Privacy policy

SkimSync is a tool for pool service companies. The company that services your pool is the business you hired. SkimSync stores the records that company enters so the office, the technician, and you can see the same visit.

We store company accounts, technician names, homeowner names, emails, phone numbers, service addresses, gate notes, pool readings, photos taken on a job, invoices, and payment status. Payment card numbers are entered on Stripe’s form. SkimSync does not keep the card number.

Photos and job notes are kept so the company can document the visit. A homeowner link shows that household’s visits. It is not a public directory.

If a company connects QuickBooks Online, SkimSync shares customer names, emails, service addresses, invoice lines, and payment status with Intuit. Intuit uses that to create or match customers, create invoices for completed visits, email those invoices, and report payments back. SkimSync stores the QuickBooks sign-in encrypted. It does not read bank feeds, payroll, or reports. Invoices already created in QuickBooks stay in that QuickBooks company if the connection is removed.

If a company turns on invoice email, Resend sends the invoice, a receipt, and at most one overdue reminder to the email on the account. The reply-to address is the company’s.

The site and the phone app are hosted by Vercel. The database is Neon Postgres. Job photos are stored in Vercel Blob. The map loads tiles from OpenStreetMap. Addresses are looked up with Nominatim and, if that refuses the request, Photon. A company can switch address lookup or drive distance to Google or Mapbox; those services then receive the address or the stop locations. Stripe processes homeowner payments for pool service (card, Apple Pay, and Google Pay) and, on the website, the company’s SkimSync subscription.

The phone app asks for the camera so a technician can take a photo of the pool or the repair. It does not read or save the photo library. Location is used only when you allow it, to measure the drive to a supply house. A finished job can sit in a queue on the phone until the network returns, and then it is sent to SkimSync. If you allow notifications, the app stores a push token from Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android), with the platform and the signed-in user, so a later route alert can reach that phone.

Sign-in uses an essential cookie named harbor_session. A short-lived cookie is used during two-factor sign-in and while connecting QuickBooks. These cookies keep you signed in. They are not advertising cookies.

We do not sell personal information. A company can export its invoices. The company owner can delete the company from Settings. That delete removes the company’s users, customers, jobs, invoices, push tokens, and photos, including the photo files in Vercel Blob, and asks Intuit to revoke QuickBooks access. An active SkimSync subscription is canceled. Stripe keeps the payment records it is required to keep. Demo companies are example data and reset nightly.

To ask for a copy or a deletion, email the pool company on your invoice or privacy@skimsync.app.

This policy is the public notice for the website, the installed phone app, and the stores that list it.