Privacy Policy
Last updated: 4 August 2026
1. Who we are
Guv is a job management app for trade businesses. It is operated by Glebefish Limited, a company registered in England and Wales (company number 14038854), whose registered office is at 1 Johns Road, Woolston, Southampton, SO19 9BW ("we", "us").
For privacy questions, or to exercise any of the rights in section 8, contact us at hello@guvguvguv.com.
2. Two different kinds of people, and who is responsible for their data
This distinction matters, because Guv holds personal data about people who never use the app.
Guv users — the business owners, admins and workers who sign in and use the app. For their account data, we are the data controller.
Customers of those businesses — the homeowners and clients whose name, address, phone number, email and signature a trade business records against a job. These people do not have Guv accounts and typically never interact with us. For their data, the trade business using Guv is the data controller and we act as a data processor on that business's instructions.
In practice: if you are a customer of a business that uses Guv and you want your data corrected or deleted, please contact that business directly — they control it. We will assist them, but we cannot act on their data without their instruction.
3. What we collect
From people who use the app
| Data | Why |
|---|---|
| Email address | Sign-in credential and account identifier |
| Password | Authentication. Handled entirely by Google Firebase Authentication; we never see or store it |
| Name | Shown to colleagues so jobs and messages are attributable |
| Phone number (optional) | So colleagues can reach you about a job |
| Your role, and which company you belong to | Controls what you are allowed to see and do |
| Notification token | To deliver push notifications about your jobs. Tied to your device |
About the trade business's customers, entered by its staff
| Data | Why |
|---|---|
| Customer name, phone, email | Identifying and contacting the customer about the job |
| Job address, and its map coordinates | Locating the job and providing directions |
| Signature, and the name of the person signing | Proof the customer accepted the completed work |
| Job details, notes and photographs | The record of the work itself |
Photographs are taken by workers to document work. They may incidentally show the inside or outside of a customer's property.
Collected automatically
| Data | Why |
|---|---|
| Crash reports — error details, device model, operating system version | Diagnosing crashes. Provided by Google Firebase Crashlytics |
| Usage data — which screens are opened, and actions such as creating a job or completing a sign-off | Understanding which parts of the app are used, and where people get stuck. Provided by Google Analytics for Firebase |
| An app instance identifier | Used by the above to group events from the same installation. Reset if you reinstall the app |
| Your user ID, attached to the above | So we can diagnose a fault affecting a specific user who reports one |
Crash and usage reporting is on by default.
4. What we deliberately do not collect
- We do not track your location. The app asks for location permission because the operating system requires it in order to convert a typed job address into map coordinates. That conversion is the only thing the permission is used for. The app does not record where your device is, does not track workers' movements, and does not collect location in the background.
- We do not use your data for advertising, and we do not sell it.
- We do not share your data with third parties for their own purposes.
5. Legal basis for using this data (UK GDPR)
- Performance of a contract — providing the app to businesses that have signed up for it, and to their staff.
- Legitimate interests — keeping the app secure, diagnosing crashes, and understanding usage to improve it. We have considered the impact on you and believe these uses are ones you would reasonably expect. Analytics data is not used to make decisions about individuals.
Where we act as a processor (see section 2), the trade business is responsible for establishing its own legal basis for holding its customers' data.
6. Who your data is shared with
Guv is built on Google Firebase, and Google acts as our sub-processor for authentication, database storage, file storage, push notifications, crash reporting and analytics. Google's handling of that data is governed by its own terms.
Data is stored in Google's London (europe-west2) region. Some Google services — including crash reporting and analytics — may process data outside the UK. Where that happens, it is covered by Google's data transfer safeguards.
We do not share your data with anyone else, except where we are legally required to.
7. How long we keep it
- Job records, photographs and sign-offs are kept for as long as the trade business's account is active, because they are that business's working records. The business decides when to delete them.
- Account details are kept while the account is active.
- Invitations expire automatically after 7 days.
- Crash and usage data is retained according to Google Firebase's own retention settings.
8. Your rights
Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have your data deleted; restrict or object to how we use it; and receive your data in a portable format.
To exercise any of these, contact hello@guvguvguv.com. We will respond within one month.
If you are a customer of a business that uses Guv, please contact that business — see section 2.
You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
Access is controlled by server-enforced security rules, so a business's data can only be read by members of that business. Passwords are handled by Google Firebase Authentication and are never visible to us. Data is encrypted in transit and at rest by Google. Changes to user roles and permissions are recorded in an audit log.
No system is completely secure, and we cannot guarantee absolute security.
10. Children
Guv is a tool for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.
11. Changes to this policy
If we make significant changes we will update the date at the top and, where the change materially affects you, notify you in the app.