Privacy Policy
Last updated: 23 July 2026
Who we are
Tech Box d.o.o. ("we", "us") provides TerenIQ construction field operations software at tereniq.com, app.tereniq.com and through our iPhone and Android apps. This policy explains what personal data we handle and why. For any privacy question, write to [email protected].
Our role and legal basis
Tech Box d.o.o. is the controller for account administration, billing, security and direct support data. Your company decides what workplace and project content its users enter into TerenIQ; for that content, your company is the controller and Tech Box d.o.o. acts as its processor to provide the service.
Our legal basis depends on the purpose: we process account, project and subscription data to perform the service agreement; protect accounts and comply with financial or other legal obligations where required by law; and rely on legitimate interests for service security, fraud prevention and essential operational communications. Features that use your device's camera, microphone, location or notifications remain under your device control and are used only when you choose or enable them.
What we collect
Account data (your name, work email, company name and password hash), optional profile and directory details (profile photo, phone number, role and trade), the records your company creates in the product (projects, tasks, comments, inspections, issues, RFIs, daily reports, permits, safety briefs and directory entries), and the media you attach to them (photos, videos, voice notes, documents, drawings and signatures). Field records can include precise GPS coordinates and timestamps because that is what makes them useful as evidence. We only request location while you use a feature that needs it; TerenIQ does not track your location continuously in the background.
If you enable notifications, we store the push-notification token needed to deliver them. Android uses Firebase Cloud Messaging and iPhone uses the Apple Push Notification service. The Android app also uses a per-installation Firebase identifier for reliable notification delivery. If your company buys a plan through the App Store, we store the subscription product, transaction identifier, status and expiry details needed to activate and maintain that plan. Apple processes the payment details; TerenIQ does not receive your full card or bank-account information.
What we do not do
We do not sell your data, we do not run advertising, and we do not use your project records for anything except operating the service. We do not use cross-app tracking. The marketing site you are reading sets no analytics cookies.
International transfers
Some service providers may process data outside your country. Where an international transfer of personal data requires safeguards, we use an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism and require the recipient to protect the data consistently with this policy.
Where data lives
Application records are stored in Cloudflare D1 and file attachments in Cloudflare R2. Traffic is encrypted in transit with TLS. Access inside the product is controlled by your company's roles, from owner down to guest.
Service providers
We use Cloudflare to host and protect the service, Apple to process App Store purchases and deliver iPhone push notifications, Google Firebase to deliver Android push notifications, Mapbox to render maps and location pins when you use mapping features, and transactional-email providers to send account and service messages. They may process only the data needed to provide those services and must protect it consistently with their agreements and applicable law. Mapbox may receive device, network and location information when its map is displayed and location access has been authorized. We do not use advertising networks or cross-app tracking SDKs.
Notifications
If you enable push notifications, we store a device token to deliver assignment, overdue and mention alerts. You can disable push at any time in iOS or Android system settings; email notifications can be managed in the product.
Retention and deletion
Your records stay available while your company account is active. To control storage, each workspace has a data-retention setting (chosen by the owner or an admin): completed work — tasks and, optionally, closed issues, RFIs, inspections and signed handovers — is automatically and permanently deleted after a chosen period (90 days by default, or never), including its photos, videos and comments. You can change or disable this in Settings → Data retention.
Trials that are never activated are removed: if a workspace does not move to a paid plan within 90 days after its free trial ends, the account and all of its data are permanently deleted. We email the workspace owners beforehand. You can also ask us to delete your company data at any time. In the iPhone or Android app, an individual user can permanently delete their account from Settings → Legal → Delete account. You may also request account deletion by emailing [email protected] with the subject “TerenIQ account deletion”; we will verify the request before deleting the account and associated personal data, except records we must retain by law or that belong to a company workspace under its retention instructions. If that user is the only owner of a workspace that still has other members, ownership must be transferred or those members must be removed first so the workspace is not orphaned.
Your rights
You can request access to, correction of, deletion of, restriction of, or a portable copy of your personal data, and object to processing based on legitimate interests, by writing to [email protected]. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights can be limited where the law permits. If you are in the EU or EEA, you may also lodge a complaint with your local supervisory authority.
Changes
If this policy changes in a way that matters, we will notify company owners by email before the change takes effect.