Privacy policy
Last updated: 5 September 2026. Host: fm.taskingnow.com.
This is a working privacy notice for TaskingNow-FM, a facilities and maintenance app operated by Scribble Solutions. Peter can refine this copy with legal review before a Play Store listing.
Who this covers
People who create a company on TaskingNow-FM, people invited to join a company, and Scribble vendor admins who operate the product. The product domain is fm.taskingnow.com. There is no .ca site for this app.
Account and sign-in
We store the email and password you use to sign in through Supabase Auth. Passwords are handled by the auth provider; we do not keep a readable copy. Session cookies are HttpOnly, Secure on HTTPS, and SameSite=Lax. If your employer archives your employee record, the next request signs you out.
Organization data
Managers enter company name, buildings, floors, rooms, people, schedules, assignments, cleaning duties, and repair notes. Chat messages are visible to other members of the same organization. We use this data only to run the app for that organization. We do not sell it.
Camera, stickers, and photos
The camera opens only after you tap Scan (or choose a photo for a repair or inspection). The app does not capture video or photos in the background. Sticker scan stays on the device long enough to read a barcode or the printed digits. Repair and inspection photos are uploaded to private storage under your organization and are shown with short-lived signed URLs.
Location
The app does not use GPS. “Location” in the product means the building, floor, and room you set up or scan — workplace places, not your device coordinates.
Chat
Organization chat is stored so members can see who wrote what and when. Messages are limited in length and treated as plain text, not rich HTML.
Who can see what
Access is scoped to your organization. Cleaners, managers, and admins see different screens. Scribble vendor admins can change product-wide settings and translations; they should not browse another company’s operational data through the vendor screens.
Where it runs
The website is hosted on Vercel. Database, sign-in, and photo storage are hosted on Supabase. Optional repair-notify and end-of-day report email uses Resend when that key is configured. End-of-day PDF attachments are generated by DocRaptor when that server key is configured.
Retention and your requests
Records stay until your organization archives them or asks us to remove an account. To ask about your data, contact your company admin or Scribble Solutions.