Privacy Policy

Effective October 27, 2026 · Version 2026.10c

1. Who we are

TightShip is made by QualiCore Consulting LLC, a California limited liability company ("QualiCore," "we," "us"). This policy covers the TightShip app on Android, iOS and the web (app.usetightship.com), the optional Teams service, and this website (usetightship.com).

2. What the app stores on your device

To do its job, TightShip keeps the following on your device:

• The locations you add, with names, addresses, and any floor plans you import
• Walkthroughs: checklist results, notes, photos, and signatures
• Tasks and work orders, including ticket numbers and who reported them
• Your tools and purchases log, with prices and receipt photos
• Your settings, such as the ticket prefix and reminder schedule

All of this lives in your device's app storage, or your browser's storage if you use the web version. When you use TightShip on your own, none of it is sent to QualiCore or anyone else.

3. Teams (optional)

Teams let floor staff send repair requests, a manager approve them, and maintenance fix them, all from one shared log. You only use Teams if you tap "Create a team" or "Join a team."

How joining works

The person who creates a team becomes its owner. Others join with the team's 8-character code. There's no email and no password. Instead, your phone gets a random private key. Our server keeps only a one-way hash of that key, which can check it but can't be turned back into it. The owner or a manager lets each person in and gives them a role: owner, manager, maintenance, or floor staff. One manager, or the owner, can be the backup approver.

What a team stores on our server

• Members: each person's name as they typed it, their role, and when they joined
• The team: its name, team code, and settings, such as the ticket prefix and approval wait times
• Locations: each location's name and, if you add one, its address
• Requests and tickets: where in the building, what needs doing, any extra detail, how urgent it is, and a photo if the requester attaches one. Also each ticket's status, who approved or denied it and why, who accepted it and the rough completion date, reasons for any hold, fix notes, maintenance-only notes, and confirmations.
• History: who did what on each ticket and when, including when each person first viewed it
• Tools and purchases: description, quantity, price, vendor, date, status, note, the ticket it belongs to, and who logged it

To slow down code guessing and spam team creation, our server also keeps a short-lived, one-way hash of the connection address that each create-team or join request came from. It doesn't store the address itself, and these records are deleted within about a day. (Cloudflare, as our host, still processes IP addresses to deliver requests, as section 6 explains.)

Who on the team sees what

• Floor staff see their own requests in full. So nobody reports the same problem twice, they also see the team's approved repairs that are not fixed yet: what it is, where, how urgent, and who is fixing it. Never who asked, the details, the photo, or any notes.
• Maintenance sees approved work and the purchases log.
• Managers and the owner see everything in the team.
• Maintenance-only notes are never shown to floor staff.
• The join code is shown only to managers and the owner.

What stays on your phone, even on a team

Walkthroughs and inspections, floor plans, your own task log, and your own purchases log stay on your device. They are not shared with your team or sent to us.

4. Where team data is kept

Team data is stored with Cloudflare, our hosting and database provider, in its Western North America region. Cloudflare stores and serves it for us. It doesn't use it for its own purposes. We don't look at a team's records except when we need to keep the service running, look into abuse, or handle a request someone has made to us.

5. What we collect

Used on your own, the app collects nothing. On a team, we hold only what's listed in section 3. Either way, TightShip has no analytics or crash-reporting tools, no advertising, and no third-party tracking code. The app sends no email.

Apple and Google give app developers summary reports, such as install counts, and crash reports from people who chose to share them in their phone's settings. Those reports come to us under Apple's and Google's own privacy policies. They don't include anything you typed into TightShip.

6. This website and the web app

usetightship.com and app.usetightship.com are delivered by Cloudflare. Like any web host, Cloudflare processes your IP address and basic request details (browser type, the page asked for, the time) to serve pages and block attacks. We don't use those details to identify you. Cloudflare may set a strictly necessary security cookie to tell people apart from automated abuse.

On usetightship.com only, we use Cloudflare Web Analytics to count visits: which pages are viewed, the referring site, the country, and the type of browser and device. It uses no cookies, doesn't follow you to other sites, and gives us totals, not a record of any individual. The TightShip app itself, including app.usetightship.com and Teams, has no analytics at all. The fonts on this site are served from our own domain.

7. Phone permissions

• Camera: used only when you tap to take a photo of a finding, a repair, a receipt, or a problem you're reporting to your team.
• Photos and files: used only when you choose a photo, import a floor plan, restore a backup, or save an export.
• Microphone: used only when you tap "Say it instead" to speak a team request instead of typing it, and only on devices that can turn speech into text on the device itself. The sound is not recorded, stored, or sent to us or anyone else. Only the words that appear in the form are sent, and only when you tap Send.
• Notifications: used for reminders that an inspection is due and, if you're on a team, alerts about your team's requests. Both are created on your phone while the app runs. They are not pushed from a server.

TightShip does not use your location or contacts. You can turn any permission off in your phone's or browser's settings, and the rest of the app will keep working.

8. When information leaves your device

Only when you do it, in one of three ways:

• Exports: exporting a PDF report, a task log, a pilot report, a team's monthly report, or a backup file creates a file you control. When you share it by email, text, or a share sheet, it goes where you send it. After that, the recipient's handling is outside our control. Backup files are not encrypted. Store them somewhere you trust, the way you would a paper binder.
• Teams: if you create or join a team, what you enter into the team (requests, tickets, notes, photos you attach, and the team's purchases) is sent to our server so your team can see it, as described in section 3.
• Proof links: an owner or manager can share a confirmed team ticket as a one-page proof. Anyone with the link or its QR code can see the ticket number, what was asked, the building and the place in it, how urgent it was, its category, when it was asked, approved, fixed and confirmed, and the first names of the person who fixed it and the person who confirmed it. Never the photo, the details, maintenance notes, or who asked. Before a link is made, the app shows exactly what will be public and asks the manager to confirm that it names no resident. The owner or a manager can withdraw a link at any time, and it stops working if the job is reopened or the team is deleted.

We don't sell your information, share it for advertising, or give it to anyone else, except Cloudflare as our service provider or where the law requires it.

9. Keep health information out

TightShip is built for buildings, not for resident records. It is not designed to hold protected health information, and QualiCore doesn't sign business associate agreements for it. Describe the place, like "Bedroom 2 window screen torn." Don't name a person, and don't photograph residents. This matters even more on a team, because what you enter is shared with your team and stored on our server. The app reminds you of this the first time you open it, and the team request form repeats it.

10. If you email us

When you email support, we receive your email address and whatever you write. We use it only to answer you, and we delete it once it's no longer needed to help you. We never add you to a mailing list without asking.

11. Keeping and deleting your data

On your device. Your records stay on your device until you delete them. Delete a facility, inspection, task, or log entry in the app (deleting a facility also deletes its tasks and log entries), or remove everything by uninstalling the app or, on the web, clearing this site's data in your browser settings. Because we never hold a copy, we can't recover deleted records for you. Keep a recent backup file if the records matter to you.

On a team. Team data is kept on our server for as long as the team exists. You can delete it at any time:

• Leave a team: any member except the owner can open the team's Team tab and tap "Leave team and delete my data." You're removed from our server right away, and your name on the team's records is replaced with "Former member." Tickets you sent stay with the team as its maintenance records.
• Delete a team: the owner can tap "Delete team and all its data." This deletes every member, location, ticket, photo, note, history entry, and purchase for that team from our server right away.
• Removed members: an owner or manager can remove a member. That person's phone loses access at once. Their name stays on the records they worked on.
• Can't open the app? If you lost your phone, or were removed and want your data deleted, email support@usetightship.com. We'll confirm with the team's owner and delete it within 30 days.

Deleted team data may remain in encrypted backups for up to 30 days before it is gone for good. The short-lived connection address hashes are deleted within about a day. More detail is on our Delete your data page. To delete your email correspondence with us, just ask.

12. Security

Records on your device are as safe as the device they're on. Use a screen lock, keep the operating system up to date, and treat exported files and backups as confidential. Anyone holding your unlocked phone can act as you on your team, so if a phone is lost, ask your team's owner or a manager to remove it.

For teams, your phone's private key is stored on our server only as a one-way hash. All traffic between the app and our server uses encrypted HTTPS connections, as do the website and web app. The server checks each person's role before showing or changing anything, so people see only what their role allows.

13. Children

TightShip is a work tool for adults. It is not directed to children under 13, and we don't knowingly collect information from them.

14. Your California privacy rights

We do not sell or share personal information, as those words are defined in the California Consumer Privacy Act, and we don't use it for targeted advertising. You may ask us what personal information we hold about you, and ask us to correct or delete it. The personal information we could hold is your name, role, and activity on a team (section 3), and emails you send us. To make a request, email support@usetightship.com. Because there's no email or password on a team, we'll confirm who you are with your team's owner before acting. We will not treat you differently for making a request. Our website does not respond to "Do Not Track" signals, because its visit counts are anonymous and don't track you across sites.

15. Changes to this policy

Teams are the first TightShip feature that sends information off your device, and this version of the policy describes them. If TightShip ever adds another feature that sends information off your device, such as cloud backup or usage statistics, we will update this policy before that feature arrives and explain it in the app. Nothing changes silently. The effective date at the top always shows the current version.

16. Contact

Questions or requests: support@usetightship.com
QualiCore Consulting LLC, California