Privacy Policy
Last updated: 6 August 2026. This policy explains what HuckYa collects, why, and what you can do about it.
Who we are, and whose data this is
HuckYa is field service software sold to contracting businesses, operated by Healy Labs LLC(“we”, “us”), a Minnesota limited liability company. “HuckYa” is the name of the product; Healy Labs LLC is the company responsible for it and the party you are dealing with.
Two very different groups of people appear in this policy, and the distinction decides who you should talk to about your data.
- Our customers are the businesses that subscribe to HuckYa, and the owners, dispatchers and crew members who sign in. We hold their account information directly.
- Their customers are the homeowners and companies those businesses do work for. We hold that information on the business’s behalf and under its instructions. We do not decide what is collected about you, and we do not market to you.
If a contractor entered your details into HuckYa and you want them corrected or removed, ask that contractor— they control the record. If they need our help to action it, we will help them.
What we collect
Account and organisation information
Name, email address, role, which business you belong to, and your business’s name, time zone and working hours. Passwords are handled by our authentication provider and are stored only as salted hashes; nobody at HuckYa can read yours.
Your business’s customer records
Names, company names, email addresses, phone numbers, service and billing addresses, and the latitude and longitude derived from those addresses so jobs can be placed on a map. Also the work itself: jobs, visits, quotes, invoices, payments, tasks, expenses and job notes.
Location
The mobile app records precise location at two moments only: when a crew member clocks in, and when they clock out. Those coordinates are attached to the timesheet entry so a business can confirm that a shift was started at the site it was billed against.
There is no background or continuous location tracking. HuckYa does not follow a device between punches, does not record routes, and does not collect location while the app is closed. If you decline the location permission the clock still works; the punch is simply recorded without coordinates.
The coordinates shown for customers and job sites are geocoded from the postal address the business typed in. They do not come from anybody’s phone.
Photographs and files
Photos and documents attached to a job, together with their file name, type, size and a checksum used to avoid uploading the same file twice. Photographs taken on a job site may contain location metadata placed there by your device’s camera.
Device and technical information
A device identifier, platform and optional label for each phone or tablet that syncs, plus the time it last synced. This exists so queued work is not lost when a device goes offline and so a business can see which devices are connected. We also keep short-lived request records used for rate limiting and abuse prevention.
What we do not collect
We do not use advertising identifiers, we do not build advertising profiles, we do not sell personal information, and we do not share it with data brokers. HuckYa contains no third-party advertising or analytics trackers.
Why we use it
- To provide the service — scheduling work, showing it to the right crew, and syncing it between the office and the field.
- To keep timesheets and job costing accurate, which is what the punch coordinates are for.
- To send email a business asks us to send on its behalf: invoices, quotes, appointment messages and, where a business runs them, marketing campaigns with a working unsubscribe link.
- To keep accounts secure, prevent abuse, and diagnose faults.
- To meet legal and tax obligations.
Who we share it with
We use a small number of service providers to run HuckYa. Each is bound by contract to use the data only to provide their service to us.
- Supabase — database, authentication and file storage. Data is held in the United States.
- Vercel — application hosting.
- Mapbox — converting postal addresses into coordinates, and map display.
- Postmark — sending email.
- Inngest — running background jobs such as sync and integration pushes.
- Intuit QuickBooks and Stripe— only where a business chooses to connect them. Connecting sends the relevant customer, invoice and payment records to that provider, under that provider’s own terms.
We will also disclose information if the law requires it, and we will tell the affected business unless we are forbidden from doing so. If Healy Labs LLC or the HuckYa product is ever sold, merged, or reorganised — including into a successor entity — customer data may transfer with it; this policy continues to apply until it is replaced by one you are told about.
How long we keep it
Business records are kept for as long as the business’s account is open, because they are that business’s operating history — job records, payroll and invoices are things it may be legally required to retain. When an account is closed we delete its data within 90 days, except where we are required to keep something longer.
Deleting your account
You can delete your own account from the mobile app, under Settings → Delete account. It is immediate and cannot be undone.
Be clear about what this does.It permanently destroys your ability to be that user — your login, your credentials, your membership of the business, and the personal information on your profile. It does not delete the work you did. The jobs you completed, the notes you wrote and the hours you were paid for are the employer’s business records, not yours, and a payroll record that disappears when somebody deletes an app is a payroll record nobody can rely on. Those records remain with the business, no longer attached to a person who can sign in.
If you are the only remaining owner of a business, deletion is refused rather than silently orphaning everyone else’s work. Make somebody else an owner first, or ask us to close the whole business account.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete personal information about you, and to object to certain processing. We honour these requests. If the information is held on a contractor’s behalf, we will pass your request to them and support them in answering it, because they are the ones who decide.
Californian residents: we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right under it.
Security
Data is encrypted in transit and at rest. Access is scoped to a single business, enforced in the database rather than only in the application. Credentials for connected services such as QuickBooks are encrypted before being stored. No system is perfect, and we will notify affected businesses without undue delay if we discover a breach affecting their data.
Children
HuckYa is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it.
Changes
We will update this page when the software changes, and we will change the date at the top. If a change is significant we will tell account owners by email before it takes effect.
Contact
Questions, requests, or anything that looks wrong: privacy@huckya.app.