Privacy policy

Who this policy covers

Leech Labs operates Pool Boy Pro, which provides software for pool service businesses and their field teams. This policy explains how Pool Boy Pro handles information to operate that service. Contact us at support@leechlabs.io.

If your employer or pool service company provides your account, that company controls the customer and service records it enters into its workspace. It decides who can access those records and why they are used. Contact that company about its own privacy practices. You may also contact us directly about your account or a privacy request; we may coordinate with the company to verify authority and locate the relevant records.

Information we collect

• Account and company information: names, work email addresses, authentication information, company membership, roles, branches, and account preferences.
• Customer and property records: contact details, service addresses, pool and equipment details, access instructions, agreements, quotes, invoices, manually recorded payments and reversals, and related business records entered by a company.
• Service activity: assigned visits, task results, water readings, chemicals used, inventory changes, issues, notes, timestamps, and the identity of the person making a change.
• Content you choose to provide: service photos, uploaded documents, drawn signatures, signer names, and customer acknowledgments. Photos and documents may contain personal information or metadata included in the files.
• Communications: support and privacy requests, account messages, and the contents and recipients of business emails sent through enabled delivery features.
• Technical information: session identifiers and request information needed for authentication, security, troubleshooting, and operation. Our hosting and infrastructure providers may process IP addresses, browser or device information, and service logs when handling requests.

Do not put passwords, payment-card numbers, or unnecessary sensitive information in service notes, photos, or support messages.

How we use information

We use information to authenticate users, manage company access, display assigned work, synchronize saved changes, store service evidence, prepare reports and quotes, deliver enabled account or business messages, answer requests, and protect the service from misuse. We also use records to investigate errors and maintain reliable operation.

We do not sell personal information or use it for targeted advertising. The current apps do not include advertising or cross-app advertising tracking. We do not use your private service records to train our own artificial intelligence models.

Permissions and information on your device

Camera access is used when you scan a pool label or take a service photo. You can type a printed pool ID instead of scanning it. Photo selection lets you attach images you choose. You can change permissions in your device settings; features requiring a permission may then be unavailable.

The current mobile app does not request device GPS tracking or microphone recording. Property addresses are information entered into company records, rather than continuous device location tracking.

For field work, downloaded routes, submitted changes waiting to synchronize, and recovery copies of photos can remain on your device. Signing out does not automatically erase those files or pending work. Session credentials use the device's secure credential storage; ordinary route and photo storage is not represented as encrypted by the app. Protect your device with a screen lock. See data retention before clearing app storage.

Cookies and browser storage

The web app uses authentication cookies and local storage needed to maintain sessions and application state. The demo stores fictional company data locally. Blocking required cookies or clearing browser storage can sign you out or remove saved local work. We do not place advertising cookies in the current website or apps.

Who can receive information

Authorized members of your company can access information according to their role and assignments. A company may share reports, quotes, documents, or exports with its customers and other recipients it selects. Copies shared with a recipient are also subject to that recipient's handling practices.

We use service providers to operate Pool Boy Pro: Hostinger hosts our website, web app, and contact mailbox; Neon provides account authentication, database, API, and private file infrastructure; Expo supports mobile application build and distribution; the mobile app does not currently use an over-the-air update service. No cloud AI processing, advertising SDK, in-app purchase, or subscription SDK is enabled in the current mobile app. Company chemical costs and office payment records are business records, not an app-store purchase or an online card-processing feature. Account emails use Neon's configured email service. Business-email delivery is implemented for Resend and uses that provider when enabled. These providers process information involved in their service functions under their respective service terms and privacy notices.

We may disclose information when required by law, to protect rights or safety, to investigate abuse, or in connection with a business transfer subject to appropriate confidentiality and privacy protections.

Storage, security, and international processing

Our current Neon application project is hosted in the United States, in the AWS Ohio region. Hosting, email, mobile distribution, support, logs, and backup services may involve other locations. Using the service may involve processing outside the country where you live.

We use HTTPS, authenticated access, company access controls, and private file access controls to protect information. No system can guarantee absolute security. Your company is responsible for assigning appropriate access, and users should protect their accounts and devices.

Retention and deletion

We retain account information while the account is used to provide the service, and company records while needed for the company's use of the service. Information may also be retained for a specific legal, accounting, security, or dispute-resolution need. Retention depends on the record and its purpose; creating an account does not set an automatic expiry date.

You may request account deletion or deletion of particular personal information through our account-deletion page. Requests are reviewed and verified before any deletion. The review considers any information that needs to be retained and the reason. Deactivation, signing out, and uninstalling the app are not server-side account deletion. Our data-retention policy explains company records, local copies, and backups.

Your choices and requests

Depending on your location and circumstances, you may have rights to access, correct, receive a copy of, delete, restrict, or object to certain processing of your personal information, or withdraw permission where processing depends on it. Send a request to support@leechlabs.io. We may ask for information reasonably necessary to verify your identity, and assess the request under applicable legal requirements. Requests currently require manual follow-up. Do not send your password or sign-in codes.

Company administrators can help correct operational records and export available company data. You can revoke device permissions through your device settings. If you have a concern about our response, contact us; you may also have a right to contact your local data-protection authority.

Children

Pool Boy Pro is a business service intended for adults and authorized workers. It is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can investigate and address it.

Changes to this policy

We will update this page when our practices change and revise the date above. Where a material change requires additional notice or consent, we will provide it through an appropriate channel.