Gear Pilot privacy notice

Effective October 27, 2026. This version adds Definitions and uses those terms throughout, and updates Company plan purchasing, the mobile apps, international transfers and the deletion worker. The previous version took effect on October 9, 2026 and was corrected on October 19, 2026. This notice covers Gear Pilot Account, app and company console information. New commercial sales are offered in the United States only.

Who this notice covers

This notice covers the 1f Gear Pilot service. That includes the web field app and company console at https://app.1feventtech.com, the Android app on Google Play, and the iPhone app, which is distributed for private testing through TestFlight.

1f Gear Pilot is operated by 1f Event Technology Solutions LLC. Contact: gpsupport@1feventtech.com or 656.251.8389.

For Company Jobs, the Company chooses who receives access to its Jobs and equipment records. We operate the service, and the Company also makes decisions about the business information it enters.

The 1f Event Tech website privacy notice at www.1feventtech.com/privacy does not cover the Gear Pilot app or console. This app notice covers them.

Definitions

These words have the meanings below wherever they appear in this notice.

Job. A piece of work that Gear Pilot tracks gear for, such as a show, an install or a production. A Job holds its equipment, Locations, assignments, deployment photos, notes, status changes and activity history, and a Company Job also lists the people assigned to it.

Equipment. The items tracked in a Job. Each item can have a description, asset tag, serial number, make and model, status, condition and Location.

Account. A Gear Pilot sign-in tied to your email address. You need an Account to buy a paid Personal plan or to work in a Company, but you can use Gear Pilot without one.

Phone-only use. Using Gear Pilot without an Account, by choosing Try it on this phone or Use this phone only. Your Jobs are kept only in the app's storage on that device or browser.

Personal. Use by one person. A Personal Job is a Job kept on your device rather than on our servers, whether you use Gear Pilot phone-only or signed in to an Account that has not joined a Company. A Personal plan, free or paid, covers one person and does not include sharing; signing in to buy or restore one does not upload your Personal Jobs.

Company. A business that sets up a workspace in Gear Pilot and invites people to it. A Company Job belongs to that Company: its records and photos are stored by our service and are available to the Company's Members according to their role. The Company decides who gets access and makes decisions about the business information it enters. Company plans are sold as Corporate plans, and "Corporate" in this notice refers to Company plans and their billing.

Member. A person a Company has invited and given a role: Company Manager, Job Manager, Engineer or Viewer. Job Managers, Engineers and Viewers see only the Company Jobs they are assigned to, and Viewers cannot make changes.

Company Manager. A Member with full access to the Company. A Company Manager can see every Company Job, manage people and invitations, use the company console, and move a Personal Job into the Company.

Company console. The web console at https://app.1feventtech.com that Company Managers use to manage people, Jobs, equipment and exports.

Personal and Company use

Personal Jobs remain on your device unless you explicitly export or share them, or a Company Manager confirms Move My Local Data for a selected Job into their Company. Account sign-in and store subscription verification may send Account or billing information without uploading your Personal Jobs.

Company Jobs are hosted. Their records and photos are stored by our service and are available to Members according to their role and the Jobs they are assigned to.

Information used by the service

Account information includes:

Job records include (for Company Jobs these are stored by our service; for Personal Jobs they stay on your device):

Photos you choose to attach are part of the Job record. Support requests contain the details and attachments you send us. The support diagnostic download contains counts without identifiers and is downloaded by the user; it is not automatically sent.

Device and technical information

When you sync with a Company, the service registers an app installation identifier linked to the signed-in account. It also records platform or browser information, including the full browser user-agent string, and a last-seen time.

Hosting, authentication and email services may keep connection and security logs, including IP addresses. These records support access control, synchronization, troubleshooting and service security. Supabase keeps project logs for 7 days on our Pro plan, and Resend keeps email logs for 30 days. Cloudflare and other providers keep their own logs under their policies.

Photos, scanning and Locations

The camera or a selected image is used when you choose to scan equipment or attach a photo. Label recognition processes images on the device; identifiers saved to a Company Job are then synchronized.

When you add a new deployment photo, you can choose an image up to 20 MB. The app re-encodes it as a new image no larger than 1920 pixels on its longest edge and 2 MB, which removes embedded metadata such as camera details or location.

Where photos are kept depends on the Job:

Some photos may keep their original file contents:

Those files may contain embedded metadata, such as camera details or location. We do not promise that metadata is removed from those photos. Avoid including people, credentials or unrelated private details.

Gear Pilot Locations are Job places that users enter, such as Main Stage or Warehouse. The app does not request GPS location. A user can still enter an address, or upload a photo that contains location metadata.

Personal Jobs and offline copies

Signing in to a Company does not automatically upload Personal Jobs.

A Company Manager can choose to move a Personal Job into their Company. The move happens only when the Company Manager starts and confirms it, one Job at a time. It copies that Job's records and referenced photos into a Company Job. The original Personal Job and its backups stay on the device.

When you are signed in to a Company, the app downloads the Company Jobs you can access for offline use. It stores queued field actions and photos on the device until they synchronize. A local copy may remain on a device after records on the server change.

Synchronize queued work before signing out or removing app data. Removing the app does not delete cloud records or exported copies.

How information is used

We use information to:

The email senders supply no per-message tracking settings. Resend configures open and click tracking at the sending-domain level; we do not promise that email open or click tracking is disabled for every message. We do not infer that tracking is disabled from default settings or from the absence of application parameters.

The application has no advertising SDK and no cross-app advertising identifier. We do not sell customer data or use it for targeted advertising.

Subscriptions and purchases

Personal plan billing and restoration are separate from Company (Corporate) plan purchasing. The app reconstructs Personal plan status from store-verified entitlements. Android Personal billing uses Gear Pilot sign-in and server verification without requiring you to join a Company; verification retrieves profile name, email address and account UUID, can send account identifiers and purchase information, and can retain account-bound purchase claims. This does not upload your Personal Jobs.

Apple and Google process store payments under their own terms. Gear Pilot does not receive card details through the store integration. Subscription verification may use product identifiers, transaction or purchase-token information, account binding, subscription state and verified period dates.

Personal Google purchase tokens remain native until the verifier request. The Company (Corporate) plan flow in the Android app passes raw store proofs through the app bridge to server verification transiently; the checkout controller does not persist those raw proofs. The Google order API response can contain buyer address information; the verifier strips that field rather than placing it in normalized grant evidence. Provider logs may retain related metadata under their policies.

Company (Corporate) plans are sold through Google Play in the Android app, in the United States only. Company plan purchasing uses Company and buyer bindings, current subscription and trial status, and verified prior history to enforce the approved plan. Company plans are not yet sold on iPhone.

Who can access information

Within a Company, Company Managers can access every Company Job, and other Members can access the Company Jobs they are assigned to, according to their role. Service administration and support may need access to investigate problems or operate the service.

Providers used for the current service include:

Status signals are intended to carry backup and monitoring status, not Job or equipment records. Apple and Google separately handle store accounts and app distribution under their own policies.

Resend states that it stores data in the United States. Its published security policy describes limited email processing by RunPod for trust and safety on Resend-operated infrastructure; ordinary email API requests are separate from its optional AI email editor and AI support features. This describes provider policy, not a new Gear Pilot AI feature.

Storage, security and transfers

The production database is hosted in the United States (Supabase on AWS us-west-2, Oregon). Supabase states that its logs are stored in EU data centers, so log data may be processed outside the United States. Some providers, such as hosting and content delivery networks, may process information in other locations. Users outside the United States should expect their information to be processed in the United States. New commercial sales are offered in the United States only. Restricting sales does not prevent international provider processing or change previously collected information.

Access controls, encrypted transport and encrypted recovery archives are used to reduce risk. Authorized service access remains possible. This is not a claim of end-to-end encryption or a guarantee against loss or unauthorized access.

Supabase and Resend publish Standard Contractual Clauses for covered international transfers. Cloudflare describes those clauses in its standard customer agreement and additional Data Privacy Framework coverage. These mechanisms do not promise that information remains in the United States or that every provider processes information only in the database region.

Retention and backups

This retention applies to Company Jobs stored by our service. Active Company Jobs remain available while in use. The approved policy is to keep a Completed Company Job and its photos for one year after the Job is marked completed. Reopening the Job resets that period. Personal Jobs stay on your device until you delete them or remove the app's data. The production deletion and retention worker is scheduled daily at 08:47 UTC, and GitHub may start a scheduled run a few hours later. Per GitHub settings and run history checked on October 27, 2026, that worker is enabled and runs daily. A saved account-deletion request is normally processed within a day or two, and within 30 days. The same worker can remove a Completed Job after the one-year mark. Encrypted backup archives are not currently expired on a 30-day schedule. Those backups may still contain data until they are replaced or removed. We will not restore a deleted account from backups.

The CSV export is not a complete backup. It does not include deployment photos or all account, assignment and activity-history records.

The company console provides Export Job with photos. An authorized export includes selected Job records and referenced photo files, and fails rather than claiming a complete archive when required content is unavailable. This export is separate from scheduled retention cleanup and from an independent disaster-recovery backup.

The hosted database is backed up daily, and these backups do not include photo files. On our Supabase Pro plan, daily backups are kept for 7 days. Whether point-in-time recovery is enabled is being confirmed. A separate production backup of photo files has not been accepted as operating. Copies that were exported or stored on disconnected devices cannot be recalled remotely.

Recovery controls are designed to preserve deletion decisions when restoring archived data. This does not guarantee photo-inclusive production recovery.

The approved support-email policy is recoverable movement 100 days after case closure. The process covers conversations addressed to the exact gpsupport@1feventtech.com alias; rewritten recipients are skipped. These scope limits do not prove every conversation is processed on that schedule. Movement to deleted items is recoverable during the mailbox provider's recovery period and is not permanent erasure.

Resend’s published policy states that email content and delivery logs are retained for 30 days on its Free, Pro and Scale plans, backups for seven days, and remaining customer data is deleted within 90 days after account termination. These are provider policy statements; we have not sampled deletion or promised the same schedule for Gear Pilot account, support or billing records. The current Resend account showed Transactional Free.

Supabase documents an accessible log window of seven days for Pro, with possible reductions under quota enforcement. A dashboard query window is not a promise that all provider security records or backups are purged on that schedule.

Terms and legal acceptance records are deleted with the account. Billing records are kept for tax purposes and are no longer linked to the person. Purchase claims, anti-replay hashes, Play session and Integrity ledgers, and provider logs are not on the Completed-Job schedule. We retain those records for subscription verification, prevention of duplicate claims and service security. They do not have an automatic purge period under the Completed-Job policy. You may contact support about access or deletion; security and subscription-verification obligations may require some records to be retained. A verification freshness window is not a data-retention period.

Your choices and privacy requests

For a privacy question, or a request to access, correct, export or delete information, contact gpsupport@1feventtech.com. Identify the Gear Pilot Account and, if any, the Company involved. Do not send passwords or sign-in links.

We may need to verify the request and coordinate with the Company responsible for the records. Available rights and exceptions depend on the applicable law.

Removing someone from a Company, deleting an Account, deleting records and deleting Personal Jobs or other data on a device are different actions.

Signed-in release builds of the web app include Delete my account in Settings. The Android app on Google Play and the current iPhone test builds include the same control and connect to the production service. Older installed builds may not include it. Request account and data deletion gives the in-app steps, the email route when you cannot use the app, what is deleted, what is kept, and the timeline.

Deleting the account does not cancel a store subscription. Subscriptions bought through Google Play or the App Store must be cancelled in the store.

Intended audience and changes

Gear Pilot is intended for business equipment and event operations. It is not directed to children. Tell us if information was supplied inappropriately.

We will update this notice when our data practices change and show the effective date of the revised notice.