Privacy notice for the BridgeBuild app and platform

What the BridgeBuild app keeps on your phone, what the platform holds for the company you work for, who works on it for us, and how to have it removed.

Who we are

BridgeBuild is software that runs a company's public website and its back office. It is made and run by Bridge Street Investments Company, 7 Airport Road, Akure, Ondo State, Nigeria. Each company that uses BridgeBuild (a "workspace") is responsible for the information in its workspace: its staff accounts, its customers' enquiries, its site's content. We host and process that information on the company's instructions. If you are a customer or visitor of one of those companies, the privacy notice on that company's own website is the one that applies to you.

The app

The BridgeBuild app connects your phone to one company's workspace. It is for that company's staff, and for people the company shares a project with, such as its clients, investors and lenders. Accounts are created by the company, by invitation, never inside the app. Until you connect it to a workspace, the app holds nothing about you. Once you connect and sign in, everything you do goes to that company's workspace over an encrypted connection, exactly as it would in a browser.

On your phone the app keeps: the name of the workspace you connected to; an installation id the app makes up at random (it is not taken from the phone's hardware, so it does not identify your phone to anyone else); your sign-in session; changes you saved while offline, including photos you captured, until they upload; and a copy of screens you opened recently, so they load without a connection. Signing out clears your session, the copies of screens and this phone's notification registration. Saved offline changes stay on the phone until they upload; switching workspace or uninstalling the app removes everything.

Your workspace also keeps a list of the phones connected to it, so its admins can see them and remove one. For each phone it holds the installation id, whether it is Android or iPhone, the app's version, who last signed in on it, and when it was first and last seen. Removing a phone from the list signs it out.

If a company shares a project with you

The company's workspace holds your name, email and phone number (if you gave one), which of its projects you follow and what you may see of them, and the site visits you record: their photos and videos, with sound, your comments, and where each photo was taken if your phone saved it in the photo. The company sees a visit as soon as you send it; other people following the project see it only if the company shares it. You can see where the project is and where its site photos were taken. The app and the website keep nothing you open on your phone or in your browser after you leave the page, unless you save or share it yourself.

Permissions the app asks for

• Camera: to take site photos, inspection videos, receipts and delivery notes as evidence.
• Microphone: only while you record a video for an inspection or a site visit.
• Photos: to attach a photo or a video you already have. The app marks it as imported, not taken on the spot.
• Location: only while you take a photo or pin a project's site. A photo carries where it was taken, and a pin saves where the site is. People a company shares a project with can see where the project is and where its site photos were taken.
• Notifications: only after you tap "Turn on". The app then gets a delivery address for this phone and gives it to your workspace. A notification never contains a name, an amount or a customer's details, only a fixed line such as "There is a payment to review" and where to open. The address is removed from the workspace when you sign out or switch workspace.

Who works on it for us

These providers process information for the platform, on our instructions and for no purpose of their own:

• Railway (Railway Corp., United States) hosts the platform.
• Neon (Neon Inc., United States) stores the company's records.
• Cloudflare (Cloudflare, Inc., United States) provides domain names and encryption, the network in front of company websites that run on their own domain, and the storage (R2) that holds uploaded photos and files. It also counts visits to company websites and to this address — including the app's screens, which are web pages — with its Web Analytics, which sets no cookie, keeps nothing in your browser and does not identify you.
• SMTP2GO (SMTP2GO Ltd, New Zealand) sends the platform's email: invitations, notifications, enquiry alerts.
• Expo (650 Industries, Inc., United States) delivers push notifications to the app. It receives the phone's delivery address and the fixed line, nothing else.
• DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., China) powers the chat assistant on company websites. It receives what a visitor types into the chat, the assistant's replies, the name the visitor gave and any preferences they stated (budget, areas). It does not receive the visitor's email or phone number.

A company may switch on further services for its own workspace; when it does, its own notice names them: Infobip (SMS codes for approving payments: the staff phone number and the code), PaySwitch (card and mobile-money payments), Meta's WhatsApp Business (alerts to the company's own staff), Google Maps (a map on the company's contact page, loaded by your browser from Google), Google Search Console and Bing Webmaster Tools (the site's address only, so it appears in search). Currency rates come from open.er-api.com, which receives a currency code and nothing about you.

Cookies and what stays in your browser

Signing in sets one cookie: auth_token for a company's staff, or stakeholder_token for someone a company has shared a project with. Either keeps you signed in for up to seven days; a staff sign-in is renewed while you use the app. There are no advertising or analytics cookies, and nothing that follows you between sites. Company websites remember, in your own browser, the currency you chose and, if you use the chat, your chat session and the name and email you gave it.

If something breaks

If a screen fails, the app sends us the page you were on, the error text and the build number so we can fix it. It is kept in our fault records for a short time, not with your company's information; it never includes what you typed; and it is only sent while you are signed in.

Security

Every connection is encrypted. We never see your password and have no way to look it up. Every evidence photo is protected when it is taken, so a later change to the file can be detected.

How long

A workspace keeps its information for as long as the company uses BridgeBuild, and afterwards where the law requires. Your staff account exists until it is deleted, as the next section explains; after that, the company keeps the records it is required to hold, such as invoices and payments, without your name on them, for as long as the law requires. This phone's notification registration is removed when you sign out. Error logs are kept for a short period and then discarded.

Your choices, including deleting your account

Your account belongs to your company's workspace. To correct it, ask your workspace admin. To delete it, open the app, tap your initials, then Your account, then Delete my account: your request goes to your company's admins, who delete the account. Deleting an account removes its sign-in, erases your name and contact details, and signs out the phones signed in to it. If you cannot use the app, or the company no longer exists or you cannot reach it, email support@bridgebuild.app from the account's email address with the workspace name, as https://bridgebuild.app/delete-account explains; we confirm the request with you and act within 30 days. To remove everything the app keeps on your phone, uninstall it.

If a company has shared a project with you, sign in, open Your account at the foot of any page, and tap Delete my account: the company removes your name, email and phone, and you are signed out. The project's records and your site visits stay, without your name.

Changes

We date this notice and change the date when it changes. Last changed: 2026-10-10.

Contact: support@bridgebuild.app.

Requesting a BridgeBuild demo

The operator named above uses your name, email, company, country, and any role or challenge you supply to assess your enquiry, arrange a walkthrough, and record follow-up. Authorised platform owners handle requests in a private inbox. The providers listed above that run the platform and store its records process this information for us. Submitting a request does not create an account or subscribe you to a newsletter. This form sends you no automatic email and shares no form content with analytics.

We review closed or spam enquiries for removal after 90 days from closure, and other enquiries after 180 days from receipt. Removal is performed by an owner and clears contact details, submitted content, and internal notes. Minimal audit and retry references remain. Backups follow our separately maintained backup retention policy. For access, correction, removal, or details of that policy, contact support@bridgebuild.app.

To limit abuse, we count the requests that come from one network address for a short time. We do not store the address on your enquiry. A count stops being used after 20 minutes and is deleted as further requests arrive. Demo notice version: bb-demo-v2, dated 30 September 2026.