Concreto

Privacy Policy

Effective date: April 23, 2026 · Version 1.1

This policy explains, in plain language, what data Concreto collects, why we need it, and who we share it with. If anything is unclear, email hello@concretoapp.com and a real person will reply.

1. Who we are

Concreto is a bilingual iOS concrete calculator app published by MEAS Partners, LLC, a limited liability company organized in the State of Delaware, United States.

We are a small team. We respond to any data request within 72 business hours.

2. What we collect

We only collect what the app needs to work.

Free tier — no account, nothing leaves your device:

The Free tier requires no sign-in and no internet connection. All of your settings (unit system, language, company name, default material price, waste factor) and the 5 most recent calculations are stored only in your phone’s local storage. No data is ever transmitted to us or any third party when you use the Free tier.

Pro tier — when you sign in with Apple ID:

Anonymous analytics — no personal information, no IDFA, no ATT prompt:

What Concreto never collects:

3. How we use your information

  1. Make the app work. Authenticate you (Pro only), store and sync your saved jobs and photos across your devices, manage your Pro subscription state.
  2. Improve the paywall. TelemetryDeck anonymous signals tell us whether our paywall triggers make sense so we can adjust them. No personal data is involved.
  3. Comply with law. We respond to valid legal process and notify you unless the law prohibits it.

We do not use your data for advertising, to sell profiles, or to train AI models. We do not share your data with any party not listed in section 4.

4. Who we share data with

Three vendors. That is it.

We share with no one else. We do not sell, rent, or barter user data.

5. Children’s data

Concreto is a construction calculation tool intended for adults in the contracting, masonry, and building trades. The Free tier requires no account; no age verification is performed and no data is collected. The Pro sign-in requires a valid email address; by providing one, you represent that you are at least 13 years old. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, email hello@concretoapp.com and we will delete the account within 7 days. In some EU member states the minimum age for data-processing consent is 16; if you are under the age required by your country’s law, do not create a Pro account.

6. Data retention

7. Account deletion (Apple App Store Guideline 5.1.1(v))

You can delete your Pro account at any time from within the app: Settings → Account → Delete account. A two-step confirmation is shown before anything is deleted. Tapping “Confirm delete” calls a Supabase Edge Function that:

  1. Deletes your Supabase Auth user record.
  2. Cascades (via foreign-key constraints) to all rows in the jobs and job_photos tables.
  3. Removes all photo files from your private Storage bucket.

Your Pro entitlement (annual subscription or lifetime purchase) is a separate Apple IAP transaction on your Apple ID. It is not affected by account deletion and follows Apple’s own subscription and refund rules. If you have an active annual subscription, cancel it from iPhone Settings → Your Name → Subscriptions before deleting your account to avoid future charges.

8. Your rights

You have the right to:

To exercise any right, email hello@concretoapp.com. We respond within 30 days; in practice, within 48–72 hours.

9. Security

All data in transit between your device and Supabase is encrypted with TLS. Every table that contains user data has Row-Level Security (RLS) enabled — no account can read another’s data. The Supabase service-role key is never included in the app binary; it lives only in server-side Edge Functions. Photo files are stored in a private, user-scoped bucket that requires a valid session JWT to access. We do not use tracking cookies.

If we detect a security incident that compromises your data, we will notify you within 72 hours by email and, where applicable, the relevant authority.

10. Cookies and identifiers

Concreto is a native iOS app; it does not use cookies. We use:

11. Where processing happens

If you use Concreto from outside the United States and sign in to Pro, your data (Apple ID identifier, and saved jobs) is transferred to Supabase in the US. We rely on Standard Contractual Clauses and, where applicable, your explicit consent at account creation.

12. European Economic Area, United Kingdom, and Swiss users

If you use Concreto from the EEA, the UK, or Switzerland, the following applies in addition to everything above.

Data controller. MEAS Partners, LLC, 131 Continental Dr, Ste 305, Newark, DE 19713, USA. Contact: hello@concretoapp.com. We have not appointed an EU or UK representative because the app processes the minimum personal data strictly necessary to deliver a calculation service (Apple ID identifier for Sign in with Apple, saved job data you create) and does not conduct large-scale processing or profiling of EU/UK residents. The Free tier — used by the majority of users — processes no personal data at all.

Legal basis for processing (GDPR Article 6). We rely on (a) performance of a contract with you (Article 6(1)(b)) for Sign in with Apple authentication, saved job storage, photo storage, and subscription sync — these are the core Pro features you purchase; (b) consent (Article 6(1)(a)) for anonymous paywall analytics via TelemetryDeck, which you may withdraw at any time from Settings inside the app; and (c) legitimate interests (Article 6(1)(f)) for fraud and abuse prevention, with our interest in maintaining service integrity weighed against your right to privacy.

International transfers. Our processors Supabase (US-East) and Apple (US) are based in the United States. Transfers rely on the European Commission’s Standard Contractual Clauses (2021/914) and, where applicable, the UK International Data Transfer Addendum, together with supplementary technical measures (TLS in transit, RLS at rest, service-role key never exposed in the client). TelemetryDeck is based in Germany and processes data within the EU; no international transfer is required for that vendor.

Your rights. Under the GDPR / UK GDPR you may request access to, rectification of, erasure of, restriction of processing of, or portability of the personal data we hold about you, and you may object to processing based on legitimate interests. You can delete your account and all associated data from Settings → Account → Delete account. To exercise any other right, email hello@concretoapp.com from the address associated with your account; we respond within one month. You also have the right to lodge a complaint with your national supervisory authority (e.g., AEPD in Spain, CNIL in France, BfDI in Germany, Garante in Italy, the Information Commissioner’s Office in the UK, the FDPIC in Switzerland).

Automated decision-making. We do not make any decisions that produce legal or similarly significant effects on you using automated processing or profiling.

Retention in the EEA / UK / Switzerland. Same as section 6 above.

13. Calculation accuracy disclaimer

Every result produced by Concreto is an estimate. Concrete shrinkage, waste factor variation, mix-design differences, sub-grade settling, supplier product changes, and field conditions all affect actual material consumption. Results are labelled “Estimate only — verify with your supplier or engineer before ordering.” MEAS Partners, LLC is not responsible for over-ordering, under-ordering, or project outcomes based on Concreto’s outputs. See also the Terms of Service.

14. Changes to this policy

If we change anything that affects how we handle your data, we will:

  1. Update the effective date at the top of this document.
  2. Show an in-app notice the next time you open Concreto.
  3. Email the address on your account when the change is material (e.g., a new data vendor, a new use of your data).

If a change expands how we use your data, we will ask for your explicit consent before it takes effect.

15. Contact

For urgent requests (e.g., suspected unauthorized access to your account), put “URGENT” in the subject line. We respond within 24 hours.

Effective date: April 23, 2026 · Version 1.1