Privacy notice
Last updated 26 September 2026
Who we are
Dayworks is a service for construction teams to plan each day on site, record who worked where, and keep the site diary. In this notice, “we” means Dayworks. Write to us at support@getdayworks.com about anything here.
We are based in the UK, and the UK GDPR and the Data Protection Act 2018 apply to how we handle your information. If you are in the European Union, the EU GDPR protects you as well, and everything in this notice applies to you in the same way.
Two kinds of information
Your account and the waitlist. For your name, email address and sign-in, we decide how the information is used. In data protection terms we are the controller.
What your company records. Projects, workers, hours, diaries, photos and the documents sent from them belong to the company whose account they are in. The company decides what is recorded and how long it is kept, and we handle it on its behalf, as its processor. If you are a worker named in a company's records, ask that company first about your information. We will help it answer.
What we collect
- Joining the waitlist: your name and email address.
- Your account: your name, email address, the companies you belong to and your role in each, and the project you last opened so you land back where you were. Your password is stored only as a one-way hash; nobody can read it, including us.
- Work recorded in Dayworks: briefings, allocation sheets (including people's names, trades, employers, hours and absences), diary entries, photos, deliveries, weather and queries, with who made each change and when.
- Documents sent from Dayworks: the recipients' addresses and any message, kept as the record of what was issued.
- Technical: the cookies described below, and short-lived logs of requests to the service, which can include your IP address.
Why we use it
- To provide Dayworks to you and your company, including the emails it needs: sign-in links, password resets, invitations and security notices. This is necessary for the contract with you or your company.
- To tell you when Dayworks is ready, if you joined the waitlist. This is on your consent, which you can withdraw at any time by writing to us.
- To keep the service secure and working, which is in our legitimate interests and yours.
We don't sell information, use it for advertising, or use it to train AI models.
Who helps us run it
These companies handle information for us, only to provide their service:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and photo storage | London, UK |
| Vercel | Hosts the site and runs its server code | London, UK |
| Resend | Sends the emails Dayworks sends | United States |
| Proton | Our own mailbox, if you write to us | Switzerland |
| Cloudflare | Our domain names, and forwarding mail sent to dayworks.build | Worldwide |
| postcodes.io and the Met Office | Turn a site's postcode into its weather. Only the site's location is sent. | UK |
Vercel and Resend are American companies, so information can reach the United States. Where it does, we rely on the safeguards the law provides, such as the UK–US data bridge and standard contractual clauses. People you send documents to receive them, and other members of your company see its records according to their role.
Cookies and storage on your device
- Sign-in cookies keep you signed in. Dayworks can't work without them.
- The app's own files, stored on your device so it loads quickly and can be installed on a phone.
These are all needed for Dayworks to work, so there is nothing to agree to. We use no advertising, tracking or analytics cookies.
How long we keep it
- The waitlist: until Dayworks is open to you or you ask to be taken off it.
- Your account: for as long as you have one. When it closes we delete your details, except where a company's records need to keep your name against the work you did.
- Company records: for as long as the company keeps its account, or until it asks us to delete them. Site diaries are contractual records and are often kept for six to twelve years; that is the company's decision.
- Request logs: a short time only, then deleted.
Your rights
You can ask to see the information we hold about you, to have it corrected or deleted, to limit or object to how we use it, and to have a copy to take elsewhere. Write to support@getdayworks.com. We will reply within a month.
Deleting can collide with a company's duty to keep its records: a signed site diary may need to keep your name. Where that happens we will tell you, and what stays is kept only for that purpose.
If you are unhappy with how we have handled your information, you can complain to the data protection authority where you live or work. In the UK that is the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.
Changes to this notice
When this notice changes, the date at the top changes too. If a change matters to how your information is used, we will email account holders before it applies.