Privacy & cookies

Graft (graftdiary.com) is a diary, job book and money app for building firms. If you have any question about your data — or want it corrected or deleted — email info@graftdiary.com and a person will reply.

Graft stores what your company puts into it, so the firm can run on it. That means:

• Accounts— each person's name, work email and what they're allowed to do in the app. Owners can also record a day rate for wage sums.
• Jobs— site addresses, what the work is, dates, who's on it, and notes the crew write on the day.
• Photos and receipts — pictures taken on site and receipt photos attached to expenses.
• Money records — expenses, payments in, quotes and job prices.
• Holiday— who's off and when.

We store it because you asked us to — it's the product. We don't buy data about you from anyone else, and we don't watch how you use the app. Three housekeeping records are the only things we keep that you don't type in yourself:

• The date you last used Graft. One date per person, overwritten each time — not a history of when you signed in, and nothing about what you did. It tells us whether a firm has actually got going, so we know who needs a hand and which accounts are dormant.
• What the assistant cost.If you use the AI, we record that a request happened and what it cost to run, so the credit on your account is right. Your question and its answer aren't kept after it's answered.
• Daily counters.A running count of a few actions — sign-ups, AI requests, quote files — so nobody can hammer the servers. They're numbers in a box, thrown away after a couple of days.

That's the lot. There's no record of which screens you opened, how long you spent, or what you tapped.

Your company's data is only visible to your company.Every record is locked to your firm at the database level. Inside the firm, the app shows each person what their role allows — workers don't get the money screens; owners do.

The people who run the Graft platform can access accounts for support — setting your company up, fixing a problem, deleting an account when you ask. Nobody else gets access. We never sell or share your data with advertisers, and we'll only hand data to anyone else if the law makes us.

One honest detail worth knowing: photos and receipts are stored at web addresses that are practically impossible to guess, but anyone who had the exact link could open that one image. Don't paste those links anywhere public. Everything else — jobs, money, notes — needs a sign-in, full stop.

Graft runs on established infrastructure providers: the database, sign-in and file storage are hosted by Supabase, and the website is served by Vercel. They store the data; they don't use it. If you email us, that email is handled by Zoho Mail.

For as long as your company has a Graft account — the whole point is that your job history and books stay available to you. If your firm leaves, we delete the company's data on request. Individual accounts can be deleted at any time by asking your company owner, or us.

Under UK data protection law you can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or object to how it's used. Email info@graftdiary.com — no forms, no runaround. If you're not happy with our answer you can complain to the ICO (ico.org.uk), the UK's data watchdog.

Graft sets no tracking cookies. None.No advertising pixels, no analytics trackers, no third-party scripts watching what you do. That's why there's no cookie pop-up on this site — there's nothing to consent to.

The app does use your device's own storage for things it can't work without:

• Staying signed in— so you don't type your password every time you open the app on site.
• Half-typed work— if you're filling in an expense and lose signal or close the app, the draft is kept on your phone so you don't lose it.
• Unsaved changes— anything that couldn't reach us because of bad signal is held on your device and sent when you're back in coverage.

All of that stays on your device, is essential to the app working, and is never used to track you. Signing out clears your session.

If we ever change what we collect or how we use it, we'll update this page and put the date at the top. We won't quietly start doing something this page says we don't.