeSafe publishes a snapshot at a secret URL on this site (paths /q/…, /i/…, /s/…). Anyone with the link can read that snapshot. It typically includes client name, site address, line items or tree records, and your company name. Invoice snapshots also include the bank name, sort code, and account number you entered. Quote Accept or Decline writes the client’s choice back to that snapshot.
Those public documents stay readable by link until you delete the account or delete that quote, invoice, or visit in the app. Deleting your account removes the published snapshots we hold.
6. How we use the information
- Provide TreeSafe, including backup and restore on your signed-in devices
- Generate PDFs with your branding
- Let a client open a quote, invoice, or site-visit link you sent
- Show weather and maps, and look up a nearby hospital when you ask
- Enforce the free-tier monthly document cap
- Process subscriptions and restore purchases
- Diagnose crashes
7. Your rights (UK GDPR)
You can access, correct, or delete your personal data, and object to or restrict processing where the law allows. You may complain to the ICO (ico.org.uk).
To delete your account: Settings → Delete account in the app, or follow account deletion, or email info@ohohsafety.com.
8. Retention
We keep your data while the account is active. When you delete the account we remove your Firebase Auth user, Firestore records under your user id (including photos stored in those records and the monthly usage counter), and the public quote, invoice, and site-visit link documents for that account. On the device that ran Delete account we also clear the local database, photos, logos, and exported PDFs. Google Play, Apple, RevenueCat, and Crashlytics keep records under their own policies. We may keep data if the law requires it.
9. Children
TreeSafe is not for anyone under 16. We do not knowingly collect children’s data.
10. Changes
We may update this policy. The current version is this page. The app also links here from Settings and sign-in.
11. Contact
Email: info@ohohsafety.com
Company: OhOh! Ltd (OhOh Safety)