Privacy Policy — Ask John

Who we are

Ask John is operated by John A Mullen ConTech Consulting LLC, a software company based in Waxhaw, North Carolina. Ask John is a super intelligence (SI) assistant and field toolkit for plumbing and mechanical contractors. It is business software for users aged 18 and over; it is not designed for children.

Contact us about this policy at jmullen86@gmail.com or +1 (631) 219-4190.

What we collect

We collect only the information needed to run the Ask John service. All of it is stored in our own database and is isolated by company: one shop cannot see another shop's data.

• Personal information: name, email address, account user ID, project and customer address, and phone number.
• Financial information: user payment information and purchase history. Payment card details are entered on our payment processor's hosted checkout page and are never stored by us.
• Messages: other in-app messages, meaning the questions you ask and the answers you receive in Ask John.
• Photos and videos: photos and videos you upload or capture in the portal, including field-capture video.
• Audio files: voice or sound recordings, meaning walkthrough voice notes and audio captured with field work.
• Files and documents: plans, specifications, submittal documents, contracts, drawings, cut sheets, and other project files you upload.
• App activity: app interactions (questions asked, token spends, toolbox talk plays, wallet activity, tools used) and other user-generated content (notes, estimates, schedules, submittals, schedules of values, contracts under review, walkthrough notes, and customer records you create).
• Push notification subscription (admin only, opt-in): if the account admin opts in to push notifications on a device, we store that browser's push subscription — its push-service endpoint URL and encryption keys — so we can send that device a notification. Customers never receive pushes, and no push subscription is created unless the admin opts in on that device. Turning push off deletes the subscription.

Push notifications

Push notifications are admin-only and opt-in. They are used only to alert the admin when an affiliate signs up or confirms, or when a token pack is purchased. A push is delivered through your browser's push service, which receives an encrypted payload it cannot read; the notification text is shown only on the subscribed device. You can turn push off at any time from the Account page or from your browser/device notification settings, which deletes the subscription from our database.

What we do not collect

• Device location, approximate or precise. Job addresses you type into a project are work records, not device location.
• Your device contacts, calendar events, health or fitness data, or device identifiers such as an advertising ID or device serial number. The one exception is the admin-only push subscription described above, which is opt-in and stores only the browser's push endpoint and encryption keys.
• Crash logs, diagnostics, or other app performance data from your device. We do not use analytics or crash-reporting software in the app.
• Race or ethnicity, political or religious beliefs, sexual orientation, or credit score information.

How we use your information

We use your information only for app functionality, account management, and developer communications:

• App functionality: to run the features you use — answer questions, build estimates, manage projects, invoices, schedules, and submittals, run toolbox talks, and store field captures.
• Account management: to create, identify, and manage your account and to credit token purchases to the correct account.
• Developer communications: to send you email about your account, such as sign-in links, booking notices, and deletion confirmations.

We do not use your information for advertising or marketing, for personalization or recommendations, or for analytics. We do not sell your information.

Who we share your information with

We share information only with the service providers needed to run the service, and only for the purposes listed above:

• Stripe (payment processor): when you buy token packs, your user ID, the pack name, and the price are sent to Stripe to process the payment. Your payment card details are collected by Stripe on its hosted checkout page, not by us. Affiliate payouts: when an affiliate links a payout account, their name, email, and affiliate code are sent to Stripe to create their Connect account, and Stripe collects their bank and tax details directly on its hosted onboarding pages — we never receive or store bank account numbers, card numbers, or tax IDs, only the Stripe account ID and whether payouts are ready.
• Resend (email delivery): your email address is sent to Resend so we can deliver sign-in links, booking notices, and other account emails to you.
• SI model provider (service provider): a question you ask, a photo attached to a question, a file you submit for document questions, drawing comparison, or submittal extraction, or an estimate or contract you submit for review, is sent to our SI model provider solely to generate that answer or review. That content is not sold and is not used for advertising.

Everything else stays in our own database. Field-capture videos and walkthrough photos are owner-only within your company and are not sent to any third party. Purchase history, names, addresses, and phone numbers are not sent to any third party except as described above.

How long we keep your information

• Account and work data: kept for as long as your account exists, and deleted when your account is deleted, subject to the exceptions below.
• Purchase and financial records: kept for 7 years after the purchase, for tax and accounting purposes. These records contain the amount, date, and transaction reference only — never your full payment card details, which we do not store.
• Anonymised usage records: aggregated, anonymised statistics that can no longer identify you may be kept indefinitely.
• Legal holds: if a record is subject to a legal obligation or an active dispute, we keep that record until the obligation or dispute is resolved.

Deleting your account

You can request deletion of your Ask John account at ask.johnamullen.com/delete-account, or by emailing jmullen86@gmail.com from the email address on the account with the subject line "Delete my Ask John account". We confirm deletion requests by reply email before deleting anything, and we complete confirmed deletions within 30 days. Any remaining token balance is forfeited on deletion and is not refunded. See the deletion page for exactly what is deleted, what is kept, and the rules for company team members and owners.

Changes to this policy

If we change this policy in a way that affects what we collect or share, we will update the effective date above and update our Play Console Data safety declaration to match. Questions about this policy go to jmullen86@gmail.com.