Privacy Policy
1. Who we are
The Eiro Work mobile app and connected backend services are operated by Amelio Utilities Limited, trading as Amelio Group ("Eiro Work", "we", "us") — a company registered in Northern Ireland, company number NI617346, registered office 2 Hannahstown Hill, Belfast, Northern Ireland, BT17 0LT. We act as a data processor on behalf of the organisation that employs or contracts you ("your employer"), and as a data controller for the limited operational data we hold to run the service.
For data-protection enquiries, contact privacy@eirowork.com.
2. What data we collect
The app collects only the data needed to deliver field-operations features for water-infrastructure crews. We do not sell data, run advertising, or share data with third-party advertisers. The app contains no third-party analytics, attribution or advertising software.
| Data | Why | Source |
|---|---|---|
| Identity & account | Name, email, role, organisation — used to sign you in and scope your access. | Your employer / Auth0 login |
| Device info | OS version, app version, push-notification token — used for delivery and diagnosis. | Your device |
| Photos | Vehicle walk-around evidence, expense receipts, site investigation photos. | Your camera or photo library, only when you tap "Capture" or "Attach" |
| Location | Coarse and fine GPS to confirm you are on site when clocking in and to geo-tag vehicle checks. If — and only if — you accept the background-location disclosure, the app also detects arriving at and leaving an assigned work site while it is closed or not in use. See section 3. | Your device, with your permission |
| Time entries | Clock-in / clock-out timestamps, breaks, project assignment, notes you add. | You |
| Voice recordings & transcripts | If you use the "Ask" voice feature: audio captured locally, transcribed, and stored to log the action you intended. Audio is deleted from the server within 24 hours; the text transcript and the action you confirmed are kept as part of the audit trail. | Your microphone, only while you hold the mic button |
| Operational records | Timesheets, expense claims, vehicle-check answers, onboarding form fields, leave requests, payslip metadata. | You / your employer |
3. Permissions on your device, and background location
The app asks for these device permissions only when the feature using them is opened, and you may decline any of them and still use the rest of the app.
- Camera — to capture vehicle-check evidence, expense receipts, and site photos.
- Photos / media — to attach existing images from your library.
- Location (while in use) — to confirm you are at the work site when you clock in, and to geo-tag vehicle checks.
- Location (background) — optional, and off unless you turn it on. See below.
- Microphone — only when you actively use the "Ask" voice feature.
- Notifications — to deliver work alerts (e.g. timesheet reminders, approval responses).
Background location — what it does and how to refuse it.
Eiro Work can use your location in the background — including when the app is closed or not in use — for one purpose: detecting when you arrive at or leave a work site assigned to you, so your timesheet reflects real on-site hours without you having to tap the phone during a shift.
Before this is ever switched on, the app shows a full-screen notice explaining what is collected and why, and you must explicitly accept it. If you decline, no site geofences are registered and the app remains fully usable — it will simply check your location at the moment you tap clock-in, and you clock in and out yourself. You can withdraw consent at any time in the app's settings, or revoke the permission in your device settings.
Background location is never used for advertising, never shared with third parties, and is not collected outside an active work assignment.
4. How we use your data
- To authenticate you (via Auth0) and route you to the right tenant.
- To run the features you trigger (clock in, submit timesheet, raise expense, complete vehicle check, and so on).
- To send push notifications you have opted into.
- To produce aggregate usage analytics for your employer (for example, how many vehicle checks were completed this week). These are never combined with another employer's data.
- To investigate bugs or abuse — we look at request logs, never at the contents of photos or transcripts unless lawfully required.
5. Where your data is stored
Application data is stored in Google Cloud Platform, region europe-west2 (London). Authentication tokens are issued by Auth0 (Okta Inc.). Push tokens are forwarded to Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) for delivery only — neither service receives the contents of the notification beyond the title and body you see.
Each customer organisation's data is logically isolated by a tenant identifier on every row; we do not share data between organisations.
6. Who we share data with
The only third parties that process Eiro Work data are the sub-processors needed to deliver the service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Hosting, storage, database | UK (europe-west2) |
| Auth0 (Okta Inc.) | Identity & access management | EU + US |
| Apple Push Notification service | Push notifications to iOS devices | Global |
| Firebase Cloud Messaging | Push notifications to Android devices | Global |
| Resend | Transactional email delivery | EU + US |
| Google AI (Gemini) | Voice transcription & intent parsing for the "Ask" feature | EU + US |
We share data with these sub-processors only to the extent strictly necessary. We do not sell data to any third party.
7. How long we keep your data
- Account data — for the duration of your employment or engagement with the customer organisation, plus 30 days after deactivation.
- Operational records (timesheets, expenses, and similar) — retained per your employer's instructions, typically for the period required by UK statutory record-keeping (for example, 6 years for payroll-adjacent records).
- Voice audio — deleted within 24 hours of capture. Transcript and confirmed action retained as audit trail.
- Location events — arrival and departure events are kept with the timesheet they support and follow the same retention as operational records. Raw background position traces are not retained.
- Push tokens — replaced on every install or token rotation; old tokens are pruned automatically.
- Diagnostic logs — 30 days, then deleted.
8. Your rights, and deleting your account
Under UK GDPR you have the right to access, correct, export, delete, restrict, or object to processing of your personal data. To exercise any of these rights, contact privacy@eirowork.com. We will respond within 30 days.
You can start an account deletion request from inside the app: Me → Delete my account. Because much of the data is held on behalf of your employer, requests to delete operational records may need to be coordinated with them. You always have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
9. Children
Eiro Work is a workplace application and is not intended for use by anyone under 16. We do not knowingly collect data from children.
10. Security
Transport: TLS 1.2 or higher on every request. At rest: Google Cloud's standard AES-256 encryption. Auth0 issues short-lived access tokens; we never store passwords. Sensitive fields on the device (auth tokens, refresh tokens) are kept in the platform secure store — iOS Keychain or Android Keystore.
11. Changes to this policy
If we make a material change we will surface a notice inside the app and update the "Last updated" date above. Continued use of the app after a change indicates acceptance of the updated policy.
12. Contact
Amelio Utilities Limited (trading as Amelio Group)
Company number NI617346
2 Hannahstown Hill, Belfast, Northern Ireland, BT17 0LT
privacy@eirowork.com
This policy applies to internal testing, beta, and production builds of the Eiro Work mobile app and the connected web platform.