Privacy

What we hold, and who can see it

Last updated February 2026

JourneyProof keeps the work record an apprentice needs for a licence. The record belongs to the worker. This page says what we store, why, and what you can ask us to do with it. It is not legal advice.

What we store

• Account details from your sign-in provider, Clerk. That is your name and email address, plus the identifier Clerk gives us. We never receive your password.
• Work records you enter. Dates, hours, categories, jobsites, employers, supervisors, and your notes.
• Evidence you upload. Photos, videos, scans, and PDFs, together with their size, type, and a SHA-256 hash of the bytes.
• Supervisor activity on a week you send. The signature, the licence details the supervisor gives, the time of signing, and any correction made before signing.

What we do not do

We do not sell your record, rent it, or hand it to an employer as a product. We do not run advertising on it. We do not use your hours or evidence to train models.

Who can see your record

You can. A supervisor you send a week to can see that week, through a link that expires in 72 hours and that you can revoke. The link is scoped to one batch of shifts, not to your whole record. Anyone you hand an exported packet to can read that packet.

Row-level security in the database enforces this. The application connects as a role that cannot bypass those policies, so a query for another worker returns nothing rather than their record.

Where it lives

Records are in Postgres. Evidence and exported packets are in a private S3 bucket with public access blocked, encryption on, and versioning on. Object keys are random, so a filename never leaks through a URL. Evidence is never overwritten. A correction writes a new object and leaves an audit row pointing at the old one.

Who else processes it

• Clerk, for sign-in and account management.
• Amazon Web Services, for storage and hosting infrastructure.
• Vercel, for serving the web application.
• An email or SMS provider, only to deliver a signature request or receipt to a supervisor you chose.

How long we keep it

A licence board can ask for years of history, so we keep your record while your account is open. Ask us to close the account and we delete your records and evidence within 30 days. Signed attestations and audit rows tied to a licence claim are kept for as long as the law requires, then removed.

Your requests

Export your record from the app at any time. For a copy of everything we hold, a correction, or deletion, write to privacy@journeyproof.com. We answer within 30 days. If you are in a place with statutory privacy rights, this is how you use them.

Changes

If this page changes in a way that affects what we store or who sees it, we will email account holders before it takes effect.