Privacy policy
Last updated: October 29, 2026
Droplog ("we") is backflow test report software for testers and testing companies, at droplog.org and in the Droplog apps for phones, tablets, Mac and Windows. This policy explains what we keep, why, and who else sees it.
In short: we keep what your company puts into Droplog so the app can work, and nothing more. We do not sell data, show ads, or use advertising cookies.
What we keep
- Your account: name, email, phone number, company name and logo, certification numbers, and a password stored only in scrambled (hashed) form.
- Your company's work: customers and their contact details and addresses, assemblies, test readings, gauges, photos, signatures, forms, reports, invoices and appointments. Your company owns this information; we keep it for your company.
- Location: when you allow it, the device's location is used to show the map, plan routes and fill in addresses. It is not used to follow you.
- Microphone and camera: only when you use them, to say readings out loud, scan forms or take photos. Spoken readings are turned into text by your device's own speech service (on the website, by your browser's).
- Notifications: a code for your device, so we can send you notifications you turned on.
- Visits to the website: counted without cookies. Each visitor is counted once a day by a code that changes every day; we keep where the visit came from (for example Google or Facebook) and whether it was a phone or a computer, not the IP address or the browser.
- Server and error logs: kept for a short time to keep the service secure and fix problems.
Why we keep it
To run Droplog for your company: saving and syncing your work, filling in forms, sending reports, invoices and reminders by email, showing maps, billing your plan, keeping accounts secure, and answering you when you write to us.
Who else sees it
We do not sell or rent personal information. We share it only to provide Droplog, with these services:
- Oracle Cloud: where the Droplog server and its database run, in the United States.
- Stripe: card payments. Stripe receives card details directly; we never see full card numbers.
- Google: maps and address lookup (Google Maps), and phone notifications (Firebase Cloud Messaging).
- Our email provider: to deliver the reports, invoices, reminders and codes the app sends.
- QuickBooks (Intuit): only if your company connects it, to keep invoices in step.
- Water purveyors and their portals: the reports your company chooses to send them.
- Authorities, when the law requires it.
Your company's customers
If you are a customer of a testing company that uses Droplog, that company decides what is kept about you and why; we keep it on their behalf. For a copy or a correction, ask your testing company. You can also see your reports and invoices on your own page: choose Customer on the sign-in page.
How long we keep it
For as long as your company's account is open. When an account is deleted, its data is removed from the service, and from backups as they are replaced, within 90 days, except what we must keep by law (for example payment records).
Your choices
- See, correct and download your company's data in the app (Settings › Account).
- Delete your account in the app, or ask us to.
- Turn location, microphone, camera and notifications off in your device's settings, or notifications in the app's settings.
- Write to us at support@droplog.org with any request about your information. We answer within 30 days.
Security
Connections are encrypted (HTTPS), passwords are hashed, each company can reach only its own data, and the app can lock itself after a set time. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
Children
Droplog is for businesses and is not meant for anyone under 18.
Changes
We will post changes here and tell account owners about important ones before they apply.
Contact
Questions about privacy: support@droplog.org.