Privacy Policy
Effective 21 September 2026 · Last updated 21 September 2026
Screed records safety and production work on jobsites. That means it holds information about the people doing the work, including where they were and when. This page says exactly what is collected, why, and who can see it.
Who controls your information. If you use Screed at work, your employer decides what is collected, who can see it and how long it is kept. They are responsible for that information. Voihost operates the service on their behalf and does not decide how your records are used.
Questions about your own records should go to your employer first. If you cannot get an answer, contact us at [email protected].
What Screed collects
Your account
- Name, email address, and the role your employer assigned you.
- A password, stored only as a one-way hash — we cannot read it or recover it.
- If you turn on two-factor authentication, the secret that generates your codes.
When you sign in
- Your IP address, browser or app version, and a device identifier.
- Times of sign-in, sign-out and failed attempts. Failed attempts are recorded so accounts can be protected from being guessed into.
When you fill in a form
| What | Why |
|---|---|
| Your answers | They are the record. Most are required by health and safety law. |
| Location, at the moment you submit | A pre-start inspection is evidence that a machine was checked at the machine. Only collected when your employer turns it on for that form, and only at the moment of submitting — not continuously. |
| How long each answer took | A forty-question inspection completed in twenty seconds did not happen. This is what makes that visible. |
| Your signature, as an image | It is what turns a record of a check into your attestation that you did it. |
| Photos you take | Evidence of a defect or a condition. Photos may carry the time and place they were taken. |
| Your device's clock and the server's | Both are kept. A device with a wrong clock must not be able to change when something is recorded as having happened. |
Location, specifically
Screed asks for location at particular moments — submitting a form, and checking in or out of a site where your employer uses that feature. Your browser or phone will ask your permission the first time, and you can refuse; the form still works.
Continuous location tracking during a shift is a separate feature that is not yet built. When it is, it will be off unless your employer switches it on, it will be visible to you while it is running, and this page will be updated before it ships.
What Screed does not collect
- Anything from your phone outside the app — no contacts, messages, photos you did not attach, or other apps' data.
- Your location when you are not using Screed.
- Advertising or cross-site tracking identifiers. There are no third-party trackers, advertising pixels or analytics scripts on the Screed application.
Who can see your records
- You — the forms you have filled in.
- Your supervisors and your employer's office staff, to the extent your employer's own settings allow. Safety records are work records, and your employer can see them.
- Regulators, insurers and principal contractors, where your employer chooses or is required to provide them — after an incident, during an audit, or on a site that demands them.
- Voihost staff, only when necessary to operate or support the service. Support access to a customer's account is recorded in that customer's audit log and is visible to them.
Your records are never sold, and are never shared for advertising.
Where it is stored
Screed runs on servers in Canada, operated by OVHcloud in Quebec. Files you upload, including photos, are stored on the same infrastructure. Traffic reaches it through Cloudflare, which may process connection data outside Canada in transit.
Email is delivered by Mailgun, which processes the address and contents of messages Screed sends you.
When Screed works offline, your answers and photos are stored on your own device until they reach the server. Signing out clears your work from that device.
How long it is kept
Health and safety records must be retained, often for years, and in some cases decades. Your employer sets the retention period within the limits the law allows. This is why a safety record you have signed generally cannot be deleted on request: it is evidence, and deleting it would defeat the reason for collecting it.
Account information is kept while your account exists. The audit log — who did what, and when — is append-only and cannot be edited or deleted by anyone, including Voihost. That is deliberate: a tamper-proof record is worth more than a convenient one.
Your rights
Under Canadian privacy law (PIPEDA, and provincial equivalents where they apply) you can ask to see the personal information held about you, ask for corrections, and ask how it is used.
- Ask your employer first. They control the information and can usually answer immediately.
- If you cannot get an answer, write to [email protected]. We will respond within 30 days, and will tell you if we have to refer you back to your employer.
- You can complain to the Office of the Privacy Commissioner of Canada.
Correcting a record is not the same as rewriting history: where a correction is made to a submitted safety record, the original and the change are both kept.
Security
- All traffic is encrypted in transit.
- Passwords are stored as Argon2id hashes, never in readable form.
- Each customer's data is separated at the database level, enforced by the database itself rather than by application code.
- Two-factor authentication is available, and is mandatory for administrative access.
- Photos and documents are never publicly addressable — every request is checked against your session.
No system is perfectly secure. If we discover a breach affecting your information, we will notify the affected employer and the Privacy Commissioner as the law requires.
Children
Screed is a workplace tool and is not for anyone under 16.
Changes
If this policy changes in a way that affects what is collected or who can see it, the date above changes and account holders are notified before the change takes effect.
Contact
Voihost — [email protected]
Ontario, Canada