Deltorin SafeCrew Privacy Policy
App update availability: The new reporting, hiding, blocking and on-phone cleanup controls described here require the forthcoming SafeCrew app update. They are not yet available in earlier installed versions. Existing account-deletion and server-cleanup changes are already live.
Version: 1.4 (account deletion, content reports, hiding and blocking) Effective date: October 11, 2026
This policy explains what information the Deltorin SafeCrew mobile app for iPhone and Android collects, why, who receives it, how long it is kept, and how to delete it. Deltorin SafeCrew is operated by AY6 Safety LLC ("AY6", "we", "us"). This policy covers the app only. It does not cover our website or our separate safety consulting work.
1. The short version
- We collect what is needed to create, sign, store and share workplace safety records, run your account, and handle subscriptions.
- We do not sell your personal information, share it for advertising, show ads, or track you across other companies' apps or websites.
- The app does not use your device's GPS. It never asks for location access.
- The optional Safety Assistant sends your question and chat context to Anthropic only with separate provider permission and a fresh acknowledgment for each request.
- You can delete your account inside the app at Settings → Delete Account, at no charge.
- Safety records you create for your company stay with your company after you delete your account. Section 8 explains this.
2. Who controls your information
Companies use Deltorin SafeCrew to keep safety records about their own work.
- Your company controls its safety records. That includes job briefings, hazard analyses, incident reports, observations, toolbox talks, emergency action plans, corrective actions, photos and signatures. We store and process those records on your company's behalf.
- We control your account information. That is your name, email address and account settings, which we use to run your account.
If you have a question about a safety record, start with your employer. For anything about your account, contact us directly (section 13).
3. What we collect
Information you give us
| What | Examples | Why we need it |
|---|---|---|
| Account details | Name, email address, job title, phone number (optional) | To create your account and show who created or signed a record |
| Company membership | Company name, your role, who invited you | To keep each company's records separate and control who can see what |
| Safety records | Job details, hazards, controls, crew names, incident descriptions, corrective actions | This is the core of the service |
| Signatures | Drawn signatures. For guest signers: first name, last name, employer and job title | To record who signed or acknowledged a document |
| Photos | Pictures of site conditions, hazards, equipment and completed work | To attach evidence to a record |
| Location you type | Site addresses, muster points, work locations | Typed by you into records. We do not use GPS |
Health information in incident reports. An incident report can include details such as the type of injury, the body part affected and the treatment received. Your company enters this to manage incidents and meet its recordkeeping duties. Only people with the right company role can see it.
Photos. Photos are meant for jobsite and safety documentation. Please do not upload images of injuries, medical information or other sensitive personal content unless your company has specifically decided to allow it. The app does not blur faces or license plates, and faces, names or addresses can still be visible in a photo. Check photos before you attach them.
Information collected automatically
| What | Details | Why |
|---|---|---|
| Crash reports | Error details, device model, operating system and app version, plus a random identifier created for crash reporting only | To find and fix crashes |
| Record history | When a record was created on the device and when it reached our servers, the app version, and a random identifier for your app installation | To show when and on which device a record was made, including records made offline |
| Usage counts | How many records of each type you create each month | To apply plan limits |
| Activity history | Who created, changed, signed or finalized a record, and when. This records field names, never the content | So your company can review a record's history |
| AI usage metadata | Account and company identifiers, time, input length, provider/model, token counts, cost, latency and success | To meter use, manage costs and investigate service problems; company managers may see permitted usage records |
Our crash reports are set up to leave out your name, email address and record content. Google's crash-reporting service may still record standard technical details about your device and the error.
What we do not collect
The app does not access your GPS, background location, contacts, calendar or the Health app. It does not collect advertising identifiers or your browsing history. Drawn signatures are stored as images and are not used for biometric identification.
Reports, hiding and blocking. These controls come with the app update released with this policy version. Earlier app versions do not have them. When you report content, we store which record, comment or photo you reported, your reason, any note you add, and your internal account ID. Your company's owners and safety managers review reports and can see who filed them, except the person a report is about, who cannot see it. Reports are not shown in the company's activity history. Reports about an owner or safety manager are also reviewed by AY6 Safety LLC. Your hidden items and blocked people are stored in a private list that only you can read; it is deleted with your account. When someone you blocked uploads a photo, the app checks the photo's recorded uploader to collapse it for you.
4. Camera, photos and microphone
The app asks for access to the camera and photo library only when you choose to attach a photo.
It asks for microphone access only when you tap dictation to speak instead of type. In this version, dictation works only when your device can recognize speech on the device itself. If your device would have to send audio to Apple or Google to recognize it, dictation is not available. The app uses the recognized text in the field you are filling in and does not keep the audio.
You can turn camera, photo and microphone access off at any time in your device settings. Turning them off does not affect the rest of the app.
5. Optional AI and unavailable speech features
Safety Assistant. After you accept the separate provider notice, we send your question and earlier messages in the chat through our server to Anthropic to generate an answer. Each question, follow-up and retry also requires a fresh acknowledgment that you will check the answer. General Terms acceptance is not provider permission. Do not include medical details or other information you do not want shared.
For new requests, SafeCrew does not persist the question or answer in its server session records, usage ledger or activity history. It keeps the usage metadata described in section 3. This does not erase any information previously sent to a provider or copies outside the service.
Anthropic's published business-API policy says content is not used to train its models by default and is generally deleted within 30 days, with exceptions, including longer retention for safety-policy enforcement or legal requirements. These are the provider's published practices, not a guarantee of a custom retention agreement for AY6. The app does not submit provider feedback.
You can withdraw provider permission on the Safety Assistant screen. Once the withdrawal is successfully saved, future requests require permission again. Withdrawal does not recall content already sent. Answers can be wrong or out of date and require your independent review.
Reporting an answer. You can report a Safety Assistant answer from inside the app. A report stores the answer text, the reason you chose, your account and company identifiers and the time, in a restricted record that only AY6 Safety administrators can read, so we can review it. It does not include your question. No end date is currently set for these records.
Speech recognition that sends audio off the device and user-facing AI document drafting are not available in this version (see section 4).
6. Who receives your information
We share information only with the service providers that run the app, and only for the purposes listed below.
| Provider | What they do for us | Information involved |
|---|---|---|
| Google (Firebase) | Sign-in, database, file storage, server functions and app-integrity checks | Account details, company records, photos, signatures and related technical data |
| Google (Firebase Crashlytics) | Crash reporting | Crash and device details, as described in section 3 |
| Anthropic | Optional Safety Assistant responses | Question and earlier chat messages, sent only after the separate permission and request acknowledgment |
| RevenueCat | Subscription management | A purchase identifier, your subscription status and purchase records |
| Apple and Google app stores | App distribution and payment | Your store account and purchase details, under each store's own terms |
We use Firebase, Anthropic and RevenueCat under applicable service and data-processing terms addressing processing instructions, confidentiality and security safeguards. Those terms may also permit limited processing for security, legal compliance and service operation or improvement, and each provider’s retention periods and practices may differ. Apple and Google separately process your store-account and payment information under their own terms and privacy policies.
People in your company with the right role can see the records they are allowed to see. We may also disclose information when the law requires it, to respond to a valid legal request, or to protect someone's safety.
7. Payment
If you subscribe, Apple or Google processes the payment. We never receive your full card number. We receive your subscription status and purchase records so the app knows which plan you have.
8. Deleting your account
In the app: go to Settings → Delete Account. It is free on every plan.
Without the app: email info@ay6safety.com from the address on your account and ask us to delete it. We will verify that the request came from the account owner before we act on it.
What deletion removes: your sign-in account, your personal profile and your billing profile, and your personal details in your company's records: your name on records you created, reviewed, verified or delivered; your comments, crew-list entries and signature images; photos that record you as the uploader; your name, notes and device in edit history; saved PDF copies that include you; your link to your company's worker list, your employee number and the email address you joined with; the note you added to any report you filed; and invitations still waiting for your verified email address. If you delete from the app update released with this policy version or later, drafts, photos waiting to upload and unsent activity for your account on that phone are also erased once the deletion is confirmed. Earlier app versions do not erase them, so remove the app from the phone to delete them. We also ask RevenueCat, the service that tracks subscriptions for us, to delete its customer record for your account, after AY6 Safety LLC confirms (automatically, or by its own check) that the record belongs only to your account; RevenueCat handles that request under its own terms, and asking does not cancel an App Store or Google Play subscription. Your company memberships are turned off and shown as "Deleted user." Removal from company records finishes shortly after deletion, not instantly.
What deletion does not remove:
- Your company's records themselves, with your details removed. Other people's entries are not changed.
- Data covered by a specific legal hold or a legal requirement we have verified for a particular record, only for that record and only while it lasts. A record under legal hold is not changed until the hold ends.
- Text you typed into a record and names other people typed as plain text. These are not linked to your account and are not changed.
- Photos without uploader information, which we cannot confirm are yours. Photos added from app versions released before this policy version do not record who uploaded them. You can ask us to remove such a photo you took. Email info@ay6safety.com with the record and photo. We remove it only after we verify your identity and that you took it, check that it is not part of another record or claimed by someone else, and confirm that no legal hold or verified legal requirement applies to it. If you did not create the record, we ask your company to confirm. Removal deletes the photo itself and leaves a note in the record's history that a photo was removed.
- Activity history keyed to an internal account ID. It does not include your name, but it is not anonymous.
- A minimal deletion record: an internal account ID and the dates of the deletion request and deletion, with no name, email or profile. It is kept indefinitely so that a subscription or usage event that arrives after deletion cannot recreate billing for the deleted account.
- Your record of what you agreed to, only if a specific legal hold, or a legal requirement we have verified, applies to it. Otherwise it is deleted with your account. When one applies, we keep only the details it covers (for example, which document versions you accepted and when), restrict access to authorized AY6 staff, and delete them when the hold or requirement ends.
- Your app-store subscription. Deleting your account does not cancel it. Cancel it in your Apple or Google account settings (see the Subscription Terms).
- Copies outside our service, such as PDFs you shared, files saved on your device, or records not yet synced from a device.
Being a company's only owner or billing contact does not stop you from deleting your account. The app shows what happens to each company first: it is archived if nobody else is in it; otherwise ownership passes to someone you choose, or, if you do not choose, the company keeps working while AY6 Safety LLC separately verifies who may take over. Choosing a replacement owner is optional and does not delay deletion. You can still email us about any privacy request at any time.
To ask about removing personal information from company records, contact your employer or email us. We will review the request against the company's recordkeeping duties.
File recovery window. After a file is deleted from our Google Storage bucket, Google keeps a recoverable copy for seven days under the bucket’s soft-delete setting. The file is removed from normal app access, but that recovery copy is not immediately erased. Object versioning is disabled.
9. How long we keep information
| Information | How long |
|---|---|
| Your account and profile | Until you delete your account |
| Company safety records, photos, signatures and their history | As long as your company keeps them. Deleting your personal account does not delete them |
| Activity history | As long as your company keeps the associated record, subject to legal holds and required retention |
| Deletion record (internal ID and dates only) | Indefinitely, to prevent late events from recreating billing |
| Record of agreement (internal ID, accepted document versions, confirmations and time) | While the account exists. Deleted with the account, unless a specific legal hold or verified legal requirement applies; then only the covered details, until it ends |
| Privacy-request correspondence | Two years after closure, unless a legal obligation or hold requires longer |
| Content reports (record, reason, status, reporter's internal account ID) | No fixed period set yet. Kept as the company's moderation history; the reporter's note is removed if the reporter deletes their account |
| AI session and usage metadata | Session metadata has a 30-day expiry; usage-ledger metadata has a 730-day expiry. Expiry limits permitted access where enforced, but physical deletion depends on the server cleanup policy |
| Crash reports | Up to 90 days, under Google Firebase Crashlytics' standard retention |
| Subscription event log (event type, product, dates, internal account ID) | No fixed period set yet. Kept so a delayed or repeated event cannot re-create billing for a deleted account. Apple, Google and RevenueCat keep their own purchase records under their own terms |
| Server backups and recovery copies | Scheduled Firestore backups and point-in-time recovery are currently disabled. Restricted operator recovery copies may exist for specific maintenance tasks; deletion requests must also be reviewed against those copies and any legal hold |
Some records, such as specified injury and illness records, have minimum retention periods under law (for example, 29 CFR 1904.33 requires five years for certain OSHA records). Your company decides how long to keep its own records within those rules.
10. Security
Information moves over encrypted connections and is encrypted when Google stores it. Server-side rules check every request against your company and your role, so the app is not the only safeguard. Signed and finalized records are locked, and changes leave a history.
Records saved on your device, PDFs you export and files you share are only as safe as the device or place they are kept. Please use a device passcode.
No system is perfectly secure. If a security incident affects your personal information, we will notify you as the law requires.
11. Children
Deltorin SafeCrew is a workplace tool for adults aged 18 and older. We do not knowingly collect account information from children. If you believe a child has created an account, contact us and we will investigate and delete the account.
12. Your choices and rights
You can:
- see and update your profile in the app;
- turn camera, photo and microphone access off in your device settings;
- delete your account (section 8);
- ask us for a copy of your account information, to correct it, or to delete it.
Depending on where you live, you may have more rights under privacy law. Email us to use any of them. We will not treat you differently for doing so. Requests about company safety records may need to go through your employer, and we will help them respond.
We will respond to verified privacy and email account-deletion requests within 30 days. If applicable law requires an earlier response or permits an extension, we will follow that law and explain any permitted extension and its reason. A response does not mean all company records must be deleted.
13. Contact us
AY6 Safety LLC 3905 Crescent Park Drive, 1st Floor, Riverview, FL 33578 Email: info@ay6safety.com Phone: (813) 364-2224
14. Changes to this policy
When we change this policy, we will update the version and date above. For important changes, we will tell you in the app before they take effect. If a change would use your information in a new way that needs your permission, we will ask first.