← Back to SiteRate
SiteRate

Privacy Policy

Effective date: 2026-07-07  ·   Last updated: 2026-07-07

Plain-language summary

SiteRate does not collect, transmit, or share your personal information. Everything you enter — your company profile, job calculations, and material prices — stays on your device. It is never sent to us or any third party.

The only outside connection SiteRate makes is to Google Play when you purchase the Pro unlock, and to supplier websites when you use the optional "Find on the Web" price lookup. Neither of these sends your personal information anywhere.

There are no ads, no analytics trackers, no crash-reporting SDKs, and no account registration in this app.

1. Who we are

SiteRate is a construction material estimating app for Android, developed and published by Horizon Forge ("we", "us", "our").

For the purposes of the Protection of Personal Information Act, 4 of 2013 (POPIA), we are the Responsible Party in respect of any personal information processed in connection with this app.

Information Officer (POPIA §55): Horizon Forge, contactable via the details in Section 10 of this policy. The Information Officer is registered with the South African Information Regulator as required by POPIA.

Our primary market is South Africa. This policy is written to comply with the Protection of Personal Information Act, 4 of 2013 (POPIA), Google Play Developer Program Policies (effective April 2026), and, where applicable, the General Data Protection Regulation (GDPR) for any users located in the European Economic Area.

2. What information we collect

SiteRate is designed to store all user data locally on your device. We do not operate servers that receive your data, and we do not collect personal information for our own purposes.

2.1 Information you enter and that stays on your device

The following data is stored exclusively in a local database (SQLite/Room) on your Android device. It is never transmitted to us:

Data type What it contains Where it is stored
Contractor profile Your name, company name, phone number, and optional logo image (for use in quote PDF headers) On-device only (Room database)
Saved jobs Calculation inputs and results you choose to save (dimensions, quantities, material types, costs) On-device only (Room database)
Material price list Material unit prices in South African Rand that you edit to match your suppliers On-device only (Room database)
App settings Wastage percentages, unit preferences, and other calculator defaults you configure On-device only (DataStore / SharedPreferences)
Pro unlock status A flag indicating whether you have purchased the Pro unlock On-device only (DataStore), verified against Google Play Billing on app start

2.2 Information involved in the Pro purchase (Google Play Billing)

When you purchase the SiteRate Pro unlock, the transaction is handled entirely by Google Play. We receive only a purchase token from Google confirming that a valid purchase has been made for your Google account. We do not receive, store, or process your payment card details, billing address, or any other financial information. Google's own privacy policy governs the data they collect in connection with purchases: policies.google.com/privacy.

2.3 Information involved in "Find on the Web" (price lookup)

When you use the optional "Find on the Web" feature, the app sends an outbound HTTP request to South African supplier websites (such as Cashbuild, Build It, or Builders Warehouse) to retrieve material prices. These requests:

The retrieved price data is used only to update your on-device price list. Nothing is retained on any server we operate.

2.4 Information we do NOT collect

SiteRate does not collect any of the following:
  • Your name, email address, or phone number (beyond what you optionally enter into your contractor profile, which stays on-device)
  • Your device identifier (IMEI, Android ID, advertising ID)
  • Your location
  • Contact list, calendar, camera, or microphone data
  • Usage analytics or app interaction data
  • Crash logs or diagnostics
  • Any form of behavioural or advertising profile

We do not use Firebase, Google Analytics, AdMob, or any other analytics or advertising SDK. This means there are no third-party trackers embedded in SiteRate.

3. How we use information

Because we do not transmit your personal data off your device, our use of your information is limited to:

We do not use your information for marketing, profiling, or any purpose beyond making the app work as described.

4. How we share information

We do not sell, rent, or share your personal information with third parties for their own purposes.

The only disclosures relevant to SiteRate are:

Third party Data involved Purpose Their privacy policy
Google LLC (Play Billing) Purchase token (no personal data sent by us) Processing the Pro unlock purchase and confirming its validity policies.google.com/privacy
Supplier websites (Find on the Web) None — an outbound HTTP request with no user data attached Retrieving publicly available material prices for your local price list See each supplier's website

We may disclose information if required to do so by law, court order, or a binding request from a South African regulatory authority, including the Information Regulator. We will notify you of such a request where we are legally permitted to do so.

5. Data storage, security, and retention

5.1 Storage location

All data you enter into SiteRate is stored in the app's private, sandboxed storage area on your Android device. This storage is accessible only to SiteRate and is protected by Android's standard application isolation mechanisms. We do not operate cloud storage, synchronisation, or backup infrastructure for user data.

5.2 Security

Android encrypts app-private storage on devices running Android 10 and above (the minimum supported version of SiteRate) when a device lock is set. Network requests made by the "Find on the Web" feature use HTTPS, protecting them in transit. Because we do not transmit your personal data to our own servers, there is no server-side security risk from SiteRate.

5.3 Retention

Your data remains on your device until you actively delete it. You can delete individual saved jobs within the app, clear your contractor profile, or uninstall SiteRate entirely (which removes all locally stored app data). We do not retain any copy of your data ourselves and cannot recover it after deletion.

5.4 Data breach notification

Because SiteRate does not transmit personal data to our servers, a conventional server-side data breach cannot affect your SiteRate data. In the unlikely event that a security vulnerability in the app itself could expose local data, we will issue a corrective update promptly and notify users through the Play Store update mechanism and/or direct communication to the email address used on record.

6. Your rights

Under POPIA and applicable data protection laws, you have the following rights in relation to your personal information:

Right What it means for SiteRate
Right of access You may request a description of the personal information we hold about you. Because all data is stored on your device, you already have direct access to it within the app.
Right to correction You can edit any information in your contractor profile or price list directly within the app at any time.
Right to deletion You can delete saved jobs, clear your contractor profile, or uninstall the app to remove all locally stored data. Because we hold no copy of your data, deletion from your device is immediate and complete.
Right to object We do not process your personal information beyond the local, on-device purposes described in this policy. If you object to any specific processing, please contact us and we will address your concern.
Right not to be subject to automated decisions SiteRate makes no automated decisions with legal or significant effects on you.
Right to complain You have the right to lodge a complaint with the South African Information Regulator (inforegulator.org.za) if you believe your personal information rights have been violated.

To exercise any of the above rights, or to submit a privacy enquiry, please contact us using the details in Section 10.

7. Children

SiteRate is a professional tool intended for use by adults working in the construction industry. It is not designed for, directed at, or intended to be used by children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us so we can take appropriate action.

8. Google Play Data Safety declaration

In accordance with Google Play's Data Safety requirements, the following is a summary of SiteRate's data practices as declared in the Play Console Data Safety form. The Data Safety card on the Play Store listing is consistent with this policy.

Question SiteRate answer
Does the app collect data that is transmitted off the device? No. All user data remains on-device. The app makes outbound HTTP requests (price lookup, Play Billing verification) but transmits no personal user data.
Does the app share data with third parties? No personal data is shared. Google Play Billing receives a purchase token as part of the standard in-app purchase flow; no personal data is sent by the app to Google in this process.
Is data encrypted in transit? Yes. All network requests (price lookup, Play Billing API) use HTTPS/TLS.
Can users request data deletion? Yes. Users can delete all data by clearing the contractor profile and saved jobs within the app, or by uninstalling the app. Contact details for deletion requests are in Section 10.
Does the app collect device or advertising identifiers? No.
Does the app collect location data? No.
Does the app use analytics, advertising, or crash-reporting SDKs? No. SiteRate contains no third-party analytics, advertising, or crash-reporting SDKs.
Important note for the developer: Before publishing, complete the Data Safety form in Play Console under App content → Data safety. The answers in the form must match the declarations in this policy exactly. Any discrepancy between the form and the policy is a primary trigger for Play Store review flags and potential removal. If you add any new SDK (analytics, crash reporting, etc.) in a future update, this policy and the Data Safety form must both be updated before the new version is submitted.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make a material change we will:

The updated policy will be effective from the date shown at the top of this page. Continued use of SiteRate after that date constitutes acceptance of the updated policy. If you do not agree to the revised policy, you may uninstall the app.

Previous versions of this policy are available on request by contacting us using the details in Section 10.

10. Contact us

For any privacy-related enquiries, requests to exercise your POPIA rights, or to submit a data deletion request, please contact:

[DEVELOPER FULL NAME]

Information Officer — SiteRate

Email: [YOUR EMAIL ADDRESS]

Postal address: [YOUR POSTAL ADDRESS, SOUTH AFRICA]

We will acknowledge your request within 5 business days and resolve it within 30 days of receipt, as required by POPIA.

South African Information Regulator

If you believe your personal information rights have not been adequately addressed, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

11. Applicable law and jurisdiction

This Privacy Policy is governed by the laws of the Republic of South Africa, including the Protection of Personal Information Act, 4 of 2013 (POPIA). Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts of South Africa.

SiteRate is distributed globally through Google Play. To the extent that users in other jurisdictions (including the European Economic Area) have rights under their local data protection laws, we are committed to honouring those rights in so far as they apply. Because SiteRate collects no personal data that is transmitted off-device, most of the data minimisation and transfer requirements under laws such as the GDPR are met by the app's architecture rather than by a separate compliance programme.