Privacy Policy

We collect only what the service needs to run. Nothing on this list is collected for advertising.

• Your account. Your name, email address, and password (stored only as a secure hash by our sign-in provider), your role in the app, an optional phone number and profile photo, and your settings such as notification and dark-mode preferences. Collectors also have an employee ID used for payroll. If someone invites you to the app, we hold the name, email address, and role they entered until you accept or the invite expires.
• Where you live or which properties you manage. The community, building, and unit a resident belongs to, including the street address, and the properties a property manager oversees. This is how the app knows which bins to collect and whose service record is whose.
• Service records and photos. Each bin scan (time, unit, and whether the scan happened inside the community’s boundary), pickup and bulk-item requests, reported violations, tasks, and service issues. Collectors photograph completed pickups, task proof, violations, and bulk items before and after removal. These photos are the evidence attached to the service record, and they are the reason the app asks for camera and photo-library access.
• Precise location, for collectors only, while clocked in. When a collector is clocked in, the app records their GPS position at each clock-in, clock-out, community check-in, break, bin scan, and task completion, and about every ten seconds while the collector home screen is open. Recording stops when the app is in the background or the phone is locked, so this is a set of verified points, not a continuous route. We turn clock-in and clock-out coordinates into a street address so timecards are readable. This confirms service happened at the right property, shows our dispatch team where collectors on shift were last seen, and supports accurate pay. Location is not collected from residents or property managers, and not from collectors who are not clocked in.
• Shifts and work hours. Clock-in and clock-out times, breaks and lunches, schedules, time-off and shift-swap requests, training completions, and a permanent record of every correction made to a shift and who made it. This is our payroll record.
• Messages. Conversations inside the app, including who is in them, what was written, and any photos attached.
• Payments. Bulk pickup payments are handled by Square on Square’s own checkout page. We never see or store your card number. We keep the payment status, amount, Square’s reference numbers, and any refund record so we can show you what was paid and settle disputes.
• Your devices, for notifications. If you turn on push notifications, we store the device token your phone or browser gives us, the platform, and when it was last seen, so we can deliver notifications and stop sending to devices that are gone.
• Error reports. If the app crashes or fails to load, it sends us the error message, the page you were on, your browser or device type, and your account ID if you were signed in. Nothing else about your use of the app is tracked.

Access in the app is separated by role. Each person sees only the part of the service they are responsible for, and these limits are enforced on our servers, not just in the app screens.

• Residents see their own unit, their own pickup requests and payments, violations recorded against their unit, and conversations they are part of.
• Property managers see the residents, units, service records, violations, pickups, and messages for the communities they manage, and nothing from other communities. They never see collector hours, pay, or location history.
• Collectors see the communities they are assigned to and their own shifts and timecards. Supervisors can also see and correct shifts for collectors in their own communities, and every correction is logged with their name.
• On The Fly staff (our administrators) see what is needed to run the service: all communities, service records, shifts, payments, and the live location of collectors on shift. If a staff member opens your account in support mode to help you, that view is read-only, expires on its own, and is recorded.

Beyond the people above, we share information only with the service providers listed next, or when the law requires it.

These companies process information on our behalf, only to provide their service to us, and are not permitted to use it for their own purposes.

• Supabase hosts our database, sign-in, and photo storage.
• Vercel hosts the app itself.
• Resend delivers our email, such as invitations, password resets, and notices.
• Square hosts bulk pickup checkout and processes card payments.
• Google provides the maps shown to our staff and turns collector clock-in and clock-out coordinates into addresses.
• Apple and Google push services deliver notifications to iPhones and Android phones.

• We do not sell your personal information, and we never have.
• We do not use your information for advertising, and we show no ads.
• We use no analytics or tracking tools in the app, and no third-party trackers.
• We do not store card numbers or bank details.
• We do not collect location from residents or property managers.

• While your account is active, we keep your information so the service works.
• Service and payroll records (scans, pickups, payments, violations, tasks, shifts, timecards, and the collector location points that support them) are business records. We keep them for as long as we are required to for payroll, tax, and operations, even after the people involved leave.
• Violation notices sent by email keep the recipient address for 30 days, after which it is removed and only a masked version remains.
• Error reports are deleted after 30 days.
• Messages you delete are removed from your view and can be restored for 30 days. Other participants keep their copy of the conversation. Our staff can withdraw a message for everyone.
• Invitations that are never accepted expire and are removed.

You can delete your own account at any time from Settings in the app. Here is exactly what happens:

1. You are signed out immediately and can no longer sign in.
2. For 30 days your account can be restored if you contact us. After 30 days the deletion is permanent.
3. At that point we remove your email address, phone number, profile photo, notification devices, preferences, conversation memberships, and your links to communities and units. Your email address is freed for reuse.
4. Your name, and for collectors your employee ID, stay on the records of work you were part of: shifts and timecards, pickups and their payment records, violations, tasks, and scans. We are required to keep these for payroll and business records, and they are shown only to the people who could already see them.

Accounts removed by an administrator, for example when someone leaves a community or our team, are held in a recoverable state until our staff permanently remove them. The same rule then applies: contact details are removed and work records keep the name.

• Location. Collectors can turn off location access in their phone settings at any time. The app will still work, but scans will not be location-verified and no location points will be recorded.
• Notifications. Turn push or email notifications on or off in Settings, or in your phone’s settings.
• Camera and photos. Access is requested only when you take or attach a photo and can be revoked in your phone’s settings.
• Your information. You can update your name, phone number, and photo in Settings. To ask for a copy of your information, a correction, or anything else, contact us using the details below.

The app is for adults using or providing a residential service and is not directed to children under 13. We do not knowingly collect information from children.

Questions about this policy or your information:

On The Fly Waste Solutions
Orlando, Florida
Email: info@ontheflywastesolutions.com
Phone: 407-274-5019

If we change this policy, we will update the date at the top of this page. Changes that affect how we use your information will be announced in the app.