BrokenHere Privacy Policy
Last updated: November 2, 2026
1. Introduction
ClearStack Apps ("we", "us", "our") operates the BrokenHere mobile application and the fault forms and status pages it serves at brokenhere.web.app. BrokenHere lets anyone report a fault in a building by scanning a QR code on the wall, and lets the people who look after the building track it to fixed. This policy explains what is stored, where, who can see it, how long it is kept and how to delete it. It covers BrokenHere only; the rest of ClearStack Apps is covered by our main privacy policy.
2. If You Report a Fault
You do not need an account or the app. What you send goes to the organisation that looks after that building:
- What you write: the words you type about the fault, and how soon you say it needs fixing.
- A photo, if you take one. Please do not photograph people.
- A contact, if you leave one. An email address or phone number is optional, and only that organisation's team can see it.
- A rate count: a short scrambled value made from your network address, kept for about two hours to stop a form being flooded. Your address itself is not stored with your report.
Where the organisation's plan includes it, you are shown a status page with a private link. It shows where the fault has got to, the team's note and a photo of the fix. Anyone you give that link to can see the same page. The form and status page set no tracking cookies, and search engines are asked not to list them.
The organisation decides how long to keep your report and is responsible for how it uses it. To have a report removed, ask them, or email us and we will pass your request on.
3. If You Use the App
- The account: an anonymous account is created when the app first opens. If you add an email address and password, they are held by Google Firebase Authentication and never seen by us. The name a seat gives is stored with the organisation.
- The building: the names and addresses of sites, and for each room its name, floor, notes and the code printed on its label.
- Faults: the reports above, faults you add yourself, who took each one, the team's notes, the note for the reporter, photos of the fix and the times of each step.
- Push alerts: if you switch them on, a token that lets us send an alert to your phone.
- Purchase check: if you buy a plan from Google Play, the purchase token, used only to confirm the purchase with Google and to renew or end the plan.
4. Crash Reports and Analytics
- Firebase Crashlytics (Google LLC): crash reports, device model, operating system and app version, so we can find and fix bugs.
- Firebase Analytics (Google LLC): basic usage events such as app opens and screen views, tied to a random ID for the app on your phone. The advertising ID is not collected.
These never include reports, photos, names or contact details. BrokenHere shows no third-party ads. The free tier shows a banner for ClearStack's own website service; nothing from the organisation's records is used to choose it. Nothing in anyone's records is sold or shared with advertisers.
5. Where It Is Stored
On Google Cloud (Firebase) in the United States, encrypted in transit and at rest. The app keeps a copy on the phone so the board works without a connection; changes made offline stay on the phone until they are sent. The app's morning note is scheduled on the phone itself.
6. Who Can See It
- Every seat of the organisation (the owner and, on Pro, its fixers) sees its sites, rooms and faults, including a reporter's photo and contact.
- Anyone with a room's QR code can open that room's form. It shows the name of the room and the site, nothing else.
- Anyone with a status link sees that one report's progress, as described above.
- We do not read organisations' records. Google acts as our processor to store them.
7. Deleting Your Data
In the app: Settings, then Delete account, and confirm. Or email support@clearstackapps.com from the address on the account. When the owner deletes the account, the whole organisation goes with it: every site, room, fault and photo, and every QR label and status link stops working. A fixer who deletes their account leaves the organisation; what they added stays with it.
A single fault can be deleted from its screen, with its photos and status link. Crash reports are kept by Firebase for 90 days and then deleted.