Privacy Policy

Last updated: June 20, 2026

MAGE ID ("we," "us," or "our") operates the MAGE ID mobile and web applications (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

Information We Collect

• Account Information: Name, email address, and password (encrypted) when you sign up.
• Project & Financial Data: Project details, schedules, estimates, costs, invoices, change orders, daily reports, documents, photos, and client/subcontractor contact details you create inside the app.
• Payment Data: When you send or receive payments, card processing is handled by Stripe; we do not store full card numbers. Subscriptions are handled by RevenueCat and the Apple App Store / Google Play.
• Device Information: Operating system, device type, and app version for diagnostic purposes.
• Usage Data: App interactions and diagnostics, via PostHog (product analytics), to improve the product.

How We Use Your Information

• To provide and maintain the Service.
• To authenticate your account and secure your data.
• To send transactional emails (account confirmation, password reset, invoices, notifications you opt into).
• To improve the Service through anonymized analytics.
• To respond to your support requests.

Data Storage and Security

Your data is stored on secure, encrypted servers provided by Supabase (PostgreSQL database, hosted on AWS). We use industry-standard encryption in transit (TLS) and at rest. Passwords are hashed using bcrypt and never stored in plain text.

Third-Party Services

We use a limited set of third-party service providers to operate MAGE ID. Each processes data only to provide its service to us:

• Supabase — authentication and database hosting
• Stripe — payment processing (when you send or receive payments)
• RevenueCat — subscription management, alongside the Apple App Store and Google Play
• PostHog — product analytics
• Resend — transactional email delivery
• Apple / Google — app distribution and in-app purchases
• Google (Gemini) and other AI processing vendors — strictly to deliver in-app AI features (e.g. estimate generation, schedule risk analysis, project summaries) on data you submit. AI prompts are not used to train third-party foundation models.

We do not sell or rent your personal information to any third party.

Your Rights

You can request to access, correct, export, or delete your data at any time — in-app (Settings → Delete Account) or by emailing help@mageid.app. We will respond within 30 days, except where law requires us to retain certain records.

California Privacy Rights (CCPA / CPRA)

California residents may access, correct, delete, or export their personal information, and opt out of any "sharing." We do not sell personal information. To exercise these rights, email help@mageid.app or use our Do Not Sell or Share page.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated project data is permanently removed within 30 days.

Children's Privacy

MAGE ID is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the app.

Contact

Questions about this policy? Email help@mageid.app.